services/searxng: init

hosts/VEGAS/services/searxng/default.nix

@@ -0,0 +1,27 @@
+{ config, inputs, pkgs, tools, ... }:
+let
+  port = config.portsStr.searxng;
+in
+{
+  reservePortsFor = [ "searxng" ];
+
+  age.secrets.searxng-secrets.file = ../../../../secrets/searxng-secrets.age;
+  services.searx = {
+    enable = true;
+    runInUwsgi = true;
+    package = inputs.self.packages.${pkgs.system}.searxng;
+    environmentFile = config.age.secrets.searxng-secrets.path;
+    settings = {
+      server = {
+        secret_key = "@SEARXNG_SECRET@";
+      };
+    };
+    uwsgiConfig = {
+      http = "127.0.0.1:${port}";
+      cache2 = "name=searxcache,items=2000,blocks=2000,blocksize=65536,bitmap=1";
+      buffer-size = 65536;
+      env = ["SEARXNG_SETTINGS_PATH=/run/searx/settings.yml"];
+    };
+  };
+  services.nginx.virtualHosts."search.${tools.meta.domain}" = tools.nginx.vhosts.proxy "http://127.0.0.1:${port}";
+}

hosts/VEGAS/system.nix

@@ -35,6 +35,7 @@
       ./services/nix/binary-cache.nix
       ./services/nix/nar-serve.nix
       ./services/object-storage
+      ./services/searxng
       ./services/sips
       ./services/sso
       ./services/uptime-kuma

secrets/searxng-secrets.age

@@ -0,0 +1,12 @@
+age-encryption.org/v1
+-> ssh-ed25519 NO562A o9pCQmL63KDruN/Gg/HshjgwhLE+JTl2pf7LvUaTRgQ
+0ce3ziGDsBAQDWN2m/wcmhrG3Clwg2uAn5sWOISQRSU
+-> ssh-ed25519 5/zT0w 7knP/WouF96lob3C6d1Pbs7+UujopARgw4g5oFoAlwg
+lMCk97Hn+MwrgX1gpzyQwwSvcGAkoEqo7CDoDt52hL0
+-> ssh-ed25519 d3WGuA yy+s/ktB3e16m7vrvE9T8fWleEjdTVcBsnOFsalK+1A
+Xy4VSB8bJlKgCnm9XPdg7ntbD6shYVgMUH+OHcpfhHk
+-> 0l-grease KU= d*EvjiX8 ] >:U
+WYZYD6eSEKEVQPkb3XUVk/4EKnAxD9IQoMJmCtabDUkXsznlZxjbVvTIfyuermh2
+
+--- CB9M2EiC80aVNSFJWHQroQyqp07mryoDCOWv5PEKGjs
+½%MØõ‚‡ý:ç,¾.ϳ³/ä„!aÅeüž‘½ð¾õ¹Ò,¸>¥Sw[L}««Ø(ˆF’š&×÷œ,j…&ýð"£»uŠÙ<0C>´<><11>%=Y%¿ÀÍ”ÌkÕ±Z£l‚‚°ªÑóúΨâ¥+Sk‡¬Ñˆ]
ÞHµþ9‚á®ÅÂÈKQÄøg‚:áVÈ\§øÓsyÂú¿<C3BA>%	FÀ~vBâÕƒZemX;TÅ´

secrets/secrets.nix

@@ -35,6 +35,7 @@ in with hosts;
   "nextcloud-dbpass.age".publicKeys = max ++ map systemKeys [ VEGAS ];
   "oauth2_proxy-secrets.age".publicKeys = max ++ map systemKeys [ VEGAS ];
   "postfix-ldap-mailboxes.age".publicKeys = max ++ map systemKeys [ VEGAS ];
+  "searxng-secrets.age".publicKeys = max ++ map systemKeys [ VEGAS ];
   "sips-db-credentials.age".publicKeys = max ++ map systemKeys [ VEGAS ];
   "synapse-db.age".publicKeys = max ++ map systemKeys [ VEGAS ];
   "synapse-keys.age".publicKeys = max ++ map systemKeys [ VEGAS ];