Selfsigned ssl certificate with nixops

Help
1

I keep hitting the limit rate of ssl certificate renewal.
How could I generate a self-signed certificate for an nginx server ?
There is security.acme.preliminarySelfsigned that seems close to what I am aiming but I cannot make it work.