move searxng service to poweredge-pro

3 files changed, 132 insertions, 123 deletions

diff --git a/hosts/poweredge-pro/searxng.nix b/hosts/poweredge-pro/searxng.nix
new file mode 100644
index 0000000..cc5dfaf
--- /dev/null
+++ b/hosts/poweredge-pro/searxng.nix
@@ -0,0 +1,132 @@
+{
+	containers.searxng = {
+		autoStart = true;
+		privateNetwork = true;
+		hostBridge = "br-lan0";
+		localMacAddress = "02:00:00:00:00:05";
+
+		config = { pkgs, lib, config, ... }: let
+			environmentFile = "/run/searx/searxng.env";
+			generateEnvironmentFile = ''
+				umask 077
+				echo "SEARXNG_SECRET=$(head -c 56 /dev/urandom | base64)" > ${environmentFile}
+				ls /run/searx
+			'';
+		in {
+			# Network
+			networking.interfaces.eth0.useDHCP = true;
+
+			# Generate secret key
+			systemd.services.searx-environment-file = {
+				description = "Generate environment file with secret key for searx";
+				wantedBy = [ "searx-init.service" ];
+				partOf   = [ "searx-init.service" ];
+				before   = [ "searx-init.service" ];
+				serviceConfig = {
+					Type = "oneshot";
+					RemainAfterExit = true;
+					User = "searx";
+					RuntimeDirectory = "searx";
+					RuntimeDirectoryMode = "750";
+					ConditionPathExists = "!${environmentFile}";
+				};
+				script = generateEnvironmentFile;
+			};
+
+			# Configure searxng
+			services.searx = {
+				enable = true;
+				redisCreateLocally = true;
+				package = pkgs.searxng;
+				inherit environmentFile;  # Provides secret key
+				openFirewall = true;
+
+				# UWSGI configuration
+				runInUwsgi = true;
+
+				uwsgiConfig = {
+					socket = "/run/searx/searx.sock";
+					http = ":8888";
+					chmod-socket = "660";
+				};
+
+				settings = {
+					general = {
+						instance_name = "TJK Search";
+						donation_url = "https://tjkeller.xyz";
+						enable_metrics = false;
+					};
+
+					server = {
+						port = 8080;
+						bind_address = "0.0.0.0";
+					};
+
+					# Search engine settings
+					search = {
+						safe_search = 2;  # Strict
+						autocomplete = "";
+						default_lang = "en-US";
+					};
+
+					preferences.lock = [ "safesearch" ];  # Lock safe_search at strict
+
+					# https://docs.searxng.org/admin/plugins.html
+					enabled_plugins = [
+						"Tor check plugin"
+						"Tracker URL remover"
+						"Basic Calculator"
+						"Unit converter plugin"
+						"Hash plugin"
+						"Self Information"
+						"Open Access DOI rewrite"
+						"Hostnames plugin"
+					];
+
+					hostnames.replace = {
+						"(.*\.)?youtube\.com$" = "yt.tjkeller.xyz";
+						"(.*\.)?youtu\.be$" = "yt.tjkeller.xyz";
+						#"(.*\.)?reddit\.com$" = "old.reddit.com";
+					};
+
+					# Enable / disabled search engines from default list
+					engines = lib.mapAttrsToList (name: value: { inherit name; disabled = !value; }) {
+						# Images
+						"artic" = false;
+						"deviantart" = false;
+						"flickr" = false;
+						"library of congress" = false;
+						"openverse" = false;
+						"pinterest" = false;
+						"public domain image archive" = false;
+						"unsplash" = false;
+						"wallhaven" = false;
+						"wikicommons.images" = false;
+
+						# Videos
+						"bitchute" = true;
+						"dailymotion" = false;
+						"piped" = false;
+						"rumble" = true;
+						"sepiasearch" = false;
+						"vimeo" = false;
+						"wikicommons.videos" = false;
+
+						# Music
+						"piped.music" = false;
+
+						# Files
+						"1337x" = true;
+						"annas archive" = true;
+						"library genesis" = true;
+
+						# Apps
+						"fdroid" = true;
+					};
+				};
+			};
+
+			system.stateVersion = "26.05";
+		};
+	};
+}
diff --git a/nixos/default.nix b/nixos/default.nix
index ea8a317..8cf41ab 100644
--- a/nixos/default.nix
+++ b/nixos/default.nix
@@ -6,12 +6,9 @@
 		./services/cgit.nix
 		./services/fileshares.nix
 		./services/mailer.nix
-		./services/searxng.nix
 		./services/zfs/zed-mailer.nix
 		./services/router
 
