diff --git a/hosts/dalinar/default.nix b/hosts/dalinar/default.nix index c25266f..e0ba3c9 100644 --- a/hosts/dalinar/default.nix +++ b/hosts/dalinar/default.nix @@ -71,6 +71,10 @@ sops.templates."caddy-global-conf".content = '' IONOS_API_KEY=${config.sops.placeholder."caddy/ionos_dns_api_key"} ''; + sops.secrets."searx/secret_key" = { }; + sops.templates."searx-env".content = '' + SEARX_SECRET_KEY=${config.sops.placeholder."searx/secret_key"} + ''; i18n.defaultLocale = "en_US.UTF-8"; @@ -251,6 +255,21 @@ reverse_proxy localhost:8080 ''; }; + "https://search.dalinar.home.johannes-rothe.de" = { + extraConfig = '' + reverse_proxy localhost:${builtins.toString config.services.searx.settings.server.port} + ''; + }; + }; + }; + + services.searx = { + enable = true; + environmentFile = config.sops.templates."searx-env".path; + settings.server = { + port = 8181; + bind_address = "127.0.0.1"; + secret_key = "@SEARX_SECRET_KEY@"; }; }; diff --git a/hosts/dalinar/secrets.yaml b/hosts/dalinar/secrets.yaml index 4c9ac84..f89e692 100644 --- a/hosts/dalinar/secrets.yaml +++ b/hosts/dalinar/secrets.yaml @@ -3,6 +3,8 @@ miniflux: ADMIN_PASSWORD: ENC[AES256_GCM,data:6bctOmg79yyM8oNyTZ+9SQ==,iv:z0ldWb1PtWqmCHFFJkVJh3JUKqRmFm4olIkK4/ciq3Y=,tag:k04RksQJdOOeBPEI+HpSFw==,type:str] caddy: ionos_dns_api_key: ENC[AES256_GCM,data:boZTsuMbYRHk16VAjPu1pw6Z/dRw8PCCb0VT5KKwiofq6FydBhZ7pLEpHy/q8UfZB0AEUtKNXxrTa8R1WFFAGwad9JqC49DBNxnhxT7yDppu1x8fI0s7U5AYZHIDekTXw22N5EmUT1zzMoFPogHkLr+JPiSGVSM=,iv:pg/RlPFOanMVjaMAu4DSXC/cLgPA6quSs4e4Z50Iyf0=,tag:83md4Psn21z3HtBL0cQIyA==,type:str] +searx: + secret_key: ENC[AES256_GCM,data:N8rfDlmDGltQOc+dcdCP0ghGMbEcdZWmoeH2tQTphKGLKg==,iv:JMUcI3ln2rm09FSy6A382soh6oaSvOCCfq1LeeyoE9g=,tag:z5fqLlLVmRpgvMUM2NI0RA==,type:str] sops: kms: [] gcp_kms: [] @@ -27,8 +29,8 @@ sops: SVMwSGwwWVo1RzZnSjB6Z0MraTBHZ00KiHCJ8M3xQ8+YH5+aOy3th5fYTEavHqa0 bbzATd2uRW8K+RSW3NFpN2AMtn9GCGt6Hsw0kezhiBN8qZ4tneKxJg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-03-24T20:50:30Z" - mac: ENC[AES256_GCM,data:8w+bbhXDlQ7S9yN2HdxkHicvS6vwgG7LcOvJSFd/G0/1FbTLQUartmCLVRG29bUolueIXXVnw5H6D2OAkK//X3PAHsDnuM7p67zsPOdlM2lLzSJbiQ4agCIHcRxcF5V45wcZA2YC3/83AZZBPx+rJ+WGa6h7aJ84r+Ff/1Kh6Bg=,iv:4xGNtbYoUnazhj1CgjPLx8K1p/jOIT00GR0l90remFE=,tag:PyuTjXvzbooqAiVPcvsHhg==,type:str] + lastmodified: "2025-03-24T21:54:24Z" + mac: ENC[AES256_GCM,data:ptQt4xit3quAJ+S+BQe2vzZz7JcfTxs5Z3kMwb6TuL7f0uX6Cr/h6HEJOu4ERIgN2hFzScDSdwW6/0XW4IepdUxTIVW5TPMpxf9QrlhBRJd8hd41jHywEubN2bvSe/a3Nm1og5v603X0/jlyqLzhOFBZCYjEKVEL7c0fWyneo+U=,iv:AkK3hPgHwCdyOmyRxzL8X5Vud38H6N+2J/XHV08klFQ=,tag:IdngdAUy7ylWIjkgMLeAJg==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.9.4