diff --git a/host-specific/misaki/secrets/nix-serve-secret-key.age b/host-specific/misaki/secrets/nix-serve-secret-key.age
deleted file mode 100644
index 0f479f0..0000000
--- a/host-specific/misaki/secrets/nix-serve-secret-key.age
+++ /dev/null
@@ -1,7 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 e6zq8g l39Xz9AifFdYzu1lY0X6+lRSf9YCSwVvKpkY2yIltDY
-vnYucN1xNAb+KmrT5zJQlq8cz8GV+ZL915g0fZeIai4
--> ssh-ed25519 QBbeMw cXXePretHJG85V9IXnwmEII5eGS//QsGdYpZvWzPvHo
-e/B9cP88ehm+R4hOhlrzuqIdg5BMGUD19U9ieD/H2Z8
---- YlswbYIQdog/Qep02v7L35jN2cZZ1IVCK1jOYAvF7hc
-�A�[�(���W
�聠�{����+��)�Y�f��b�8cn�%�ۀBx�)���z 5�|��Կ]���2| �"���
j7A�t^��z �G��
�K$B�!Xu}@"�R�Y�Ym���NY}JP�O|��
\ No newline at end of file
diff --git a/host-specific/misaki/secrets/porkbun-api-key.age b/host-specific/misaki/secrets/porkbun-api-key.age
deleted file mode 100644
index 2dab70d..0000000
--- a/host-specific/misaki/secrets/porkbun-api-key.age
+++ /dev/null
@@ -1,6 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 e6zq8g CdLTZ6uXiJB+xaD+I5NVHD5OxLSH+yAz99j04GiKukU
-kQTUR4yK23wHV9QGMlmTmIlMh63nP49g1NrS+sJKfBY
---- H6/xHryPPKmAWW/bDXUN4YBXMKrsFpUAveKxWsT0SH0
-�E����,�ήS��P)A.������9O\����2n��U�!���X�a���l�Z�4*(G�[��>�Zl�
-:QՅ��������o����$=��& ڍ�w�t^�<<E�0p�8��:���G�̉����J#�QR�����p�򘐞�kA,�=!��5�KK��0o��nQ��)�\\�ĘN�����wQ�҉
\ No newline at end of file
diff --git a/host-specific/misaki/secrets/secrets.nix b/host-specific/misaki/secrets/secrets.nix
deleted file mode 100644
index 04657ba..0000000
--- a/host-specific/misaki/secrets/secrets.nix
+++ /dev/null
@@ -1,15 +0,0 @@
-let
-  noah = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDQFlX3hhXxsqAUYLvF+IX1YWQ+k22OHlqMOjgyNBe9e noah@misaki";
-  misaki = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO+Rcf4Lr+JPWGKQol6eAml6SMgERkGJWgN7y1qYUUvX root@nixos";
-  #users = [noah];
-in
-{
-  "porkbun-api-key.age".publicKeys = [
-    noah
-    misaki
-  ];
-  "nix-serve-secret-key.age".publicKeys = [
-    misaki
-    noah
-  ];
-}
diff --git a/host-specific/misaki/services.nix b/host-specific/misaki/services.nix
index 5439a20..0b4aa3e 100644
--- a/host-specific/misaki/services.nix
+++ b/host-specific/misaki/services.nix
@@ -260,7 +260,7 @@
   };
 
   age.secrets.acme = {
-    file = ./secrets/porkbun-api-key.age;
+    file = ../../secrets/porkbun-api-key.age;
     owner = "root";
     group = "acme";
   };
@@ -318,7 +318,7 @@
   };
 
   age.secrets.nix-serve = {
-    file = ./secrets/nix-serve-secret-key.age;
+    file = ../../secrets/nix-serve-secret-key.age;
     owner = "root";
     group = "root";
   };
@@ -424,6 +424,10 @@
     enable = true;
     group = "nas";
     user = "noah";
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
 
     virtualHosts."photos.ngp.computer" = {
       enableACME = true;
diff --git a/host-specific/misaki/secrets/cache-pub-key.pem b/secrets/cache-pub-key.pem
similarity index 100%
rename from host-specific/misaki/secrets/cache-pub-key.pem
rename to secrets/cache-pub-key.pem
diff --git a/secrets/nix-serve-secret-key.age b/secrets/nix-serve-secret-key.age
new file mode 100644
index 0000000000000000000000000000000000000000..eb0d3836d0e8f28d25e55325c977b5e1c6ab56e3
GIT binary patch
literal 432
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSnHLEJLNLTRkbE$By
zN{O=cD9+DFiOebuP4`apF3L2m3<yiE^erfME_Y4|GSV&&cjYQEa5l>i^$#ucNz=|O
zO*Zj1&IrqQGl+1C$PP^Oa!YaX@+opO3r#Hv$w#*>&?za^w_L$8xga~!A|=2lGbugE
z#o5fytFj<4#Jn)GGCVLaIIkk0C@s>>D=RN5%!DgBIn+I@I6WyM+1Ss_Kg~EID=$2}
zEZDmu$jQK?ygVu^C(1mlP}{=7DUeH7S689TEI%bGBcs?d-z+=Ovcf$quqdoDt<c>(
zx4_-f*rzZ!#Gt|~$J9UBH;~I!=auK*&x`+=omi756meyz&^y!13d;9Of2BO=Ilxfg
zH0#~+K$9N(*n;)Kul7uT=Y6$@bDr5F&aT2KX56Aa8n%AA4FL<dUldF~X4k|!>(jSS
zv!2;h+iTy9n#wt~yEA2J+qcErkN3_ve`$eWX4oxd#ij}Ev#tduEc9a(l+u^VEco@f
Ra6e1+vGZZ2_J+$>0{|*{r9S`w

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 8476f79..ef7a6e2 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -19,4 +19,8 @@ in
 {
   "porkbun-api-key.age".publicKeys = [ misaki ] ++ noah;
   "noah-hashed-password.age".publicKeys = hosts;
+  "nix-serve-secret-key.age".publicKeys = [
+    misaki
+    noah
+  ];
 }