Add Searxng.

hosts/hub/apps/searxng.nix

@@ -0,0 +1,23 @@
+{ config, ... }:
+
+{
+  systemd.tmpfiles.rules = [
+    "d /var/lib/searxng 0755 root root"
+  ];
+
+  virtualisation.oci-containers.containers.searxng = {
+    image = "searxng/searxng:latest";
+    environment = {
+      BASE_URL = "https://searxng.tailc50184.ts.net";
+    };
+    ports = [
+      "8080:8080"
+    ];
+    volumes = [ "/var/lib/searxng:/etc/searxng" ];
+  };
+
+  services.caddy.virtualHosts."https://searxng.tailc50184.ts.net".extraConfig = ''
+    bind tailscale/searxng
+    reverse_proxy http://localhost:8080
+  '';
+}

hosts/hub/default.nix

@@ -22,6 +22,7 @@
     ../../roles/syncthing.nix
     ./apps/dev.nix
     ./apps/nextcloud.nix
+    ./apps/searxng.nix
   ];
 
   boot.loader.grub = {