blob: fc43c8d33e8d79c871e8529e67b524fbd06c8fa6 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
|
{
config,
lib,
pkgs,
...
}:
let
cfg = config.services.websurfx;
settingsFormat = pkgs.formats.lua { asBindings = true; };
settingsFile = settingsFormat.generate "config.lua" cfg.settings;
in
{
options = {
services.websurfx = {
enable = lib.mkEnableOption "Websurfx, a metasearch engine";
package = lib.mkPackageOption pkgs "websurfx" { };
openFirewall = lib.mkEnableOption "Whether to open the used port in the firewall";
settings = lib.mkOption {
type = lib.types.submodule {
freeformType = settingsFormat.type;
options.binding_ip = lib.mkOption {
type = lib.types.str;
default = "127.0.0.1";
description = "IP address on which the server should be launched";
};
options.port = lib.mkOption {
type = lib.types.port;
default = 4567;
description = "Port on which the server should be launched";
};
};
default = { };
description = ''
Configuration options for Websurfx, see
[websurfx/config.lua](https://github.com/neon-mmd/websurfx/blob/rolling/websurfx/config.lua)
for supported values.
'';
};
};
};
config = lib.mkIf cfg.enable {
services.websurfx.settings = {
# General
logging = lib.mkDefault true;
debug = lib.mkDefault false;
threads = lib.mkDefault 10;
# Server
production_use = lib.mkDefault false;
request_timeout = lib.mkDefault 30;
tcp_connection_keep_alive = lib.mkDefault 30;
pool_idle_connection_timeout = lib.mkDefault 30;
rate_limiter = {
number_of_requests = lib.mkDefault 20;
time_limit = lib.mkDefault 3;
};
https_adaptive_window_size = lib.mkDefault true;
operating_system_tls_certificates = lib.mkDefault true;
number_of_https_connections = lib.mkDefault 10;
client_connection_keep_alive = lib.mkDefault 120;
# Search
safe_search = lib.mkDefault 2;
# Website
colorscheme = lib.mkDefault "catppuccin-mocha";
theme = lib.mkDefault "simple";
animation = lib.mkDefault "simple-frosted-glow";
# Caching
#redis_url = "redis://127.0.0.1:8082"; # The nixpkgs build doesn't have the redis-cache feature enabled
cache_expiry_time = lib.mkDefault 600;
# Search Engines
upstream_search_engines = {
DuckDuckGo = lib.mkDefault true;
Searx = lib.mkDefault false;
Brave = lib.mkDefault false;
Startpage = lib.mkDefault false;
LibreX = lib.mkDefault false;
Mojeek = lib.mkDefault false;
Bing = lib.mkDefault false;
Wikipedia = lib.mkDefault true;
Yahoo = lib.mkDefault false;
};
proxy = lib.mkDefault null;
};
networking.firewall.allowedTCPPorts = lib.mkIf cfg.openFirewall [ cfg.settings.port ];
systemd.services.websurfx = {
description = "Websurfx, a metasearch engine";
serviceConfig = {
ExecStart = lib.getExe cfg.package;
DynamicUser = true;
RuntimeDirectory = "websurfx";
Environment = [ "HOME=%t/websurfx" ];
BindReadOnlyPaths = [ "${settingsFile}:%t/websurfx/.config/websurfx/config.lua" ];
};
wants = [ "network-online.target" ];
after = [ "network-online.target" ];
wantedBy = [ "multi-user.target" ];
};
};
meta.maintainers = [ lib.maintainers.SchweGELBin ];
}
|
