Fixing the anubis errors

hosts/vm/reverseproxy/default.nix

@@ -11,7 +11,6 @@
   boot.loader.grub.devices = [ "/dev/sda" ];
 
   users.users."nginx".home = "/var/lib/nginx";
-  users.users."anubis".extraGroups = [ "nginx" ];
 
   crans = {
     enable = true;

modules/services/reverseproxy.nix

@@ -160,11 +160,15 @@ in
       };
     };
 
-    age.secrets.anubis-secret = {
-      file = ../../secrets/reverseproxy/anubis-secret.age;
+    age.secrets.anubis-secret = mkIf cfg.enable {
+      file = ../../secrets/common/anubis-secret.age;
       owner = "anubis";
     };
 
+    users.users."anubis" = mkIf cfg.enable {
+      extraGroups = [ "nginx" ];
+    };
+
     services = mkIf cfg.enable {
       anubis = {
         defaultOptions.group = "nginx";

secrets/common/anubis-secret.age

@@ -0,0 +1,57 @@
+age-encryption.org/v1
+-> ssh-ed25519 2k5NOg vJx0IZOYhHz43vQzVr1l3WKOA47KvuZHABbjCSkyDyc
+dpPto7vF79CyFr48PbtSxCAD+ZJCsl5I4ay7SdzVt/8
+-> ssh-ed25519 IJtQuw yLKjZrRQwfCEcjXWt+xLbIEeGmjKk+L1Sd8BynfWSDM
+c1A2aP/00gd+RNJ0U7JbsCEKt3SIjPdBK7oyitTzcE8
+-> ssh-ed25519 7aCZxQ RmKLxBTLB25TDXljK+tcaaYEbKA4lIav0SFkOARxAQ0
+yXBoYj5M3oUOhPIka2QlUiOjuDksAnmHEqbLwufT/kw
+-> ssh-ed25519 iTd7eA JCtRRxf6p0II9f+5A8mrrYlCcW8iWxFi5rJ6NEXbVR8
+OYs5n3sbtnF/mDzz3fn6q2VNisIaGhffNUFLdsadsek
+-> ssh-ed25519 h5sWQA 7EEuz/l+sEkcVaDkjqbSlhLwU44XnAdKU3KeJpZUyzc
+CFFzEx79IWvDSxdGwANKf2n9+LZ0a6D/1k0VqawsxWU
+-> ssh-ed25519 /Gpyew h/Gh1PlQvDdQdtiXT9Ghjm2pQSzog3sYWnJsCervzGM
+hrt71rpDuzq+rDC9STBYQV4ftHq3xIFrsvLfwhNjRDU
+-> ssh-ed25519 APVFfA FquBOApkpOrMaucnMbH+jpaDXpmXii15R1sVrZelCXU
+4INSA4kJkbqwogN+4rSEMdsTQfEmJ52WZenMMzP0rzE
+-> ssh-ed25519 FtI9pg 9FAWkNL+cYSlQf7esPYkTdwbAiQ52i/qiVOGSvFou20
+g1cpR4lEg2RkcaqPDMq1DDT/Fq1kJCW5phm/twztDQM
+-> ssh-ed25519 hTlmJA h9NBQhMmJBMa8j8vkYPWt8E2JjML3bftoN6cPJJF0wA
+MgUcTPi1kwuZ0o/X+Xsytbd3Dh89GmAhil9lmiX3ep4
+-> ssh-ed25519 GCcVXA eRV5eomZ2Gea7sAnisWg3Pl3u+7irf6oCqKonOu0Vg0
+Mv6jVtjhysRNYbuKv7y3YkiVDZ+SXg8gqw8YKRgzsDk
+-> ssh-ed25519 LAIH1A nqt1T1SWAqCQjDFyQ6hRNv8YjGXTddTgG/hFrsZgSSE
