diff --git a/machines/durruti/configuration.nix b/machines/durruti/configuration.nix
index b635e051..68ac85b0 100644
--- a/machines/durruti/configuration.nix
+++ b/machines/durruti/configuration.nix
@@ -5,16 +5,6 @@ with lib;
 {
   sops.defaultSopsFile = ./secrets.yaml;
 
-  sops.secrets.ep3bsDb = {
-    owner = config.service.ep3-bs.user;
-    key = "ep3bsDb";
-  };
-
-  sops.secrets.ep3bsMail = {
-    owner = config.service.ep3-bs.user;
-    key = "ep3bsMail";
-  };
-
   boot.isContainer = true;
   networking = {
     hostName = mkDefault "durruti";
@@ -62,6 +52,17 @@ with lib;
     };
   };
 
+  sops.secrets.ep3bsDb = {
+    owner = config.services.ep3-bs.user;
+    key = "ep3bsDb";
+  };
+
+  sops.secrets.ep3bsMail = {
+    owner = config.services.ep3-bs.user;
+    key = "ep3bsMail";
+  };
+
+
   system.stateVersion = "22.11"; # Did you read the comment?
 }