RuJect/nixos-infra
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(services/searxng): add secret key
Some checks failed
Nix CI / build (push) Failing after 1m0s
Details

Browse source
This commit is contained in:
Rustam Efimov 2026-04-12 18:41:27 +03:00
parent 181c0dfa6b
commit 7e0dd5acd2
No known key found for this signature in database
4 changed files with 35 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

26
services/searxng/secrets.nix Normal file
View file

@ -0,0 +1,26 @@
{
config,
lib,
...
}:
let
cfg = config.machine.searxng;
in
with lib;
mkIf cfg.enable {
sops.secrets = {
"searxng/secretKey" = {
sopsFile = ./../../secrets/common.yaml;
owner = config.users.users.matrix-synapse.name;
inherit (config.users.users.matrix-synapse) group;
};
};
sops.templates.searxng-env = {
owner = config.users.users.matrix-synapse.name;
inherit (config.users.users.matrix-synapse) group;
restartUnits = [ "matrix-synapse.service" ];
content = ''
SEARXNG_SECRET_KEY=${config.sops.placeholder."searxng/secretKey"};
'';
};
}