From f3e8f1a77d5d1ad195948a277a6dc379a8111665 Mon Sep 17 00:00:00 2001
From: Nick <nickjhiebert@proton.me>
Date: Sat, 8 Mar 2025 02:25:02 -0600
Subject: [PATCH] feat: added searXNG to Ceres

---
 modules/nixos/services/searx/default.nix | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/modules/nixos/services/searx/default.nix b/modules/nixos/services/searx/default.nix
index 02f8cad..f1a4099 100644
--- a/modules/nixos/services/searx/default.nix
+++ b/modules/nixos/services/searx/default.nix
@@ -149,14 +149,23 @@ in
             virtualHosts = {
               "${host}" = {
                 extraConfig = ''
-                  redir /.well-known/carddav /remote.php/dav/ 301
-                  redir /.well-known/caldav /remote.php/dav/ 301
-
-                  reverse_proxy ${localhost}:${toString service.ports.port0}
+                  handle /* {
+                    reverse_proxy unix/${config.services.searx.uwsgiConfig.socket} {
+                      transport unix
+                      transport protocol uwsgi
+                    }
+                  }
 
                   tls ${service.ssl.cert} ${service.ssl.key}
 
                   encode zstd gzip
+
+                  header {
+                    Strict-Transport-Security "max-age=31536000;"
+                    X-Content-Type-Options "nosniff"
+                    X-Frame-Options "DENY"
+                    Referrer-Policy "no-referrer-when-downgrade"
+                  }
                 '';
               };
             };