name: searxng
secrets:
  SECRET_KEY:
    file: './secrets/SECRET_KEY'
services:
  redis:
    container_name: searxng_redis
    image: docker.io/valkey/valkey:8-alpine
    command: valkey-server --save 30 1 --loglevel warning
    restart: unless-stopped
    networks:
      - default
    volumes:
      - valkey-data:/data
    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - SETUID
      - DAC_OVERRIDE
    logging:
      driver: "json-file"
      options:
        max-size: "1m"
        max-file: "1"

  searxng:
    container_name: searxng_app
    image: docker.io/searxng/searxng:latest
    restart: unless-stopped
    networks:
      - default
    ports:
      - "8080:8080"
    volumes:
      - ./config:/etc/searxng:rw
    secrets:
      - SECRET_KEY
    environment:
      - SEARXNG_BASE_URL=https://search.64815139.xyz
      - SEARXNG_SECRET= /run/secrets/SECRET_KEY
      - UWSGI_WORKERS=4
      - UWSGI_THREADS=4
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    logging:
      driver: "json-file"
      options:
        max-size: "1m"
        max-file: "1"

networks:
  default:
    external: false

volumes:
  valkey-data: