Commit abd4cb9e authored by Daniel Perez's avatar Daniel Perez
Browse files

nixos/searx: add openFirewall option 

Added an `openFirewall` option to searx module, similar to many other
modules.

This option adds the specified port from `settings.server.port` to
`networking.firewall.allowedTCPPorts`
parent 58674b7f

nixos/modules/services/networking/searx.nix

+22 −0
Original line number Diff line number Diff line
@@ -54,6 +54,19 @@ in 
        description = "Whether to enable Searx, the meta search engine.";

      };



      openFirewall = mkOption {

        type = types.bool;

        default = false;

        description = ''

          Whether to open the port in the firewall.

          Enabling this option adds the port specified in {option}`services.settings.server.port` to {option}`networking.firewall.allowedTCPPorts`.



          ::: {.note}

          When this option is set to true, {option}`services.settings.server.port` must be set as well or an error will be thrown.

          :::

        '';

      };



      domain = mkOption {

        type = types.str;

        description = ''
@@ -244,6 +257,13 @@ in 
  ];



  config = mkIf cfg.enable {

    assertions = [

      {

        assertion = cfg.openFirewall -> cfg.settings ? server.port;

        message = "services.searx.settings.server.port must be set when openFirewall is enabled.";

      }

    ];



    environment = {

      etc = {

        "searxng/favicons.toml" = lib.mkIf (cfg.faviconsSettings != { }) {
@@ -392,6 +412,8 @@ in 
        isSystemUser = true;

      };

    };



    networking.firewall = lib.mkIf cfg.openFirewall { allowedTCPPorts = [ cfg.settings.server.port ]; };

  };



  meta.maintainers = with maintainers; [