nix-config/nixos/common/acme.nix

{
  security.acme = {
    acceptTerms = true;
    defaults.dnsResolver = "8.8.8.8:53";
    defaults.group = "acme";
  };
}