upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-06-16 01:55:13 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: added searXNG to Ceres

Browse source
This commit is contained in:
Nick 2025-03-08 01:55:30 -06:00
parent 88058b1fec
commit b71055ab4f
1 changed files with 4 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

20
modules/nixos/services/searx/default.nix
View file

@ -17,7 +17,7 @@ in
redisCreateLocally = true; redisCreateLocally = true;
uwsgiConfig = { uwsgiConfig = {
socket = "/run/searx/searx.sock"; socket = "/run/searx/searx.sock";
http = ":8888"; http = ":${builtins.toString service.ports.port0}";
chmod-socket = "660"; chmod-socket = "660";
}; };
settings = { settings = {
@ -52,7 +52,7 @@ in
server = { server = {
base_url = host; base_url = host;
port = 8888; port = service.ports.port0;
bind_address = localhost; bind_address = localhost;
secret_key = config.sops.secrets.searx-key.path; secret_key = config.sops.secrets.searx-key.path;
limiter = true; limiter = true;
@ -152,22 +152,10 @@ in
redir /.well-known/carddav /remote.php/dav/ 301 redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301 redir /.well-known/caldav /remote.php/dav/ 301
reverse_proxy ${localhost}:${toString service.ports.port0} { reverse_proxy ${localhost}:${toString service.ports.port0}
header_up X-Forwarded-Proto https
header_up X-Real-IP {remote_host}
header_up Host {host}
}
tls ${service.ssl.cert} ${service.ssl.key} tls ${service.ssl.cert} ${service.ssl.key}
header {
Strict-Transport-Security "max-age=31536000; includeSubDomains"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
Referrer-Policy "no-referrer"
X-XSS-Protection "1; mode=block"
}
encode zstd gzip encode zstd gzip
''; '';
}; };
@ -199,7 +187,7 @@ in
networking = { networking = {
firewall = { firewall = {
allowedTCPPorts = [ allowedTCPPorts = [
8888 service.ports.port0
]; ];
}; };
}; };