acme: RestartSec = 15 * 60

letsencrypt/resolve.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ config, lib, ... }:
 let
   domain = config.selfprivacy.domain;
 in
@@ -10,6 +10,10 @@ in
           StartLimitBurst = 5;
           StartLimitIntervalSec = 5;
           Restart = "on-failure";
+          RestartSec =
+            if lib.versionOlder config.system.nixos.release "23.11"
+            then 15 * 60
+            else abort "since NixOS 23.11 (#266155) ACME systemd service restart intervals should have been fixed, thus no workarounds are needed";
         };
       };
     };