upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-08-09 13:24:38 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: added searXNG to Ceres

Browse source
This commit is contained in:
Nick 2025-03-08 01:24:46 -06:00
parent 6dd55c9a99
commit 88058b1fec
1 changed files with 156 additions and 143 deletions
Download patch file Download diff file Expand all files Collapse all files

19
modules/nixos/services/searx/default.nix
View file

@ -11,7 +11,8 @@ let
host = "${service.subdomain}.${web.domains.url0}"; host = "${service.subdomain}.${web.domains.url0}";
in in
{ {
services.searx = { services = {
searx = {
enable = true; enable = true;
redisCreateLocally = true; redisCreateLocally = true;
uwsgiConfig = { uwsgiConfig = {
@ -144,7 +145,6 @@ in
]; ];
}; };
}; };
caddy = { caddy = {
virtualHosts = { virtualHosts = {
"${host}" = { "${host}" = {
@ -152,16 +152,29 @@ in
redir /.well-known/carddav /remote.php/dav/ 301 redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301 redir /.well-known/caldav /remote.php/dav/ 301
reverse_proxy ${localhost}:${toString service.ports.port0} reverse_proxy ${localhost}:${toString service.ports.port0} {
header_up X-Forwarded-Proto https
header_up X-Real-IP {remote_host}
header_up Host {host}
}
tls ${service.ssl.cert} ${service.ssl.key} tls ${service.ssl.cert} ${service.ssl.key}
header {
Strict-Transport-Security "max-age=31536000; includeSubDomains"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
Referrer-Policy "no-referrer"
X-XSS-Protection "1; mode=block"
}
encode zstd gzip encode zstd gzip
''; '';
}; };
}; };
}; };
};
sops = sops =
let let
sopsPath = secret: { sopsPath = secret: {