perfect...

hosts/servers/alexandria/searx.nix

@@ -1,20 +0,0 @@
-{ inputs, config, pkgs, lib, ... }:
-
-{
-  services = {
-    searx = {
-      enable = true;
-      settings = {
-        server.port = config.ports.searx;
-        server.secret_key = "SEARX_SECRET_KEY";
-      };
-    };
-
-    nginx.virtualHosts."searx.baduhai.me" = {
-      useACMEHost = "baduhai.me";
-      forceSSL = true;
-      kTLS = true;
-      locations."/".proxyPass = "http://127.0.0.1:${config.ports.searx}";
-    };
-  };
-}

hosts/servers/alexandria/tailsx.nix

@@ -0,0 +1,10 @@
+{ inputs, config, pkgs, lib, ... }:
+
+{
+  services.nginx.virtualHosts."search.baduhai.me" = {
+    useACMEHost = "baduhai.me";
+    forceSSL = true;
+    kTLS = true;
+    locations."/".proxyPass = "http://127.0.0.1:${config.ports.searx}";
+  };
+}

hosts/servers/alexandria/variables.nix

@@ -19,10 +19,9 @@ in {
     paperless = mkStringOption "8004";
     shiori = mkStringOption "8005";
     cinny2 = mkStringOption "8006";
-    searx = mkStringOption "8007";
+    tailsx = mkStringOption "8007";
     qbittorrent = mkStringOption "8008";
     actual = mkStringOption "8009";
-    gptnw = mkStringOption "8010";
     jellyfin = mkStringOption "8096";
     sonarr = mkStringOption "8989";
     jackett = mkStringOption "9117";

secrets/secrets.nix

@@ -12,6 +12,5 @@ let
   all-hosts = desktops ++ servers;
 in {
   "cloudflare-creds.age".publicKeys = all-hosts;
-  "gptnw-keys.age".publicKeys = all-hosts;
   "paperless-pass.age".publicKeys = all-hosts;
 }