depot/hosts/VEGAS/services/searxng/default.nix

28 lines
826 B
Nix
Raw Normal View History

2022-05-25 12:11:10 +03:00
{ config, inputs, pkgs, tools, ... }:
let
port = config.portsStr.searxng;
in
{
reservePortsFor = [ "searxng" ];
age.secrets.searxng-secrets.file = ../../../../secrets/searxng-secrets.age;
services.searx = {
enable = true;
runInUwsgi = true;
package = inputs.self.packages.${pkgs.system}.searxng;
environmentFile = config.age.secrets.searxng-secrets.path;
settings = {
server = {
secret_key = "@SEARXNG_SECRET@";
};
};
uwsgiConfig = {
http = "127.0.0.1:${port}";
cache2 = "name=searxcache,items=2000,blocks=2000,blocksize=65536,bitmap=1";
buffer-size = 65536;
env = ["SEARXNG_SETTINGS_PATH=/run/searx/settings.yml"];
};
};
services.nginx.virtualHosts."search.${tools.meta.domain}" = tools.nginx.vhosts.proxy "http://127.0.0.1:${port}";
}