{...}: {
  security.pki.certificateFiles = [
    ../../data/internalCA.crt
  ];
}