# {{ ansible_managed }}
version: '3.7'
services:

  searxng:
    image: git.opnxng.com/opnxng/searxng
    restart: always
    container_name: searxng
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    logging:
      driver: "json-file"
      options:
        max-size: "1m"
        max-file: "1"
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Singapore
      - LIMITER=true
      - REDIS_URL=redis://localhost:6379/0
      - IMAGE_PROXY=true
      - BASE_URL=https://opnxng.com/
      - NAME=SearXNG
      - CONTACT=https://about.opnxng.com/
      - ISSUE_URL=https://github.com/searxng/searxng/issues
      - GIT_URL=https://github.com/paulgoio/searxng
      - GIT_BRANCH=main
      - UWSGI_WORKERS=1
      - UWSGI_THREADS=16
    depends_on:
      - redis
    volumes:
      - {{ docker_dir }}/paulgo/settings.yml:/usr/local/searxng/searx/settings.yml
      - {{ docker_dir }}/paulgo/donate.md:/usr/local/searxng/searx/infopage/en/donate.md
    network_mode: host

  redis:
    container_name: redis
    image: "redis:alpine"
    command: redis-server --save "" --appendonly "no"
    security_opt:
      - no-new-privileges
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Singapore
    tmpfs:
      - /var/lib/redis
    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - SETUID
      - DAC_OVERRIDE
    restart: always
    network_mode: host