feat: added searXNG to Ceres

This commit is contained in:
Nick 2025-03-08 01:24:46 -06:00
parent 6dd55c9a99
commit 88058b1fec

View file

@ -11,7 +11,8 @@ let
host = "${service.subdomain}.${web.domains.url0}";
in
{
services.searx = {
services = {
searx = {
enable = true;
redisCreateLocally = true;
uwsgiConfig = {
@ -144,7 +145,6 @@ in
];
};
};
caddy = {
virtualHosts = {
"${host}" = {
@ -152,16 +152,29 @@ in
redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301
reverse_proxy ${localhost}:${toString service.ports.port0}
reverse_proxy ${localhost}:${toString service.ports.port0} {
header_up X-Forwarded-Proto https
header_up X-Real-IP {remote_host}
header_up Host {host}
}
tls ${service.ssl.cert} ${service.ssl.key}
header {
Strict-Transport-Security "max-age=31536000; includeSubDomains"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
Referrer-Policy "no-referrer"
X-XSS-Protection "1; mode=block"
}
encode zstd gzip
'';
};
};
};
};
sops =
let
sopsPath = secret: {