{ config, pkgs, ... }:

{
  services.searx = {
    enable = true;
    package = pkgs.searxng;
    settings = {
      server = {
        port = 8082;
        bind_address = "127.0.0.1";
        secret_key = config.mySecrets.searxKey;
      };
    };
  };
  
  # Inject secret via env vars or file substitution if possible
  # Or use `environment.etc` to place config file if service allows.
  # For now, simplistic setup.
}