setup searxng

hosts/freun-dev/services.nix

@@ -387,6 +387,44 @@ in
       };
     };
 
+    searx = {
+      enable = true;
+      subdomain = "q";
+      port = 3400;
+      environmentFile = secrets.searx.path;
+      settings = {
+        general = {
+          instance_name = "freun.dev SearXNG";
+        };
+        server = {
+          public_instance = true;
+          image_proxy = true;
+          method = "GET";
+          secret_key = "$SEARX_SECRET_KEY";
+        };
+        engines = lib.mapAttrsToList (name: value: { inherit name; } // value) {
+          "google".disabled = true;
+          "duckduckgo".disabled = false;
+          "duckduckgo images".disabled = false;
+          "wolframalpha".disabled = false;
+        };
+        search = {
+          formats = [
+            "html"
+            "json"
+          ];
+        };
+        enabled_plugins = [
+          "Basic Calculator"
+          "Hash plugin"
+          "Open Access DOI rewrite"
+          "Hostnames plugin"
+          "Unit converter plugin"
+          "Tracker URL remover"
+        ];
+      };
+    };
+
     webserver = {
       acme.dnsChallenge = true;
       tailscaleAuth.expectedTailnet = "tempel-vibes.ts.net";