Update lock

flake.lock

@@ -8,11 +8,11 @@
         "utils": "utils"
       },
       "locked": {
-        "lastModified": 1674440933,
-        "narHash": "sha256-CASRcD/rK3fn5vUCti3jzry7zi0GsqRsBohNq9wPgLs=",
+        "lastModified": 1676257154,
+        "narHash": "sha256-eW3jymNLpdxS5fkp9NWKyNtgL0Gqtgg1vCTofKXDF1g=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "65c47ced082e3353113614f77b1bc18822dc731f",
+        "rev": "2cb27c79117a2a75ff3416c3199a2dc57af6a527",
         "type": "github"
       },
       "original": {
@@ -24,11 +24,11 @@
     },
     "nixos-unstable": {
       "locked": {
-        "lastModified": 1676417542,
-        "narHash": "sha256-YeeugS7DHyuvdfS/fB3M68o7gVvam7Ccnr3+ABsGsZI=",
+        "lastModified": 1677269633,
+        "narHash": "sha256-lp+v+nAddOA6wbW4FU7xk6f5eiiJKaCY2K94YZxrIAI=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "0621648513a20d6e6a3be974f396c0cebc1cb48d",
+        "rev": "b2c8125be6909f83e9438617214dcda061480c42",
         "type": "github"
       },
       "original": {
@@ -40,11 +40,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1676253841,
-        "narHash": "sha256-jhuI8Mmky8VCD45OoJEuF6HdPLFBwNrHA0ljjZ/zkfw=",
+        "lastModified": 1677179781,
+        "narHash": "sha256-+peLp16ruWLuTFHo0ZUbLlS1/meS/+RsWQQ9bUAzOh8=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "a45a8916243a7d27acc358f4fc18c4491f3eeca8",
+        "rev": "50c23cd4ff6c8344e0b4d438b027b3afabfe58dd",
         "type": "github"
       },
       "original": {

hosts/architect/default.nix

@@ -40,6 +40,7 @@ in
     ./lezzo.nix
     ./runas.nix
     ./tailscale.nix
+    ./searx.nix
   ];
 
   time.timeZone = "Europe/Rome";
@@ -134,7 +135,7 @@ in
     openTCP = [ 22 ];
     openTCPVPN = [ 22 ];
   };
-  
+
   services = {
     fwupd.enable = true;
     das_watchdog.enable = true;

hosts/architect/searx.nix

@@ -0,0 +1,73 @@
+{ mach-nix, lib, config, pkgs, ... }:
+
+let
+  domain = "gugol.giugl.io";
+  network = import ./network.nix;
+in
+{
+  services = {
+    redis.servers."searx" = { enable = true; port = 4456; };
+    searx = {
+      enable = true;
+      package = pkgs.unstablePkgs.searxng;
+
+      environmentFile = /secrets/searx/env;
+      settings = {
+        server = {
+          secret_key = "@SEARX_SECRET_KEY@";
+          port = 4455;
+        };
+
+        general = {
+          instance_name = "Pepe's Gugol";
+          contact_url = "mailto:gugol@depasquale.giugl.io";
+          enable_metrics = false;
+        };
+
+        search = {
+          safe_search = 0;
+          autocomplete = "qwant";
+          prefer_configured_language = false;
+        };
+
+        ui = {
+          infinite_scroll = true;
+          query_in_title = true;
+          results_on_new_tab = true;
+        };
+
+        redis.url = "redis://127.0.0.1:${toString config.services.redis.servers."searx".port}";
+
+        engines = [
+          { name = "google"; disabled = false; }
+          { name = "bing"; disabled = false; }
+          { name = "qwant"; disabled = false; }
+          { name = "duckduckgo"; disabled = false; }
+          { name = "yahoo"; disabled = false; }
+          { name = "wikibooks"; disabled = false; }
+          { name = "wikidata"; disabled = false; }
+          { name = "wikipedia"; disabled = false; }
+          { name = "wikiquote"; disabled = false; }
+          { name = "wikisource"; disabled = false; }
+          { name = "wikiversity"; disabled = false; }
+          { name = "wikivoyage"; disabled = false; }
+        ];
+      };
+    };
+
+    nginx.virtualHosts.${domain} = {
+      forceSSL = true;
+      enableACME = true;
+
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:${toString config.services.searx.settings.server.port}";
+      };
+    };
+  };
+
+  networking.extraHosts = ''
+    ${network.architect-lan} ${domain}
+    ${network.architect-wg} ${domain}
+    ${network.architect-ts} ${domain}
+  '';
+}