_: {
  services.murmur = {
    enable = true;
    openFirewall = true;
    hostName = "";
    welcometext = "Goooooood Morning New Eden!";
    registerName = "new-eden";
    password = "new-eden";
    bandwidth = 128000;
    sslKey = "/var/lib/acme/buffet.sh/key.pem";
    sslCert = "/var/lib/acme/buffet.sh/fullchain.pem";
  };

  security.acme.certs."buffet.sh".postRun = "setfacl -Rm u:murmur:rX /var/lib/acme/buffet.sh";
}