/configs/pki/
../
certs
default.nix