{ pkgs, config, ... }: {

  virtualisation.oci-containers.containers = {

    searxng = {
      image = "docker.io/searxng/searxng:latest";
      ports = [
        "3345:3000"
      ];
      # TODO implement limiter
      #volumes = [
      #  "/home/carbon/searxng.yml:/etc/searxng:rw"
      #];

    };
  };

  services.redis.servers = {
    searxng = {
      port = 3442;
      enable = true;
    };
  };

  services.nginx = {
    virtualHosts = {
      "librey.${config.networking.domain}" = {
        forceSSL = true;
        enableACME = true;
        locations."/" = {
          proxyPass = " http://127.0.0.1:3345";
        };
      };
    };
  };
}