services/searxng: enable SOPS usage for secret key

services/searxng.nix

@@ -20,10 +20,19 @@ in
     enable = mkEnableOption "Enables searxng module";
   };
 
+  sops.secrets."SEARXNG_SECRETS" = {
+    sopsFile = ../../secrets/${config.networking.hostName}_searxng.env;
+    format = "binary";
+    owner = "searxng";
+    mode = 0400;
+  };
+
   config = mkIf cfg.enable {
     services.searx = {
       enable = true;
       package = pkgsUnstable.searxng;
+      redisCreateLocally = true;
+      environmentFile = sops.secrets."SEARXNG_SECRETS".path;
 
       settings = {
         general = {
@@ -45,7 +54,7 @@ in
           base_url = "https://${config.networking.hostName}.tail755c5.ts.net/search/";
           public_instance = false;
           method = "POST";
-          secret_key = "testkey";
+          secret_key = "@SEARXNG_SECRET@";
         };
         ui = {
           infinite_scroll = true;