1 files changed, 37 insertions, 0 deletions

diff --git a/hosts/demiurge/default.nix b/hosts/demiurge/default.nix
index 6454187..37672d1 100644
--- a/hosts/demiurge/default.nix
+++ b/hosts/demiurge/default.nix
@@ -157,6 +157,22 @@
   };
 
   services = {
+    # dns
+    dnsmasq = {
+      enable = true;
+      settings = {
+        server = [
+          "192.168.1.1"
+          "/vpn/10.0.13.1"
+        ];
+
+        interface = "lo";
+        listen-address = "127.0.0.1";
+        bind-interfaces = true;
+        no-resolv = true;
+      };
+    };
+
     # graphical input
     libinput = {
       enable = true;
@@ -170,6 +186,27 @@
       };
     };
 
+    # reverse proxy
+    nginx = {
+      enable = true;
+
+      defaultListenAddresses = [ "10.0.13.2" ];
+
+      recommendedGzipSettings = true;
+      recommendedOptimisation = true;
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+
+      virtualHosts = {
+        "searx.demiurge.vpn" = {
+          forceSSL = true;
+          locations."/".proxyPass = "http://127.0.0.1:8081";
+          sslCertificate = "/var/demiurge.vpn.crt";
+          sslCertificateKey = "/var/demiurge.vpn.key";
+        };
+      };
+    };
+
     # ssh
     openssh = {
       enable = true;