From 9531dd40a8fc5b06b460822175e409d6759ba54d Mon Sep 17 00:00:00 2001
From: Lzebulon <lzebulon@crans.org>
Date: Wed, 6 Aug 2025 23:11:05 +0200
Subject: [PATCH] add searxng

---
 hosts/physique/hyponix/services/default.nix |   1 +
 hosts/physique/hyponix/services/searxng.nix |  29 ++++++++++++++++++++
 secrets.nix                                 |   1 +
 secrets/services/searxng.age                | Bin 0 -> 355 bytes
 4 files changed, 31 insertions(+)
 create mode 100644 hosts/physique/hyponix/services/searxng.nix
 create mode 100644 secrets/services/searxng.age

diff --git a/hosts/physique/hyponix/services/default.nix b/hosts/physique/hyponix/services/default.nix
index 1fb2413..4713476 100644
--- a/hosts/physique/hyponix/services/default.nix
+++ b/hosts/physique/hyponix/services/default.nix
@@ -4,6 +4,7 @@
     ./fail2ban.nix
     ./forgejo.nix
     ./forgejo-runner.nix
+    ./searxng.nix
   ];
 
   services.caddy = {
diff --git a/hosts/physique/hyponix/services/searxng.nix b/hosts/physique/hyponix/services/searxng.nix
new file mode 100644
index 0000000..d205a32
--- /dev/null
+++ b/hosts/physique/hyponix/services/searxng.nix
@@ -0,0 +1,29 @@
+{config, ...}:
+{
+
+  age.secrets = {
+    searxng-secret-key = {
+      file = ../../../../secrets/services/searxng.age;
+      owner = "searx";  
+    };
+  };
+  
+  services.searx = {
+    enable = true;
+
+    redisCreateLocally = true;
+
+    settings.server = {
+      port = 8888;
+      bind_address = "::1";
+      secret_key = config.age.secrets.searxng-secret-key.path;
+    };
+  };
+
+
+  services.caddy.virtualHosts."search.${config.networking.domain}" = {
+    extraConfig = ''
+      reverse_proxy localhost:${toString config.services.searx.settings.server.port}
+    '';
+  };
+}
diff --git a/secrets.nix b/secrets.nix
index 5c7de35..ede176e 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -12,5 +12,6 @@ let
 in
 {
   "secrets/services/forgejo/forgejo-runner-token-1.age".publicKeys = admins ++ [ hyponix ];
+  "secrets/services/searxng.age".publicKeys = admins ++ [ hyponix ];
 }
   
diff --git a/secrets/services/searxng.age b/secrets/services/searxng.age
new file mode 100644
index 0000000000000000000000000000000000000000..52412079d59c104df6a76cc0dd5e0ead674bc7c7
GIT binary patch
literal 355
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCTSaI%Ona#RRQcX!T>
z)J{uv^3o1T4{&uakMa&o^YYFvFD=RnEsrP(h_Em;&MnOe3FS&LHmuSQsxUGt%1QMo
zE%rA_2~R04G1X4Z$}h8Y4=~qH@+|N!$o8#FwLrHmD$CL=z)`^?&nv(?*ef+6+%Kgp
zvcNpg(5=Kcuqx5h$UoW1q+B~c#LqP>)6vK{qL{11BF~`AF~GILr9iv5+{rw<*t<NX
zG~B}3JgPXV(!Ipg+so3_*Sp-YGLTDGS69K+FeBN-Gqu<;*DXLhEh42XxS*^grPMVr
z+}JzWztAr=(JP=l(k$1*&4ep=o5IiFoF5X?i+5E_&rB^8VG`n7^Jr$7Pw*NR_W2c=
nUm||)3i>+RFSsqiKzj+p{dex~cfXwN*&TOla{~7_O9g8HXrz1B

literal 0
HcmV?d00001