+UtmklHs7LGauKBIL+a8AhynpTrgUI6VytZ4Wbb34kco
+-> ssh-ed25519 qeMkwQ lO+FiKqQoBnMGO67A1TXR1YzF7/QTacv2ts09VzXyys
+iNMOd/p1RdE62P/iq4lTDfAOpeBElHW/WpD06HwrnoY
+-> ssh-ed25519 TqxOLw 1yJ//aVMQuQk53miM7jXcmoUHyuHHGgmj/HZaQgdWFQ
+OOXlGGLq9c+oMeYbSJtMabswOsLmrFaV61OKp9JgVbY
+-> piv-p256 ewCc3w A96w0Iu7gjTE78vUYKYc4qkfNxSQ3Dc7UZ57NaybW3aM
+x4dolBQvdVXPH9WG4Acfb5P3+P0XGYnatTdWbMAdc54
+-> piv-p256 6CL/Pw AjWilABi8S/6z54406QUcbDkvdE7WnZNQqHKlW9wsILW
+nXKMLlxnKNFVrVt/bA0I1/BADO0ISZcTyUAMlSbH86w
+-> ssh-ed25519 eOAUSg oTX5olmW+vDTSnQP22OUWiCWdur4BskfynxVqxKr8Vo
+SnRdaMHMuA6lkj4vY3fVbRefTYpeGUrlazEbrWDDdhM
+-> ssh-rsa REaZBA
+IDJz8Nih/2SwgBQF/8bFV9v3khRMNLOnzpxO6gB0yGXt+EIHj0Qv+epZCjvzVTfQ
+o+8xYIwR6vWoii5tiAm0EWCwnd9JDv+QKINVmqP8giAgDrvEJB8M4WymalSZBAST
+waa/oNjWJ2mw+5KUJmccYnuVwv8e2mkw9hESVVCth+iHw+VnEUFizdwIs2xpMtXG
+TBjHlY3VoKZVhsIx8fEFaonIXr6oS4p465f88Lyp0XNkaYoHoNmf/HUynForKj64
+nfvespj+/WA9kEtioS3kZ3H6RFz4n8Iu+ChtZCWvhBV1Fh/et00wekT4Cj8Vp3Xx
+73PcuWX38sA+29OLJJeHrCbytP7AKr4l1EO5v8PIAwENMOKF8E86Eo3pFfole+AW
+N3GjoDpPRkDI6AROGTgEzwTAcNPFpS/eU+MMmk+YOaxH+Zw8QE46JLJuKwoXXPWT
+UWDfp+svZl28SXvX07OhaD70X/tNh4I3L0V/mulfUtLVSROxWqsCyXonrMc1l4q3
+
+-> ssh-ed25519 J/iReg I1r8WgXiwvpW3Wdh7n+x3klmmP8DPsOr3MAjtrGUTys
+srbX2alz5IJmTpHbABXxCh9MojoBeZkGnLjrA1NnXNM
+-> ssh-ed25519 GNhSGw OYRIC2Z05IpY878QYLp5Vl0HmmFkMZtax1ISHjG1wT4
+hvVddsGpxnWezoXFOZwzz0q7nVKUYavs6onJ3RBUVIw
+-> ssh-ed25519 eXMAtA 3CaW+F37vX+MVcoO7wfS0DzN619wnffDJAFm1BMWskc
+3AIAwh9zUIaltgyHCjlFQp9RFQT2tJSYtW8K+oe7xDI
+-> ssh-ed25519 5hXocQ KOGkQVn2hBVDwmEbjPPrvf5G1djDgkHi2BIE524fnzs
+JiIuepxmUsDM0Af8oMi1e30iOMjMW4DGUORiK3kaMvs
+-> ssh-ed25519 bRHVVA pHXhoEa1gSrFbLCP/1EbipOBjUsVhDpJg5xwScxn4BM
+VnvQjfhUYK4ozuEKqAZC8EUznviRoh2VRNoOqUVdwYM
+-> ssh-ed25519 HgW9eA y3xPFwKkNwurIIsAxOdLojfxa6OIID9PU/fI/i6fVkQ
+RH1Sq4WwqAa/6yWHAVcgXVmoEsNBmECas1AIseNutcE
+--- nAgOtvCchgYapVbzIA4CW3r7ntg9mCXGEYuCdtBgZHA
+=;àß”arÇÚa8±g~óøÏ{}Ka[Bû]gf'¢}‹¹þ8[yÂKïæƲ]«Ñž+kµƒ\$†Ö<>NU(&ùÎ÷5o"^Ö¼©0!È÷ØécÛ²Vœë(á

