33 lines
1.0 KiB
Nix
33 lines
1.0 KiB
Nix
{configVars, ...}:
|
|
let
|
|
# configVars = import ../../../../vars {inherit inputs};
|
|
piholeIp = configVars.networking.addresses.pihole.ip;
|
|
in
|
|
{
|
|
virtualisation.arion = {
|
|
backend = "podman-socket";
|
|
projects.searxng = {
|
|
settings = {
|
|
services.redis.service = {
|
|
container_name = "redis";
|
|
image = "redis:alpine";
|
|
restart = "always";
|
|
command = [ "redis-server" "--save" "" "--appendonly" "no" ];
|
|
tmpfs = [ "/var/lib/redis" ];
|
|
capabilities = { ALL = false; SETGID = true; SETUID = true; DAC_OVERRIDE = true; };
|
|
};
|
|
services.searxng.service = {
|
|
container_name = "searxng";
|
|
image = "searxng/searxng:latest";
|
|
restart = "always";
|
|
ports = [ "8855:8080" ];
|
|
dns = [ piholeIp ];
|
|
volumes = [ "/srv/docker/searxng-docker/searxng:/etc/searxng:rw" ];
|
|
capabilities = { ALL = false; CHOWN = true; SETGID = true; SETUID = true; DAC_OVERRIDE = true; };
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|
|
|