cluster/services/search/default.nix

@@ -4,6 +4,7 @@
   services.search = {
     nodes.host = [ "VEGAS" ];
     nixos.host = ./host.nix;
+    secrets.default.nodes = config.services.search.nodes.host;
   };
 
   monitoring.blackbox.targets.search = {

cluster/services/search/host.nix

@@ -1,16 +1,15 @@
-{ config, depot, lib, ... }:
+{ cluster, config, depot, lib, ... }:
 let
   inherit (config) links;
 in
 {
   links.searxng.protocol = "http";
 
-  age.secrets.searxng-secrets.file = ../../../secrets/searxng-secrets.age;
   services.searx = {
     enable = true;
     runInUwsgi = true;
     package = depot.packages.searxng;
-    environmentFile = config.age.secrets.searxng-secrets.path;
+    environmentFile = cluster.config.services.search.secrets.default.path;
     settings = {
       server = {
         secret_key = "@SEARXNG_SECRET@";