nixos/nixosConfigurations/gerg-desktop/services/searxng.nix

{ config, pkgs }:
let
  link = config.local.links.searx;
in
{
  local.links.searx = { };

  sops.secrets.searxngenv = { };
  users.users.${config.services.nginx.user}.extraGroups = [ "searx" ];
  services.searx = {
    enable = true;
    package = pkgs.searxng;
    configureUwsgi = true;
    uwsgiConfig = {
      http = link.tuple;
      disable-logging = true;
    };
    environmentFile = config.sops.secrets.searxngenv.path;
    settings = {
      general.instance_name = "Gerg search";
      server = {
        secret_key = "@SEARXNG_SECRET@";
        base_url = "https://search.gerg-l.com";
      };
      search = {
        default_lang = "en";
        formats = [
          "html"
          "json"
        ];
      };
      engines = [
        {
          name = "bing";
          disabled = true;
        }
        {
          name = "brave";
          disabled = true;
        }
      ];
      ui.theme_args.simple_style = "dark";
    };
  };

  local.nginx.defaultVhosts."search.gerg-l.com" = {
    locations."/".proxyPass = link.url;
    extraConfig = "access_log off;";
  };
}