sudo -> doas

host/nix.nix

@@ -13,6 +13,5 @@
     trusted-users = [ "root" ];
     auto-optimise-store = true;
   };
-
   nixpkgs.config.allowUnfree = false;
 }

host/roam/default.nix

@@ -9,6 +9,13 @@
     ./services.nix
   ];
 
+  security = {
+    acme = {
+      acceptTerms = true;
+      defaults.email = "acme@henri-dohmen.de";
+    };
+  };
+
   # ====== DON'T CHANGE ======
   system.stateVersion = "24.11";
 }

host/roam/security.nix

@@ -1,9 +0,0 @@
-{ ... }:
-{
-  security = {
-    acme = {
-      acceptTerms = true;
-      defaults.email = "acme@henri-dohmen.de";
-    };
-  };
-}