From 7a255fdc1bb0e9bd5d3175c5fb75db03e567fc16 Mon Sep 17 00:00:00 2001 From: "nekomimi.pet" Date: Mon, 28 Sep 2026 09:19:43 -0400 Subject: [PATCH] Preserve Valefar search and printing services --- hosts/valefar/default.nix | 49 +++++++++++++++++++++++++++++++++++++++ hosts/valefar/secrets.nix | 4 ++++ secrets/regent.nix | 2 ++ secrets/searx.env.age | 9 +++++++ 4 files changed, 64 insertions(+) create mode 100644 secrets/searx.env.age diff --git a/hosts/valefar/default.nix b/hosts/valefar/default.nix index 28bc7b5..ed888f6 100644 --- a/hosts/valefar/default.nix +++ b/hosts/valefar/default.nix @@ -72,6 +72,55 @@ __GLX_VENDOR_LIBRARY_NAME = "nvidia"; }; + services.printing.enable = true; + + services.searx = { + enable = true; + environmentFile = config.age.secrets."searx.env".path; + redisCreateLocally = false; + settings = { + use_default_settings = true; + server = { + secret_key = "$SEARX_SECRET_KEY"; + port = 8888; + bind_address = "0.0.0.0"; + limiter = false; + image_proxy = true; + base_url = "http://valefar:8888/"; + }; + engines = + map + (name: { + inherit name; + disabled = false; + }) + [ + "bing" + "duckduckgo" + "brave" + "startpage" + "qwant" + "mojeek" + "marginalia" + "wikipedia" + ] + ++ [ + { + name = "google"; + disabled = false; + use_mobile_ui = true; + } + ]; + search = { + safe_search = 0; + formats = [ + "html" + "json" + ]; + }; + }; + }; + services.pocket-id = { enable = true; dataDir = "/var/lib/pocket-id"; diff --git a/hosts/valefar/secrets.nix b/hosts/valefar/secrets.nix index 4deb735..e93f13f 100644 --- a/hosts/valefar/secrets.nix +++ b/hosts/valefar/secrets.nix @@ -12,6 +12,10 @@ file = ../../secrets/pia-wireguard-auth.env.age; mode = "0400"; }; + "searx.env" = { + file = ../../secrets/searx.env.age; + mode = "0400"; + }; "vaultwarden-oidc.env" = { file = ../../secrets/vaultwarden-oidc.env.age; owner = "vaultwarden"; diff --git a/secrets/regent.nix b/secrets/regent.nix index a7112ca..c694b33 100644 --- a/secrets/regent.nix +++ b/secrets/regent.nix @@ -15,6 +15,8 @@ in "pocket-id-encryption-key.age".publicKeys = users ++ systems; "pocket-id-maxmind-license-key.age".publicKeys = users ++ systems; + "searx.env.age".publicKeys = [ valefar ]; + "vaultwarden-oidc.env.age".publicKeys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIPu8CVFsnUxhvABEqv4+EBBOL8tva5HJFoV3hElAlD0 root@valefar" ]; diff --git a/secrets/searx.env.age b/secrets/searx.env.age new file mode 100644 index 0000000..22f7220 --- /dev/null +++ b/secrets/searx.env.age @@ -0,0 +1,9 @@ +-----BEGIN AGE ENCRYPTED FILE----- +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGR1N2xsdyBwTG81 +WlAremsybnJJKytTL1VXOWhRNlNQQ0IxTWtxL0lnQVI0VUlXOW0wClQvRll2Q1lL +RkRCckp2ZTFpTWxIVUlPV0s0NWhwZU9nRXJoRUJUN1VySHMKLS0tIG1YZExFemJy +cFBOWjAvcDVIemRsazlOaDBkWGZXSE5EZm54ZE5LVnR6RUUKJHUeCHZPsNCsOrix +9ESiqGnKgZs3vxGXlEeNjvXT5uAkOkP1AVhAItk8lUsK9uwttS1aB1/IHBNP2Tpl +F95BpbMYqo5bIqMDhCdP3a3EhOIR4Xd+ciqS4gRXR5vwHZBGZGtFQjztiONXmM5I +qADJN5nY +-----END AGE ENCRYPTED FILE----- -- 2.51.2