{ config, ... }:
{

  age.secrets = {
    searxng-secret-key = {
      file = ../../../../secrets/services/searxng.age;
      owner = "searx";
    };
  };

  services.searx = {
    enable = true;

    redisCreateLocally = true;

    settings.server = {
      port = 8888;
      bind_address = "::1";
      secret_key = config.age.secrets.searxng-secret-key.path;
    };
  };


  services.caddy.virtualHosts."search.${config.networking.domain}" = {
    extraConfig = ''
      reverse_proxy localhost:${toString config.services.searx.settings.server.port}
    '';
  };
}