0f6f304e8c
Signed-off-by: Jacob Hrbek <kreyren@fsfe.org>
31 lines
877 B
Plaintext
31 lines
877 B
Plaintext
#@ Copyright (C) Jacob Hrbek <kreyren@fsfe.org> 08/09/2021-EU released under OpenVolt license <https://git.dotya.ml/OpenVolt/OpenVolt/src/branch/central/LICENSE.md>
|
|
# FIXME(Krey): As of 07/09/2021-EU SearX in NixOS requires a lot of work to be used in production
|
|
|
|
{ config, lib, ... }: lib.mkIf config.services.searx.enable {
|
|
services.searx = {
|
|
server = {
|
|
# DND-QA(Krey): 8080 conflicts with other services
|
|
port = 8080;
|
|
bind_address = "0.0.0.0";
|
|
secret_key = "@SEARX_SECRET_KEY@";
|
|
};
|
|
engines = lib.singleton {
|
|
name = "wolframalpha";
|
|
shortcut = "wa";
|
|
api_key = "@WOLFRAM_API_KEY@";
|
|
engine = "wolframalpha_api";
|
|
};
|
|
};
|
|
|
|
# WebServer
|
|
services.nginx.virtualHosts = {
|
|
"${config.services.searx.hostName}" = {
|
|
addSSL = true;
|
|
enableACME = true;
|
|
};
|
|
};
|
|
|
|
security.acme.certs = {
|
|
"${config.networking.fqdn}".email = "kreyren@fsfe.org";
|
|
};
|
|
} |