beagle: setup SearX(NG)

machines/beagle/configuration.nix

@@ -2,6 +2,7 @@
   imports = [
     ./modules/kanidm.nix
     ./modules/matrix.nix
+    ./modules/searx.nix
     ./modules/reverse-proxy.nix
   ];
 }

machines/beagle/modules/reverse-proxy.nix

@@ -50,6 +50,15 @@
           '';
         };
       };
+
+      "searx.peprolinbot.com" = {
+        forceSSL = true;
+        enableACME = true;
+
+        # Rest of configuration done in services.searx.configreNginx
+
+      };
+
     };
   };
 }

machines/beagle/modules/searx.nix

@@ -0,0 +1,27 @@
+{ config, ... }:
+{
+  clan.core.vars.generators.searx = {
+    prompts.secret-key = {
+      description = "SearX server.secret_key";
+      type = "hidden";
+    };
+
+    files.environment-file.secret = true;
+    script = ''
+      cat <<EOL > $out/environment-file
+      SEARX_SECRET_KEY=$(<$prompts/secret-key)
+      EOL
+    '';
+  };
+
+  services.searx = {
+    enable = true;
+    domain = "searx.peprolinbot.com";
+    configureNginx = true;
+    redisCreateLocally = true;
+    environmentFile = config.clan.core.vars.generators.searx.files.environment-file.path;
+    settings = {
+      server.secret_key = "$SEARX_SECRET_KEY";
+    };
+  };
+}