{ base-domain, ... }:
{
  security.acme = {
    certs.${base-domain}.extraDomainNames = [
      "${base-domain}"
      "sourcehut.${base-domain}"
      "meta.sourcehut.${base-domain}"
      "git.sourcehut.${base-domain}"
      "docspell.${base-domain}"
      "teedy.${base-domain}"
    ];
    acceptTerms = true;
    defaults = {
      email = "khais.colin+letsencrypt@gmail.com";
      dnsProvider = "namecheap";
    };
  };
}