feat: added searXNG to Ceres

modules/nixos/services/searx/default.nix

@@ -149,62 +149,14 @@ in
             virtualHosts = {
               "${host}" = {
                 extraConfig = ''
-                  @api {
+                  redir /.well-known/carddav /remote.php/dav/ 301
-                    path /config
+                  redir /.well-known/caldav /remote.php/dav/ 301
-                    path /healthz
-                    path /stats/errors
-                    path /stats/checker
-                  }
 
-                  @static {
+                  reverse_proxy ${localhost}:${toString service.ports.port0}
-                    path /static/*
-                  }
-
-                  @notstatic {
-                    not path /static/*
-                  }
-
-                  @imageproxy {
-                    path /image_proxy
-                  }
-
-                  @notimageproxy {
-                    not path /image_proxy
-                  }
-
-                  header @api {
-                    Access-Control-Allow-Methods "GET, OPTIONS"
-                    Access-Control-Allow-Origin "*"
-                  }
-
-                  header @static {
-                    Cache-Control "public, max-age=31536000"
-                    defer
-                  }
-
-                  header @notstatic {
-                    Cache-Control "no-cache, no-store"
-                    Pragma "no-cache"
-                  }
-
-                  header @imageproxy {
-                    Content-Security-Policy "default-src 'none'; img-src 'self' data:"
-                  }
-
-                  header @notimageproxy {
-                    Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self'; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self' https://overpass-api.de; img-src 'self' data: https://*.tile.openstreetmap.org; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com"
-                  }
-
-                  handle {
-                    encode zstd gzip
-
-                    reverse_proxy unix/${config.services.searx.uwsgiConfig.socket} {
-                      transport unix
-                      transport protocol uwsgi
-                    }
-                  }
 
                   tls ${service.ssl.cert} ${service.ssl.key}
+
+                  encode zstd gzip
                 '';
               };
             };