From 12fe631737bedf7f9a779acecb477db52cd94c07 Mon Sep 17 00:00:00 2001
From: Pyjacpp <pyjacpp@crans.org>
Date: Mon, 27 Jul 2026 16:31:42 +0200
Subject: [PATCH] =?UTF-8?q?anubis:=E2=80=AFyavait=20un=20../=20de=20trop?=
 =?UTF-8?q?=E2=80=A6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 modules/services/reverseproxy.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/modules/services/reverseproxy.nix b/modules/services/reverseproxy.nix
index 6086350..8dd4dfa 100644
--- a/modules/services/reverseproxy.nix
+++ b/modules/services/reverseproxy.nix
@@ -158,6 +158,11 @@ in
       };
     };
 
+    age.secrets.anubis-secret = {
+      file = ../../secrets/reverseproxy/anubis-secret.age;
+      owner = "anubis";
+    };
+
     services = mkIf cfg.enable {
       anubis = {
         defaultOptions.group = "nginx";
@@ -174,7 +179,7 @@ in
               REDIRECT_DOMAINS = "${vhostName}.crans.${mainTld}";
               SOCKET_MODE = "0660";
               # Secret partagé entre les instances
-              ED25519_PRIVATE_KEY_HEX_FILE = "${../../../secrets/reverseproxy/anubis-secret.age}";
+              ED25519_PRIVATE_KEY_HEX_FILE = config.age.secrets.anubis-secret.path;
               # OpenGraph config
               OG_PASSTHROUGH = vhostConfig.anubisOpenGraph;
               OG_EXPIRY_TIME = "24h";