upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-06-16 10:05:13 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: added searXNG to Ceres

Browse source
This commit is contained in:
Nick 2025-03-08 03:31:43 -06:00
parent 71741eef92
commit 2c08bf0287
1 changed files with 22 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

32
modules/nixos/services/searx/default.nix
View file

@ -5,7 +5,7 @@
... ...
}: }:
let let
inherit (flake.config.machines.devices) mars ceres; inherit (flake.config.machines.devices) ceres;
inherit (flake.config.services.instances) searx web; inherit (flake.config.services.instances) searx web;
service = searx; service = searx;
hostname = config.networking.hostName; hostname = config.networking.hostName;
@ -50,15 +50,24 @@ in
ban_time_on_fail = 5; ban_time_on_fail = 5;
max_ban_time_on_fail = 120; max_ban_time_on_fail = 120;
}; };
server = { server =
port = service.ports.port0; {
bind_address = localhost; port = service.ports.port0;
secret_key = config.sops.secrets.searx-key.path; bind_address = localhost;
limiter = true; secret_key = config.sops.secrets.searx-key.path;
public_instance = false; limiter = true;
image_proxy = true; public_instance = false;
method = "GET"; image_proxy = true;
} // (if hostname == ceres.name then { base_url = host; } else { }); method = "GET";
}
// (
if hostname == ceres.name then
{
base_url = host;
}
else
{ }
);
engines = lib.mapAttrsToList (name: value: { inherit name; } // value) { engines = lib.mapAttrsToList (name: value: { inherit name; } // value) {
"duckduckgo".disabled = false; "duckduckgo".disabled = false;
"brave".disabled = false; "brave".disabled = false;
@ -171,6 +180,9 @@ in
{ } { }
); );
users.groups.searx.members = [ "caddy" ];
systemd.services.caddy.serviceConfig.ProtectHome = false;
sops = sops =
let let
sopsPath = secret: { sopsPath = secret: {