Set up initial whoogle config

home/features/cli/ssh.nix

@@ -2,4 +2,7 @@
   programs.ssh.enable = true;
 
   satellite.persistence.at.state.apps.ssh.directories = [ ".ssh" ];
+
+  # Makes it easy to copy ssh keys at install time without messing up permissions
+  systemd.user.tmpfiles.rules = [ "d /persist/state/home/adrielus/ssh/.ssh/etc/ssh" ];
 }

hosts/nixos/common/global/services/openssh.nix

@@ -62,4 +62,7 @@ in
         (_: { publicKeyFile, ... }: builtins.pathExists publicKeyFile))
     ];
   };
+
+  # Makes it easy to copy host keys at install time without messing up permissions
+  systemd.tmpfiles.rules = [ "d /persist/state/etc/ssh" ];
 }

hosts/nixos/common/global/wireless/default.nix

@@ -56,4 +56,8 @@
     # TODO: investigate why this doesn't work
     # "/etc/wpa_supplicant.conf"
   ];
+
+
+  # The service seems to fail if this file does not exist
+  systemd.tmpfiles.rules = [ "f /etc/wpa_supplicant.conf" ];
 }

hosts/nixos/common/optional/podman.nix

@@ -0,0 +1,10 @@
+{
+  virtualisation = {
+    podman = {
+      enable = true;
+      dockerCompat = true;
+    };
+
+    oci-containers.backend = "podman";
+  };
+}

hosts/nixos/lapetus/default.nix

@@ -5,6 +5,7 @@
     ../common/optional/services/slambda.nix
 
     ./services/syncthing.nix
+    ./services/whoogle.nix
     ./filesystems
     ./hardware
   ];

hosts/nixos/lapetus/services/whoogle.nix

@@ -0,0 +1,26 @@
+{ lib, ... }:
+let
+  port = 8401;
+  websiteBlocklist = [
+    "www.saashub.com/"
+    "slant.co"
+    "nix-united.com"
+    "libhunt.com"
+  ];
+in
+{
+  imports = [ ../../common/optional/podman.nix ];
+
+  networking.firewall.allowedTCPPorts = [ port ];
+  virtualisation.oci-containers.whoogle-search = {
+    image = "benbusby/whoogle-search";
+    autoStart = true;
+    ports = "${port}:5000"; # server:docker
+    environment = {
+      WHOOGLE_UPDATE_CHECK = 0;
+      WHOOGLE_CONFIG_DISABLE = 0;
+      WHOOGLE_CONFIG_BLOCK = lib.concatStringsSep websiteBlocklist;
+      WHOOGLE_CONFIG_THEME = "system";
+    };
+  };
+}