begin work on authentik again

system/virtualization/docker/searxng/default.nix

@@ -1,4 +1,12 @@
-{ config, lib, ... }: {
+{ config, lib, ... }: let
+
+    hostPort = 9002;
+
+    subdomain = "searxng";
+
+    name = "searxng";
+
+in {
 
     options.sysconfig.docker.searxng.enable = with lib; mkOption {
         type = with types; bool;
@@ -9,7 +17,7 @@
  
         networking.firewall.interfaces = {
             "ve-traefik" = {
-                allowedTCPPorts = [ 9002 ];
+                allowedTCPPorts = [ hostPort ];
             };
         };
 
@@ -21,19 +29,19 @@
             # unstable, waiting for 26.05
             #pull = "newer";
 
-            hostname = "searxng.esotericbytes.com";
+            hostname = "${subdomain}.esotericbytes.com";
 
             networks = [
                 "docker-main"
             ];
 
             labels = {
-                "traefik.http.routers.searxng.entrypoints" = "localsecure";
-                "traefik.http.routers.searxng.rule" = "Host(`searxng.esotericbytes.com`)";
-                "traefik.http.routers.searxng.service" = "searxng";
-                "traefik.http.routers.searxng.tls.certResolver" = "cloudflare";
+                "traefik.http.routers.${name}.entrypoints" = "localsecure";
+                "traefik.http.routers.${name}.rule" = "Host(`${subdomain}.esotericbytes.com`)";
+                "traefik.http.routers.${name}.service" = "${name}";
+                "traefik.http.routers.${name}.tls.certResolver" = "cloudflare";
                 
-                "traefik.http.services.searxng.loadbalancer.server.url" = "http://192.168.100.10:9002";
+                "traefik.http.services.${name}.loadbalancer.server.url" = "http://192.168.100.10:${builtins.toString hostPort}";
             };
 
             extraOptions = lib.mkIf config.sysconfig.docker.nvidia [
@@ -41,7 +49,7 @@
             ];
 
             ports = [
-                "9002:8080"
+                "${builtins.toString hostPort}:8080"
             ];
 
             volumes = [