{
  services.searx = {
    enable = true;
    settings.server = {
      port = 8080;
      secret_key = "secret_key";
    };
  };

  services.caddy.virtualHosts."https://searxng.tailc50184.ts.net".extraConfig = ''
    bind tailscale/searxng
    reverse_proxy http://localhost:8080
  '';
}