{
  lib,
  config,
  ...
}: let
  dataDir = "/var/lib/acme";
in {
  config = lib.mkIf (config.host.impermanence.enable && config.services.reverseProxy.enable) {
    environment.persistence."/persist/system/root" = {
      enable = true;
      hideMounts = true;
      directories = [
        {
          directory = dataDir;
          user = "acme";
          group = "acme";
        }
      ];
    };
  };
}