onjen/nixos-config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Implement searx as nixos-container as PoC

Browse Source
This commit is contained in:
Johannes Rothe 2025-03-25 21:49:35 +01:00
parent 28e46853c6
commit d23918dbb9
1 changed files with 29 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

54
hosts/dalinar/default.nix
View File

@ -257,40 +257,44 @@
}; };
"https://search.dalinar.home.johannes-rothe.de" = { "https://search.dalinar.home.johannes-rothe.de" = {
extraConfig = '' extraConfig = ''
reverse_proxy localhost:${builtins.toString config.services.searx.settings.server.port} reverse_proxy ${config.containers.searx.localAddress}:${builtins.toString config.containers.searx.config.services.searx.settings.server.port}
''; '';
}; };
}; };
}; };
services.searx = { networking.nat = {
enable = true; enable = true;
environmentFile = config.sops.templates."searx-env".path; internalInterfaces = [ "ve-searx" ];
settings.server = { externalInterface = "eno1";
port = 8181; };
bind_address = "127.0.0.1";
secret_key = "@SEARX_SECRET_KEY@"; containers.searx = {
autoStart = true;
ephemeral = true;
privateNetwork = true;
hostAddress = "192.168.100.2";
localAddress = "192.168.100.3";
bindMounts."/run/secrets/searx-env" = {
isReadOnly = true;
hostPath = config.sops.templates."searx-env".path;
};
config = { config, ... }: {
networking.firewall.allowedTCPPorts = [ config.services.searx.settings.server.port ];
system.stateVersion = "24.11";
services.searx = {
enable = true;
environmentFile = /run/secrets/searx-env;
settings.server = {
port = 8181;
bind_address = "192.168.100.3";
secret_key = "@SEARX_SECRET_KEY@";
};
};
}; };
}; };
# This option defines the first version of NixOS you have installed on this particular machine, system.stateVersion = "24.11"; # Don't change
# and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
#
# Most users should NEVER change this value after the initial install, for any reason,
# even if you've upgraded your system to a new NixOS release.
#
# This value does NOT affect the Nixpkgs version your packages and OS are pulled from,
# so changing it will NOT upgrade your system - see https://nixos.org/manual/nixos/stable/#sec-upgrading for how
# to actually do that.
#
# This value being lower than the current NixOS release does NOT mean your system is
# out of date, out of support, or vulnerable.
#
# Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
# and migrated your data accordingly.
#
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
system.stateVersion = "24.11"; # Did you read the comment?
} }