diff --git a/hosts/common/optional/arion-containers/searxng.nix b/hosts/common/optional/arion-containers/searxng.nix new file mode 100644 index 0000000..373451f --- /dev/null +++ b/hosts/common/optional/arion-containers/searxng.nix @@ -0,0 +1,32 @@ +{configVars, ...}: +let + # configVars = import ../../../../vars {inherit inputs}; + piholeIp = configVars.networking.addresses.pihole.ip; +in +{ + virtualisation.arion = { + backend = "podman-socket"; + projects.searxng = { + settings = { + services.redis.service = { + container_name = "redis"; + image = "redis:alpine"; + restart = "always"; + command = [ "redis-server" "--save" "" "--appendonly" "no" ]; + tmpfs = [ "/var/lib/redis" ]; + capabilities = { ALL = false; SETGID = true; SETUID = true; DAC_OVERRIDE = true; }; + }; + services.searxng.service = { + container_name = "searxng"; + image = "searxng/searxng:latest"; + restart = "always"; + ports = [ "8855:8080" ]; + dns = [ piholeIp ]; + volumes = [ "/srv/docker/searxng-docker/searxng:/etc/searxng:rw" ]; + capabilities = { ALL = false; CHOWN = true; SETGID = true; SETUID = true; DAC_OVERRIDE = true; }; + }; + }; + }; + }; +} + diff --git a/hosts/common/optional/nixos-containers/docker.nix b/hosts/common/optional/nixos-containers/docker.nix index b9df440..cc74b46 100644 --- a/hosts/common/optional/nixos-containers/docker.nix +++ b/hosts/common/optional/nixos-containers/docker.nix @@ -2,9 +2,9 @@ pkgs, lib, inputs, - configVars, config, outputs, + configVars, ... }: let containerName = "docker"; @@ -119,7 +119,6 @@ in { secretsDirectory = builtins.toString inputs.nix-secrets; secretsFile = "${secretsDirectory}/secrets.yaml"; in { - nixpkgs.overlays = [ outputs.overlays.unstable-packages ]; @@ -179,6 +178,7 @@ in { ../arion-containers/jellyfin.nix ../arion-containers/photoprism.nix ../arion-containers/syncthing.nix + (import ../arion-containers/searxng.nix {configVars = configVars;}) ]; environment.systemPackages = [ diff --git a/hosts/common/optional/nixos-containers/metrics-server.nix b/hosts/common/optional/nixos-containers/metrics-server.nix index 4b2ac05..50417f4 100644 --- a/hosts/common/optional/nixos-containers/metrics-server.nix +++ b/hosts/common/optional/nixos-containers/metrics-server.nix @@ -159,10 +159,10 @@ in { preferred_ip_protocol: ip4 valid_http_versions: ["HTTP/1.1", "HTTP/2"] method: GET - fail_if_ssl: false - fail_if_not_ssl: true - tls_config: - insecure_skip_verify: true + # fail_if_ssl: false + # fail_if_not_ssl: true + # tls_config: + # insecure_skip_verify: true tcp_connect: prober: tcp tcp: