{ config,lib,pkgs, ... }:

{
  services = {
    searx = {
      enable = true;
      redisCreateLocally = true;
      package = pkgs.searxng;
      environmentFile = "/etc/searx.env";
      settings.server = {
        bind_address = "0.0.0.0";
        port = 1692;
        # WARNING: setting secret_key here might expose it to the nix cache
        # see below for the sops or environment file instructions to prevent this
        # secret_key = "$SEARXNG_SECRET";
      };
    };
  };
}