feat: added basic structure for searXNG and netdata
This commit is contained in:
parent
fa5de8f1bb
commit
aa607747c3
8 changed files with 1357 additions and 57 deletions
47
modules/services/SearXNG-example.nix
Normal file
47
modules/services/SearXNG-example.nix
Normal file
|
@ -0,0 +1,47 @@
|
|||
# Example SearXNG Configuration for NixOS Home Lab
|
||||
#
|
||||
# This example shows how to enable SearXNG on one of your machines
|
||||
# with proper reverse proxy integration and Tailscale-only access.
|
||||
#
|
||||
# Add this to your machine's configuration.nix:
|
||||
{
|
||||
imports = [
|
||||
../../modules/services/SearXNG.nix
|
||||
];
|
||||
|
||||
services.searxng-lab = {
|
||||
enable = true;
|
||||
hostName = "searxng.lab.local";
|
||||
|
||||
# Configure reverse proxy for outbound traffic
|
||||
reverseProxyHost = "reverse-proxy";
|
||||
reverseProxyPort = 3128;
|
||||
|
||||
# Security settings
|
||||
tailscaleOnly = true; # Only allow Tailscale network access
|
||||
openFirewall = true; # Open HTTP port
|
||||
nginxVhost = true; # Create Nginx virtual host
|
||||
};
|
||||
|
||||
# Optional: Add hostname to /etc/hosts for easy access
|
||||
networking.hosts = {
|
||||
"127.0.0.1" = ["searxng.lab.local"];
|
||||
};
|
||||
}
|
||||
# Reverse Proxy Configuration (add to reverse-proxy machine)
|
||||
#
|
||||
# services.squid = {
|
||||
# enable = true;
|
||||
# configText = ''
|
||||
# http_port 3128
|
||||
# acl homelab src 100.0.0.0/8
|
||||
# acl homelab src 192.168.1.0/24
|
||||
# http_access allow homelab
|
||||
# http_access deny all
|
||||
# access_log none
|
||||
# forwarded_for delete
|
||||
# '';
|
||||
# };
|
||||
#
|
||||
# networking.firewall.allowedTCPPorts = [ 3128 ];
|
||||
|
Loading…
Add table
Add a link
Reference in a new issue