diff --git a/configs/nixos/jellyfin.nix b/configs/nixos/jellyfin.nix
index 8116d1e..6907a70 100644
--- a/configs/nixos/jellyfin.nix
+++ b/configs/nixos/jellyfin.nix
@@ -5,6 +5,9 @@
   lib,
   ...
 }: {
+  imports = [
+    ./nginx.nix
+  ];
   services.jellyfin = {
     enable = true;
     openFirewall = true;
diff --git a/hosts/cirrostratus/default.nix b/hosts/cirrostratus/default.nix
index 6b00ca9..21c90d0 100644
--- a/hosts/cirrostratus/default.nix
+++ b/hosts/cirrostratus/default.nix
@@ -13,7 +13,6 @@ inputs.nixpkgs.lib.nixosSystem {
     inputs.disko.nixosModules.disko
     ./disk-config.nix
     ./hardware-configuration.nix
-    ./nginx.nix
     ./restic.nix
     ../../configs/nixos/common.nix
     ../../configs/nixos/tailscale.nix
@@ -62,11 +61,6 @@ inputs.nixpkgs.lib.nixosSystem {
       sops = lib.mkIf (inputs ? nix-secrets) {
         secrets = {
           duckdns-token.sopsFile = "${inputs.nix-secrets}/duckdns.yaml";
-          gabevenberg-draft-credentials = {
-            sopsFile = "${inputs.nix-secrets}/draft.gabevenberg.com";
-            format = "binary";
-            owner = config.services.nginx.user;
-          };
         };
       };
 
diff --git a/hosts/cirrus/default.nix b/hosts/cirrus/default.nix
index 6c6fd95..2e2fe41 100644
--- a/hosts/cirrus/default.nix
+++ b/hosts/cirrus/default.nix
@@ -12,6 +12,7 @@ inputs.nixpkgs.lib.nixosSystem {
     inputs.home-manager.nixosModules.home-manager
     inputs.disko.nixosModules.disko
     ./disk-config.nix
+    ./nginx.nix
     ./restic.nix
     ../../roles/nixos/vm.nix
     ../../configs/nixos/common.nix
@@ -53,6 +54,11 @@ inputs.nixpkgs.lib.nixosSystem {
             format = "binary";
             owner = "radicale";
           };
+          gabevenberg-draft-credentials = {
+            sopsFile = "${inputs.nix-secrets}/draft.gabevenberg.com";
+            format = "binary";
+            owner = config.services.nginx.user;
+          };
         };
       };
       home-manager.users.${config.host.user} = {
diff --git a/hosts/cirrostratus/nginx.nix b/hosts/cirrus/nginx.nix
similarity index 100%
rename from hosts/cirrostratus/nginx.nix
rename to hosts/cirrus/nginx.nix