nix-infra/hosts/coturn/acme.nix

{ ... }:
{
  security.acme.certs = {
    "turn.nekover.se" = {
      listenHTTP = ":80";
      group = "turnserver";
      reloadServices = [ "coturn.service" ];
    };
  };
}