Merge branch 'main' into feat/headscale

configuration.nix

@@ -102,11 +102,19 @@
   myModules.nginx = {
     enable = true;
     email = "info@ashisgreat.xyz";
+    rateLimit = {
+      enable = true;
+      requests = 10;
+      burst = 20;
+    };
     domains = {
       "search.ashisgreat.xyz" = {
         port = 8888;
         # SearXNG sets its own CSP in settings.yml — omit at Nginx level to avoid conflicts
         contentSecurityPolicy = null;
+        # Search engine — slightly more permissive for bot traffic
+        rateLimit.requests = 20;
+        rateLimit.burst = 40;
       };
     };
   };