modify blackbox exporter metrics and import searx config

hosts/common/optional/arion-containers/searxng.nix

@@ -0,0 +1,32 @@
+{configVars, ...}:
+let
+  # configVars = import ../../../../vars {inherit inputs};
+  piholeIp = configVars.networking.addresses.pihole.ip;
+in 
+{
+  virtualisation.arion = {
+    backend = "podman-socket";
+    projects.searxng = {
+      settings = {
+        services.redis.service = {
+          container_name = "redis";
+          image = "redis:alpine";
+          restart = "always";
+          command = [ "redis-server" "--save" "" "--appendonly" "no" ];
+          tmpfs = [ "/var/lib/redis" ];
+          capabilities = { ALL = false; SETGID = true; SETUID = true; DAC_OVERRIDE = true; };
+        };
+        services.searxng.service = {
+          container_name = "searxng";
+          image = "searxng/searxng:latest";
+          restart = "always";
+          ports = [ "8855:8080" ];
+          dns = [ piholeIp ];
+          volumes = [ "/srv/docker/searxng-docker/searxng:/etc/searxng:rw" ];
+          capabilities = { ALL = false; CHOWN = true; SETGID = true; SETUID = true; DAC_OVERRIDE = true; };
+        };
+      };
+    };
+  };
+}
+

hosts/common/optional/nixos-containers/docker.nix

@@ -2,9 +2,9 @@
   pkgs,
   lib,
   inputs,
-  configVars,
   config,
   outputs,
+  configVars,
   ...
 }: let
   containerName = "docker";
@@ -119,7 +119,6 @@ in {
       secretsDirectory = builtins.toString inputs.nix-secrets;
       secretsFile = "${secretsDirectory}/secrets.yaml";
     in {
-
       nixpkgs.overlays = [
         outputs.overlays.unstable-packages
       ];
@@ -179,6 +178,7 @@ in {
         ../arion-containers/jellyfin.nix
         ../arion-containers/photoprism.nix
         ../arion-containers/syncthing.nix
+        (import ../arion-containers/searxng.nix {configVars = configVars;})
       ];
 
       environment.systemPackages = [

hosts/common/optional/nixos-containers/metrics-server.nix

@@ -159,10 +159,10 @@ in {
                     preferred_ip_protocol: ip4
                     valid_http_versions: ["HTTP/1.1", "HTTP/2"]
                     method: GET
-                    fail_if_ssl: false
+                    # fail_if_ssl: false
-                    fail_if_not_ssl: true
+                    # fail_if_not_ssl: true
-                    tls_config:
+                    # tls_config:
-                      insecure_skip_verify: true
+                    #   insecure_skip_verify: true
                 tcp_connect:
                   prober: tcp
                   tcp: