{...}: {

  services.httpd.enable = true;
  networking.firewall.allowedTCPPorts = [ 80 443 ];

  environment.persistence."/persistence".directories = [
    "/var/lib/certs/"
  ];
}