From 7a08cff8550cd4e325b60062a7e6bd91067fda33 Mon Sep 17 00:00:00 2001
From: Nick <nickjhiebert@proton.me>
Date: Tue, 1 Jul 2025 05:14:14 -0500
Subject: [PATCH] feat: wireguard test

---
 modules/nixos/services/searx/default.nix | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/modules/nixos/services/searx/default.nix b/modules/nixos/services/searx/default.nix
index e198a76..d173ec0 100755
--- a/modules/nixos/services/searx/default.nix
+++ b/modules/nixos/services/searx/default.nix
@@ -46,13 +46,19 @@ in
             virtualHosts = {
               "${configHelpers.host}" = {
                 extraConfig = ''
-                  @not_allowed not remote_ip 10.100.0.2/24
-                  respond @not_allowed 403
+                  @allowed_ips {
+                    remote_ip 10.100.0.0/24
+                  }
 
-                  redir /.well-known/carddav /remote.php/dav/ 301
-                  redir /.well-known/caldav /remote.php/dav/ 301
+                  handle @allowed_ips {
+                    redir /.well-known/carddav /remote.php/dav/ 301
+                    redir /.well-known/caldav /remote.php/dav/ 301
+                    reverse_proxy ${configHelpers.localhost}:${toString configHelpers.service.ports.port0}
+                  }
 
-                  reverse_proxy ${configHelpers.localhost}:${toString configHelpers.service.ports.port0}
+                  handle {
+                    respond "Access Denied" 403
+                  }
 
                   tls ${configHelpers.service.ssl.cert} ${configHelpers.service.ssl.key}
                 '';