hunner/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

search dns, package reorg, opencode

Browse source
This commit is contained in:
Hunter Haugen 2026-03-10 12:04:53 -07:00
parent dab6541947
commit 8fce8ae927
Signed by: hunner
GPG key ID: EF99694AA599DDAD
5 changed files with 245 additions and 44 deletions
Download patch file Download diff file Expand all files Collapse all files

12
hosts/ruil/configuration.nix
View file

@ -34,7 +34,7 @@
mode = "0400";
};
# HTTPS certificates for `s.hunner.dev` (works with Cloudflare Full strict).
# HTTPS certificates for `search.hunner.dev` (works with Cloudflare Full strict).
security.acme = {
acceptTerms = true;
defaults.email = "me@hunner.dev";
@ -124,15 +124,15 @@
enable = true;
configureNginx = true;
redisCreateLocally = true;
domain = "s.hunner.dev";
domain = "search.hunner.dev";
environmentFile = config.sops.secrets.searx-env.path;
settings.server.secret_key = "$SEARX_SECRET_KEY";
settings.server.limiter = true;
settings.server.base_url = lib.mkForce "https://s.hunner.dev/";
settings.server.base_url = lib.mkForce "https://search.hunner.dev/";
settings.general.open_metrics = "$SEARX_METRICS_PASSWORD";
};
services.nginx.virtualHosts."s.hunner.dev" = {
services.nginx.virtualHosts."search.hunner.dev" = {
enableACME = true;
forceSSL = true;
@ -169,11 +169,11 @@
};
};
# Catch-all vhost so only s.hunner.dev serves SearXNG.
# Catch-all vhost so only search.hunner.dev serves SearXNG.
services.nginx.virtualHosts."_" = {
default = true;
addSSL = true;
useACMEHost = "s.hunner.dev";
useACMEHost = "search.hunner.dev";
locations."/" = {
return = "200 \"This page intentionally left blank.\"";
extraConfig = ''