initial commit

modules/searx.nix

@@ -0,0 +1,19 @@
+{ config, pkgs, ... }:
+
+{
+  services.searx = {
+    enable = true;
+    # settings.server.secret_key set in secrets.nix
+    settings = {
+      server = {
+        port = 8082;
+        bind_address = "127.0.0.1";
+        # secret_key = ...; # Set via env var in file
+      };
+    };
+  };
+  
+  # Inject secret via env vars or file substitution if possible
+  # Or use `environment.etc` to place config file if service allows.
+  # For now, simplistic setup.
+}