secrets/reverseproxy/anubis-secret.age

@@ -1,33 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 GCcVXA qD1f4YdP88JvuPLS6H416O0LF+rKN/gJ+gPf0lFWIRs
-B0LuHjXX0UiHHTwY7v1HqP4VF5/5yn0d/gNW4zUOC5w
--> piv-p256 ewCc3w A8Wnjz7tLNpV/m5bUzuq/MBTHn+jQiaCSUb4vFvGDH7N
-gNBEsgdHogaz3OSJBelB39bGrOBt8+hkNXpAYcFcy28
--> piv-p256 6CL/Pw AoJBcpyhK+hpZOfHOBUHh0Kivvn6YJ4xepo7IWppbMuJ
-f1fwsu8okH7F+6nSHowxHpTdtjU72lvd6FmwFIMmV8E
--> ssh-ed25519 eOAUSg 0bH2dDdNzKapr54HKndKJpKO5iTQtbhY957NIJQcvBo
-LYVsTuKNsE4JlBxbf2e+Qo9ZjRxnz6saEHEjyfCcAjc
--> ssh-rsa REaZBA
-Pho7O15lWd5/2Uy1OQmA/JzE0wmOji6IPKGj03nK9aYSQjsTTc30YhNCrkddglGX
-MCClDyGDlQ0mCwHKVfpFeeSC9VQWQDDYk90dM4MF//6hHPqU/zn8dR25NyxDgyyi
-DVrCFB+S09LsKI4isbDoCru6fWXfdN4Fj8I44c64dBpIVh4XhSzUtmlzmge//35C
-y6EvAjVIhVTbbgnQ5CJFgnRlSPaN5BHDq76aJ3c+8Ajkjowa2YcYu7w8asi7PsIs
-WH6J2qMIPvPdxOEKczGc401ysUfz9fNFKs0Xx4spduwv8I3Sv4ImURDkYmCl/k7J
-rwRXbUGr8JzZu093cmkjVxDrSfb9VhqlZVJD7uc2VSTk8ntwStLWafSuE03bIN2L
-on0t/4/wXtvFtwlGoDe9QGYAJpPYWM0ZUPMZfpddOz9vYvL1+6nUcDroLMvCIItI
-blwJZ0970K/Je99SmI3+6mUEAw8nJ/pBFaF/LmTJecypLEalLNsu2IALyCMIdTa0
-
--> ssh-ed25519 J/iReg fpgi4t31rVl+KvOYd0Ph0Nd2gInJAZXNhQC5ekpv0kI
-lznh3YwmqVr05vjWxf1HKRWAFZGXbypAYygjUe+ELlk
--> ssh-ed25519 GNhSGw 2cVptD/h5NWcYsjPPwQcP/b9tjJPDbhjDKh2hKhA5GM
-JZvQvXkb1RRw+NHnJ+HMV5tlwiBnLf4+cwm6J2hZD9Y
--> ssh-ed25519 eXMAtA axP3hHgfgWJScGLIGpYgu0iYW1qZRQzMK9XjIeszrnc
-rBzAqSVoRqj/drZSOlxSIZLgZZU/wqGML1gKCEHtcy4
--> ssh-ed25519 5hXocQ b3kjoM+FfQ434V7X8FdpIHVFjTn4sc+psj+9jyRljxU
-l5rna7ap0ydVXPCSr4qrPnu2MV2n7XwoSh/T87OkuMU
--> ssh-ed25519 bRHVVA 92Rj1gMmueSHWzxsKWVs+7nF4JzuekhfaB2u5AWnazk
-yg4qa9lyHsGCOXWOTm7/XH9F8JzvRLjzsxyXe88oXnE
--> ssh-ed25519 HgW9eA mpIFRqMXj08JuyYLf6Hx4p9fOLbxXZquSMAjh0e/lSU
-h1kvwnu+mLOeRfVFUXgE9IDo/MQ+4gtkYwrF3JWQfwY
---- MCDm2NH5NWgwnFYQ+zJ4obfdxWpiv3BGohnIJ1bRkco
-_Ö¹`ðãFËÉÑvF3[;œç197%»4¼90MÞ[ï¼Ip¢:Ÿs|ÈñC<C3B1>RÃ6,CÔè÷;á[³;<§Éû¤b(´fqÀg8îp÷p÷
÷Dk p/ÐwîÒ¿$9Ý\