add searxng

hosts/physique/hyponix/services/default.nix

@@ -4,6 +4,7 @@
     ./fail2ban.nix
     ./forgejo.nix
     ./forgejo-runner.nix
+    ./searxng.nix
   ];
 
   services.caddy = {

hosts/physique/hyponix/services/searxng.nix

@@ -0,0 +1,29 @@
+{config, ...}:
+{
+
+  age.secrets = {
+    searxng-secret-key = {
+      file = ../../../../secrets/services/searxng.age;
+      owner = "searx";  
+    };
+  };
+  
+  services.searx = {
+    enable = true;
+
+    redisCreateLocally = true;
+
+    settings.server = {
+      port = 8888;
+      bind_address = "::1";
+      secret_key = config.age.secrets.searxng-secret-key.path;
+    };
+  };
+
+
+  services.caddy.virtualHosts."search.${config.networking.domain}" = {
+    extraConfig = ''
+      reverse_proxy localhost:${toString config.services.searx.settings.server.port}
+    '';
+  };
+}

secrets.nix

@@ -12,5 +12,6 @@ let
 in
 {
   "secrets/services/forgejo/forgejo-runner-token-1.age".publicKeys = admins ++ [ hyponix ];
+  "secrets/services/searxng.age".publicKeys = admins ++ [ hyponix ];
 }