Harald Hoyer
7f802aaca6
- Moved Searx-related settings from `default.nix` and `nginx.nix` to a dedicated `searx.nix` module for improved modularity and maintainability. - Updated references and ACME certificate configuration to align with the new structure. - Simplifies management of Searx service and its associated secrets.
34 lines
681 B
Nix
34 lines
681 B
Nix
{ pkgs, config, ... }:
|
|
{
|
|
sops.secrets."searx/secret_key".sopsFile = ../../../.secrets/sgx/searx.yaml;
|
|
|
|
services.searx = {
|
|
enable = true;
|
|
configureNginx = true;
|
|
domain = "search.hoyer.world";
|
|
uwsgiConfig = {
|
|
http = ":8081";
|
|
};
|
|
settings = {
|
|
server = {
|
|
secret_key = config.sops.secrets."searx/secret_key".path;
|
|
};
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts = {
|
|
"search.hoyer.world" = {
|
|
enableACME = false;
|
|
useACMEHost = "search.hoyer.world";
|
|
forceSSL = true;
|
|
};
|
|
};
|
|
|
|
security.acme.certs = {
|
|
"internal.hoyer.world" = {
|
|
extraDomainNames = [
|
|
"search.hoyer.world"
|
|
];
|
|
};
|
|
};
|
|
}
|