diff --git a/krebs/3modules/lass/default.nix b/krebs/3modules/lass/default.nix
index 3711a7759..300ea2ccc 100644
--- a/krebs/3modules/lass/default.nix
+++ b/krebs/3modules/lass/default.nix
@@ -67,6 +67,7 @@ in {
             "cgit.prism.r"
             "paste.r"
             "p.r"
+            "search.r"
           ];
           tinc.port = 655;
           tinc.pubkey = ''
diff --git a/lass/1systems/prism/config.nix b/lass/1systems/prism/config.nix
index 6f61ea57e..25d688696 100644
--- a/lass/1systems/prism/config.nix
+++ b/lass/1systems/prism/config.nix
@@ -194,6 +194,7 @@ with import <stockholm/lib>;
     }
     <stockholm/lass/2configs/minecraft.nix>
     <stockholm/lass/2configs/codimd.nix>
+    <stockholm/lass/2configs/searx.nix>
     {
       services.taskserver = {
         enable = true;
diff --git a/lass/2configs/searx.nix b/lass/2configs/searx.nix
new file mode 100644
index 000000000..ed6586a26
--- /dev/null
+++ b/lass/2configs/searx.nix
@@ -0,0 +1,23 @@
+{ pkgs, ... }:
+let
+  port = 8889;
+in {
+  services.nginx.virtualHosts.search = {
+    serverAliases = [ "search.r" ];
+    locations."/".extraConfig = ''
+      proxy_set_header Host $host;
+      proxy_pass http://127.0.0.1:${builtins.toString port};
+    '';
+  };
+
+  services.searx = {
+    enable = true;
+    configFile = pkgs.writeText "searx.cfg" (builtins.toJSON {
+      use_default_settings = true;
+      server = {
+        port = port;
+        secret_key = builtins.readFile <secrets/searx.key>;
+      };
+    });
+  };
+}
diff --git a/lass/2configs/tests/dummy-secrets/searx.key b/lass/2configs/tests/dummy-secrets/searx.key
new file mode 100644
index 000000000..bd88e01cd
--- /dev/null
+++ b/lass/2configs/tests/dummy-secrets/searx.key
@@ -0,0 +1 @@
+yolo