{ config
, lib
, ...
}:
with lib;
mkIf config.services.searx.enable {
  services.searx = {
    settings = {
      server = {
        port = 8000;
        bind_address = "0.0.0.0";
        secret_key = "sow4ruu4phaij7aich3wohshaec0iShieyieM3Shooch0Quaileeyu5edienaifa";
        limiter = false;
      };

      ui = {
        use_static_hash = true;
      };

      enabled_plugins = [
        "Hash plugin"
        "Self Informations"
        "Tracker URL remover"
        "Ahmia blacklist"
      ];

      search = {
        safe_search = 0;
        default_lang = "";
        formats = [ "html" "json" ];
        autocomplete = "duckduckgo";
      };
    };
    limiterSettings = {
      botdetection.ip_limit.link_token = false;
    };
  };
  networking.firewall.allowedTCPPorts = [ config.services.searx.settings.server.port ];
}