onjen/nixos-config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Enable searxng on dalinar

Browse Source
This commit is contained in:
Johannes Rothe 2025-03-24 22:58:19 +01:00
parent e9d91e6f8e
commit 28e46853c6
2 changed files with 23 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
hosts/dalinar/default.nix
View File

@ -71,6 +71,10 @@
sops.templates."caddy-global-conf".content = ''
IONOS_API_KEY=${config.sops.placeholder."caddy/ionos_dns_api_key"}
'';
sops.secrets."searx/secret_key" = { };
sops.templates."searx-env".content = ''
SEARX_SECRET_KEY=${config.sops.placeholder."searx/secret_key"}
'';
i18n.defaultLocale = "en_US.UTF-8";
@ -251,6 +255,21 @@
reverse_proxy localhost:8080
'';
};
"https://search.dalinar.home.johannes-rothe.de" = {
extraConfig = ''
reverse_proxy localhost:${builtins.toString config.services.searx.settings.server.port}
'';
};
};
};
services.searx = {
enable = true;
environmentFile = config.sops.templates."searx-env".path;
settings.server = {
port = 8181;
bind_address = "127.0.0.1";
secret_key = "@SEARX_SECRET_KEY@";
};
};

6
hosts/dalinar/secrets.yaml
View File

@ -3,6 +3,8 @@ miniflux:
ADMIN_PASSWORD: ENC[AES256_GCM,data:6bctOmg79yyM8oNyTZ+9SQ==,iv:z0ldWb1PtWqmCHFFJkVJh3JUKqRmFm4olIkK4/ciq3Y=,tag:k04RksQJdOOeBPEI+HpSFw==,type:str]
caddy:
ionos_dns_api_key: ENC[AES256_GCM,data:boZTsuMbYRHk16VAjPu1pw6Z/dRw8PCCb0VT5KKwiofq6FydBhZ7pLEpHy/q8UfZB0AEUtKNXxrTa8R1WFFAGwad9JqC49DBNxnhxT7yDppu1x8fI0s7U5AYZHIDekTXw22N5EmUT1zzMoFPogHkLr+JPiSGVSM=,iv:pg/RlPFOanMVjaMAu4DSXC/cLgPA6quSs4e4Z50Iyf0=,tag:83md4Psn21z3HtBL0cQIyA==,type:str]
searx:
secret_key: ENC[AES256_GCM,data:N8rfDlmDGltQOc+dcdCP0ghGMbEcdZWmoeH2tQTphKGLKg==,iv:JMUcI3ln2rm09FSy6A382soh6oaSvOCCfq1LeeyoE9g=,tag:z5fqLlLVmRpgvMUM2NI0RA==,type:str]
sops:
kms: []
gcp_kms: []
@ -27,8 +29,8 @@ sops:
SVMwSGwwWVo1RzZnSjB6Z0MraTBHZ00KiHCJ8M3xQ8+YH5+aOy3th5fYTEavHqa0
bbzATd2uRW8K+RSW3NFpN2AMtn9GCGt6Hsw0kezhiBN8qZ4tneKxJg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-03-24T20:50:30Z"
mac: ENC[AES256_GCM,data:8w+bbhXDlQ7S9yN2HdxkHicvS6vwgG7LcOvJSFd/G0/1FbTLQUartmCLVRG29bUolueIXXVnw5H6D2OAkK//X3PAHsDnuM7p67zsPOdlM2lLzSJbiQ4agCIHcRxcF5V45wcZA2YC3/83AZZBPx+rJ+WGa6h7aJ84r+Ff/1Kh6Bg=,iv:4xGNtbYoUnazhj1CgjPLx8K1p/jOIT00GR0l90remFE=,tag:PyuTjXvzbooqAiVPcvsHhg==,type:str]
lastmodified: "2025-03-24T21:54:24Z"
mac: ENC[AES256_GCM,data:ptQt4xit3quAJ+S+BQe2vzZz7JcfTxs5Z3kMwb6TuL7f0uX6Cr/h6HEJOu4ERIgN2hFzScDSdwW6/0XW4IepdUxTIVW5TPMpxf9QrlhBRJd8hd41jHywEubN2bvSe/a3Nm1og5v603X0/jlyqLzhOFBZCYjEKVEL7c0fWyneo+U=,iv:AkK3hPgHwCdyOmyRxzL8X5Vud38H6N+2J/XHV08klFQ=,tag:IdngdAUy7ylWIjkgMLeAJg==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.9.4