{
  lib,
  config,
  ...
}: let
  dataDir = "/var/lib/acme";
in {
  options.services.reverseProxy.impermanence.enable = lib.mkOption {
    type = lib.types.bool;
    default = config.services.reverseProxy.enable && config.storage.impermanence.enable;
  };

  config = lib.mkIf config.services.reverseProxy.enable {
    storage.datasets.replicate."system/root" = {
      directories."${dataDir}" = lib.mkIf config.services.reverseProxy.impermanence.enable {
        owner.name = "acme";
        group.name = "acme";
      };
    };
  };
}