fix mkNginxVHosts usage; fix librespeed proxy; fix vaultwarden proxy

hosts/alexandria/nginx.nix

@@ -4,10 +4,12 @@
   inputs,
   ...
 }:
+
 let
   utils = import ../../utils.nix { inherit inputs lib; };
   inherit (utils) mkNginxVHosts;
 in
+
 {
   security.acme = {
     acceptTerms = true;
@@ -22,12 +24,6 @@ in
     };
   };
 
-  age.secrets.cloudflare = {
-    file = ../../secrets/cloudflare.age;
-    owner = "nginx";
-    group = "nginx";
-  };
-
   services.nginx = {
     enable = true;
     recommendedGzipSettings = true;
@@ -41,4 +37,10 @@ in
   };
 
   users.users.nginx.extraGroups = [ "acme" ];
+
+  age.secrets.cloudflare = {
+    file = ../../secrets/cloudflare.age;
+    owner = "nginx";
+    group = "nginx";
+  };
 }