Added Caddyfile configuration + Searxng job

apps/caddy/Caddyfile

@@ -0,0 +1,11 @@
+{
+  email zuma@deuxfleurs.fr
+}
+
+chokbar.bzh {
+  respond "Kenavo !"
+}
+
+search.chokbar.bzh {
+  reverse_proxy searxng.service.consul:8080
+}

apps/caddy/caddy.hcl

@@ -16,6 +16,9 @@ job "caddy" {
         image = "caddy"
         network_mode = "host"
         ports = [ "http_port", "https_port" ]
+        volumes = [
+          "secrets/Caddyfile:/etc/caddy/Caddyfile"
+        ]
       }
 
       resources {
@@ -23,6 +26,12 @@ job "caddy" {
         memory = 400
       }
 
+      template {
+        data = file("./Caddyfile")
+        destination = "secrets/Caddyfile"
+        perms = 400
+      }
+
       service {
         name = "caddy-http"
         port = "http_port"

apps/searxng/searxng.hcl

@@ -0,0 +1,30 @@
+job "searxng" {
+  datacenters = [ "gribse-house", "zuma-house", "mayel-house" ]
+  type = "service"
+  priority = 90
+
+  group "searxng" {
+    network {
+      port "http_port" { static = 8080 }
+    }
+
+    task "server" {
+      driver = "docker"
+
+      config {
+        image = "searxng/searxng:latest"
+        ports = [ "http_port" ]
+      }
+
+      resources {
+        cpu = 500
+        memory = 200
+      }
+
+      service {
+        name = "searxng"
+        port = "http_port"
+      }
+    }
+  }
+}

configuration.nix

@@ -279,6 +279,8 @@ with pkgs.lib;
         enable = true;
         allowedTCPPorts = [
           22 # SSH
+          80 # HTTP
+          443 # HTTPS
         ];
         allowedUDPPorts = [
           19720 # Wireguard