-		#./services/mainsail.nix
-
 		./bootloader.nix
 		./decklink.nix
 		./geoclue.nix
diff --git a/nixos/services/searxng.nix b/nixos/services/searxng.nix
deleted file mode 100644
index f90ad4e..0000000
--- a/nixos/services/searxng.nix
+++ /dev/null
@@ -1,120 +0,0 @@
-{ pkgs, lib, config, ... }: let
-	cfg = config.services._searxng;
-	environmentFile = "/run/searx/searxng.env";
-	generateEnvironmentFile = ''
-		umask 077
-		echo "SEARXNG_SECRET=$(head -c 56 /dev/urandom | base64)" > ${environmentFile}
-		ls /run/searx
-	'';
-in {
-	options.services._searxng = {
-		enable = lib.mkEnableOption "enables searxng service";
-		uwsgi.enable = lib.mkEnableOption "enables searxng uwsgi";
-	};
-
-	config = lib.mkIf cfg.enable {
-		# Generate secret key
-		systemd.services.searx-environment-file = {
-			description = "Generate environment file with secret key for searx";
-			wantedBy = [ "searx-init.service" ];
-			partOf   = [ "searx-init.service" ];
-			before   = [ "searx-init.service" ];
-			serviceConfig = {
-				Type = "oneshot";
-				RemainAfterExit = true;
-				User = "searx";
-				RuntimeDirectory = "searx";
-				RuntimeDirectoryMode = "750";
-				ConditionPathExists = "!${environmentFile}";
-			};
-			script = generateEnvironmentFile;
-		};
-
-		# Configure searxng
-		services.searx = {
-			enable = true;
-			redisCreateLocally = true;
-			package = pkgs.searxng;
-			inherit environmentFile;  # Provides secret key
-
-			# UWSGI configuration
-			runInUwsgi = cfg.uwsgi.enable;
-
-			uwsgiConfig = {
-				socket = "/run/searx/searx.sock";
-				http = ":8888";
-				chmod-socket = "660";
-			};
-
-			settings = {
-				general = {
-					instance_name = "TJK Search";
-					donation_url = "https://tjkeller.xyz";
-					enable_metrics = false;
-				};
-
-				# Search engine settings
-				search = {
-					safe_search = 2;  # Strict
-					autocomplete = "";
-					default_lang = "en-US";
-				};
-
-				preferences.lock = [ "safesearch" ];  # Lock safe_search at strict
-
-				# https://docs.searxng.org/admin/plugins.html
-				enabled_plugins = [
-					"Tor check plugin"
-					"Tracker URL remover"
-					"Basic Calculator"
-					"Unit converter plugin"
-					"Hash plugin"
-					"Self Information"
-					"Open Access DOI rewrite"
-					"Hostnames plugin"
-				];
-
-				hostnames.replace = {
-					"(.*\.)?youtube\.com$" = "piped.tjkeller.xyz";
-					"(.*\.)?youtu\.be$" = "piped.tjkeller.xyz";
-					"(.*\.)?reddit\.com$" = "old.reddit.com";
-				};
-
-				# Enable / disabled search engines from default list
-				engines = lib.mapAttrsToList (name: value: { inherit name; disabled = !value; }) {
-					# Images
-					"artic" = false;
-					"deviantart" = false;
-					"flickr" = false;
-					"library of congress" = false;
-					"openverse" = false;
-					"pinterest" = false;
-					"public domain image archive" = false;
-					"unsplash" = false;
-					"wallhaven" = false;
-					"wikicommons.images" = false;
-
-					# Videos
-					"bitchute" = true;
-					"dailymotion" = false;
-					"piped" = false;
-					"rumble" = true;
-					"sepiasearch" = false;
-					"vimeo" = false;
-					"wikicommons.videos" = false;
-
-					# Music
-					"piped.music" = false;
-
-					# Files
-					"1337x" = true;
-					"annas archive" = true;
-					"library genesis" = true;
-
-					# Apps
-					"fdroid" = true;
-				};
-			};
-		};
-	};
-}