From 4b7379914a1865f07b2c54252234cc90158fc253 Mon Sep 17 00:00:00 2001 From: Miguel Dalberto Pedro Date: Thu, 29 Oct 2026 12:48:06 -0300 Subject: feat(iac): establish Ansible baseline for Nginx, SearXNG, Valkey, and Certbot - Reverse-engineer live Debian 13 (trixie) VPS state at miguelpedro.xyz.br - Add modular Ansible roles: common, certbot, valkey, searxng, and nginx - Encrypt SearXNG secret_key using ansible-vault in group_vars/all/vault.yml - Cleanly remove unused example.com Nginx stub symlink (sites-enabled/miguelpedro.xyz.br) - Scaffold cgit + fcgiwrap role (cgit_enabled: false) for upcoming deployment - Add DISCOVERY_REPORT.md, COMMAND_LOG.md, README.md, and AGENT_INSTRUCTIONS.md with Self-Updating Protocol --- roles/nginx/templates/default-app-searxng.conf.j2 | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 roles/nginx/templates/default-app-searxng.conf.j2 (limited to 'roles/nginx/templates/default-app-searxng.conf.j2') diff --git a/roles/nginx/templates/default-app-searxng.conf.j2 b/roles/nginx/templates/default-app-searxng.conf.j2 new file mode 100644 index 0000000..66b1f86 --- /dev/null +++ b/roles/nginx/templates/default-app-searxng.conf.j2 @@ -0,0 +1,23 @@ +location /searxng { + + uwsgi_pass unix://{{ searxng_socket_path }}; + + include uwsgi_params; + + uwsgi_param HTTP_HOST $host; + uwsgi_param HTTP_CONNECTION $http_connection; + + # see flaskfix.py + uwsgi_param HTTP_X_FORWARDED_PROTO $scheme; + uwsgi_param HTTP_X_SCRIPT_NAME /searxng; + + # see botdetection/trusted_proxies.py + uwsgi_param HTTP_X_REAL_IP $remote_addr; + uwsgi_param HTTP_X_FORWARDED_FOR $proxy_add_x_forwarded_for; +} + +# To serve the static files via the HTTP server +# +# location /searxng/static/ { +# alias /usr/local/searxng/searxng-src/searx/static/; +# } -- cgit v1.2.3