cfg/host/roam/modules/security.nix

{ ... }:
{
  security = {
    acme = {
      acceptTerms = true;
      defaults.email = "acme@henri-dohmen.de";
    };
  };
}