{ config, lib, ... }: { options.addons.lan-certs.enable = lib.mkDefault true; config = lib.mkIf config.addons.lan-certs.enable { security.pki.certificateFiles = [ ../certs/wilkuu_ca.crt ]; }; }