# {{ ansible_managed }}
version: "3.8"
services:

  searxng:
    image: git.opnxng.com/opnxng/searxng
    # image: searxng/searxng:latest
    restart: always
    container_name: searxng
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    logging:
      driver: "json-file"
      options:
        max-size: "1m"
        max-file: "1"
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Singapore
      - SEARXNG_BASE_URL=https://opnxng.com
      - UWSGI_WORKERS=1
      - UWSGI_THREADS=16
    depends_on:
      - searxng-redis
    volumes:
      - {{ docker_dir }}/searxng/settings.yml:/usr/local/searxng/searx/settings.yml
      - {{ docker_dir }}/searxng/replace-hosts.yml:/usr/local/searxng/searx/replace-hosts.yml
      - {{ docker_dir }}/searxng/remove-hosts.yml:/usr/local/searxng/searx/remove-hosts.yml
      - {{ docker_dir }}/searxng/donate.md:/usr/local/searxng/searx/infopage/en/donate.md
    network_mode: host

  searxng-redis:
    container_name: searxng-redis
    image: docker.io/valkey/valkey:alpine
    command: valkey-server --save 30 1 --loglevel warning
    restart: always
    security_opt:
      - no-new-privileges
    environment:
      #- PUID=1000
      #- PGID=1000
      - TZ=Asia/Singapore
    volumes:
      - {{ docker_dir }}/searxng/valkey-data:/data
    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - SETUID
      - DAC_OVERRIDE
    logging:
      driver: "json-file"
      options:
        max-size: "1m"
        max-file: "1"
    restart: always
    network_mode: host