From 4b7379914a1865f07b2c54252234cc90158fc253 Mon Sep 17 00:00:00 2001
From: Miguel Dalberto Pedro <miguel.pedro@precisioninno.com>
Date: Thu, 29 Oct 2026 12:48:06 -0300
Subject: feat(iac): establish Ansible baseline for Nginx, SearXNG, Valkey, and
 Certbot

- Reverse-engineer live Debian 13 (trixie) VPS state at miguelpedro.xyz.br
- Add modular Ansible roles: common, certbot, valkey, searxng, and nginx
- Encrypt SearXNG secret_key using ansible-vault in group_vars/all/vault.yml
- Cleanly remove unused example.com Nginx stub symlink (sites-enabled/miguelpedro.xyz.br)
- Scaffold cgit + fcgiwrap role (cgit_enabled: false) for upcoming deployment
- Add DISCOVERY_REPORT.md, COMMAND_LOG.md, README.md, and AGENT_INSTRUCTIONS.md with Self-Updating Protocol
---
 roles/searxng/templates/settings.yml.j2 | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 roles/searxng/templates/settings.yml.j2

(limited to 'roles/searxng/templates/settings.yml.j2')

diff --git a/roles/searxng/templates/settings.yml.j2 b/roles/searxng/templates/settings.yml.j2
new file mode 100644
index 0000000..ae23d6f
--- /dev/null
+++ b/roles/searxng/templates/settings.yml.j2
@@ -0,0 +1,25 @@
+# SearXNG settings
+
+use_default_settings: true
+
+general:
+  debug: false
+  instance_name: "{{ searxng_instance_name }}"
+
+search:
+  safe_search: 0
+  autocomplete: "duckduckgo"
+  formats:
+    - html
+    - json
+
+server:
+  # Is overwritten by ${SEARXNG_SECRET}
+  secret_key: "{{ searxng_secret_key }}"
+  limiter: true
+  image_proxy: true
+  base_url: {{ searxng_base_url }}
+
+valkey:
+  # URL to connect valkey database. Is overwritten by ${SEARXNG_VALKEY_URL}.
+  url: {{ searxng_valkey_url }}
-- 
cgit v1.2.3