A working, production implementation of a NixOS Let's Encrypt cert