nixos/spec/library/acme.nix

{
  security.acme.certs = let
    cloudflare = {
      dnsProvider = "cloudflare";
      credentialsFile = "/nix/persist/secret/cloudflare";
    };
  in {
    "514fpv.io" = cloudflare;
    ".514fpv.io" = cloudflare // { domain = "*.514fpv.io"; };
  };
}