feat: added searXNG to Ceres

modules/nixos/services/searx/default.nix

@@ -149,8 +149,19 @@ in
             virtualHosts = {
               "${host}" = {
                 extraConfig = ''
-                  reverse_proxy ${localhost}:${toString service.ports.port0}
+                  # Use the uwsgi socket directly instead of reverse_proxy to HTTP
+                  reverse_proxy unix//run/searx/searx.sock {
+                    transport unix {
+                      dial_timeout 5s
+                    }
+                    header_up Host {host}
+                    header_up X-Forwarded-For {remote}
+                    header_up X-Forwarded-Proto {scheme}
+                    header_up X-Script-Name /
+                  }
+
                   tls ${service.ssl.cert} ${service.ssl.key}
+                  encode zstd gzip
                 '';
               };
             };