diff --git a/spec/library/acme.nix b/spec/library/acme.nix
index 82a71ff9..7fec425c 100644
--- a/spec/library/acme.nix
+++ b/spec/library/acme.nix
@@ -1,18 +1,11 @@
 {
-  security.acme = {
-    acceptTerms = true;
-    defaults.email = "koishi@514fpv.one";
-    defaults.group = "nginx";
-    certs = let
-      cloudflare = {
-        dnsProvider = "cloudflare";
-        credentialsFile = "/nix/persist/secret/cloudflare";
-      };
-    in {
-      "514fpv.io" = cloudflare;
-      ".514fpv.io" = cloudflare // { domain = "*.514fpv.io"; };
+  security.acme.certs = let
+    cloudflare = {
+      dnsProvider = "cloudflare";
+      credentialsFile = "/nix/persist/secret/cloudflare";
     };
+  in {
+    "514fpv.io" = cloudflare;
+    ".514fpv.io" = cloudflare // { domain = "*.514fpv.io"; };
   };
-
-  environment.persistence."/nix/persist/fhs".directories = [ "/var/lib/acme" ];
 }
diff --git a/spec/library/default.nix b/spec/library/default.nix
index 63c4fb6a..aa0147d2 100644
--- a/spec/library/default.nix
+++ b/spec/library/default.nix
@@ -13,6 +13,7 @@
     fs.extPersist.device = "/dev/disk/by-uuid/ba3d0989-9f81-4ac0-b5a7-124c86835cfa";
     fs.extPersist.fsType = "ext4";
     oci.enable = true;
+    acme.enable = true;
   };
 
   networking.proxy = {