{ config, pkgs, ... }:

{
  services.searx = {
    enable = true;
    # settings.server.secret_key set in secrets.nix
    settings = {
      server = {
        port = 8082;
        bind_address = "127.0.0.1";
        # secret_key = ...; # Set via env var in file
      };
    };
  };
  
  # Inject secret via env vars or file substitution if possible
  # Or use `environment.etc` to place config file if service allows.
  # For now, simplistic setup.
}