l: add searx via search.r

krebs/3modules/lass/default.nix

@@ -67,6 +67,7 @@ in {
             "cgit.prism.r"
             "paste.r"
             "p.r"
+            "search.r"
           ];
           tinc.port = 655;
           tinc.pubkey = ''

lass/1systems/prism/config.nix

@@ -194,6 +194,7 @@ with import <stockholm/lib>;
     }
     <stockholm/lass/2configs/minecraft.nix>
     <stockholm/lass/2configs/codimd.nix>
+    <stockholm/lass/2configs/searx.nix>
     {
       services.taskserver = {
         enable = true;

lass/2configs/searx.nix

@@ -0,0 +1,23 @@
+{ pkgs, ... }:
+let
+  port = 8889;
+in {
+  services.nginx.virtualHosts.search = {
+    serverAliases = [ "search.r" ];
+    locations."/".extraConfig = ''
+      proxy_set_header Host $host;
+      proxy_pass http://127.0.0.1:${builtins.toString port};
+    '';
+  };
+
+  services.searx = {
+    enable = true;
+    configFile = pkgs.writeText "searx.cfg" (builtins.toJSON {
+      use_default_settings = true;
+      server = {
+        port = port;
+        secret_key = builtins.readFile <secrets/searx.key>;
+      };
+    });
+  };
+}

lass/2configs/tests/dummy-secrets/searx.key

@@ -0,0 +1 @@
+yolo