infrastructure/hosts/carbon/services/privacy/searxng.nix

{ pkgs, config, ... }: {
  # TODO rework the whole thing
  virtualisation.oci-containers.containers = {

    searxng = {
      image = "docker.io/searxng/searxng:latest";
      ports = [
        "3345:3000"
      ];
    };
  };

  services.redis.servers = {
    searxng = {
      port = 3442;
      enable = true;
    };
  };

  services.nginx = {
    virtualHosts = {
      "librey.${config.networking.domain}" = {
        forceSSL = true;
        enableACME = true;
        locations."/" = {
          proxyPass = " http://127.0.0.1:3345";
        };
      };
    };
  };
}