home/default.nix

@@ -20,9 +20,11 @@
     du-dust
     bottom
     gnupg
+    gping
     ripgrep
     lazydocker
     yt-dlp
+    cachix
     nfs-utils
     dig
   ];

hosts/sakura/services/searxng.nix

@@ -8,22 +8,7 @@
   services.searx = {
     package = pkgs.searxng;
     enable = true;
-    runInUwsgi = true;
-    uwsgiConfig = {
-      http = ":8100";
-    };
     environmentFile = config.sops.secrets.searxng-secret.path;
-    limiterSettings = {
-      botdetection = {
-        ip_lists = {
-          pass_ip = [
-            "192.168.0.0/16"
-            "172.16.0.0/12"
-            "10.0.0.0/8"
-          ];
-        };
-      };
-    };
     settings = {
       general = {
         debug = false;

hosts/sora/services/traefik.nix

@@ -1,6 +1,6 @@
 {config, ...}: {
   sops.secrets.cloudflare-api-key = {};
-  networking.firewall.allowedTCPPorts = [80 443 2222 8080];
+  networking.firewall.allowedTCPPorts = [80 443 2222];
   systemd.services.traefik = {
     environment = {
       CLOUDFLARE_EMAIL = "jch0tm2e@notohh.dev";
@@ -202,7 +202,7 @@
     };
     staticConfigOptions = {
       log.level = "DEBUG";
-      api.dashboard = true;
+      api.dashboard = false;
       api.insecure = false;
       global = {
         checkNewVersion = false;

modules/prometheus.nix

@@ -13,11 +13,6 @@ _: {
         scrape_interval = "30s";
         static_configs = [{targets = ["localhost:9100"];}];
       }
-      {
-        job_name = "traefik";
-        scrape_interval = "30s";
-        static_configs = [{targets = ["100.87.54.48:8080"];}];
-      }
     ];
     exporters = {
       node = {