refactor: moved nixos modules to dendrite pattern

modules/nixos/programs/searx/searx.nix

@@ -0,0 +1,61 @@
+{...}: {
+  flake.nixosModules.searx-service = {
+    config,
+    lib,
+    inputs,
+    ...
+  }: {
+    config = lib.mkIf config.services.searx.enable {
+      sops.secrets = {
+        "services/searx" = {
+          sopsFile = "${inputs.secrets}/defiant-services.yaml";
+        };
+      };
+
+      services.searx = {
+        environmentFile = config.sops.secrets."services/searx".path;
+
+        # Rate limiting
+        limiterSettings = {
+          real_ip = {
+            x_for = 1;
+            ipv4_prefix = 32;
+            ipv6_prefix = 56;
+          };
+
+          botdetection = {
+            ip_limit = {
+              filter_link_local = true;
+              link_token = true;
+            };
+          };
+        };
+
+        settings = {
+          server = {
+            port = 8083;
+            secret_key = "@SEARXNG_SECRET@";
+          };
+
+          # Search engine settings
+          search = {
+            safe_search = 2;
+            autocomplete_min = 2;
+            autocomplete = "duckduckgo";
+          };
+
+          # Enabled plugins
+          enabled_plugins = [
+            "Basic Calculator"
+            "Hash plugin"
+            "Tor check plugin"
+            "Open Access DOI rewrite"
+            "Hostnames plugin"
+            "Unit converter plugin"
+            "Tracker URL remover"
+          ];
+        };
+      };
+    };
+  };
+}