Initial

Signed-off-by: Tobias Manske <tobias.manske@mailbox.org>

compose/03_search/.env

@@ -0,0 +1 @@
+COMPOSE_PROJECT_NAME=searxng

compose/03_search/docker-compose.yml

@@ -0,0 +1,45 @@
+---
+version: '3.9'
+
+services:
+  searxng:
+    image: searxng/searxng:latest  # >.<
+    container_name: searxng
+    restart: always
+    networks:
+      - gateway
+      - default
+      - backend
+    volumes:
+      - ./settings.yml:/etc/searxng/settings.yml:ro,z
+      - ./uwsgi.ini:/etc/searxng/uwsgi.ini:ro,z
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.searxng.rule=Host(`search.tobiasmanske.de`)"
+      - "traefik.http.routers.searxng.entryPoints=websecure"
+      - "traefik.http.services.searxng.loadbalancer.server.port=8080"
+      - "com.centurylinklabs.watchtower.scope=update"
+
+  redis:
+    container_name: redis
+    image: "redis:alpine"
+    command: redis-server --save "" --appendonly "no"
+    networks:
+      - backend
+    tmpfs:
+      - /var/lib/redis
+    cap_drop:
+      - ALL
+    cap_add:
+      - SETGID
+      - SETUID
+      - DAC_OVERRIDE
+
+networks:
+  gateway:
+    external: true
+  backend:
+    internal: true
+
+volumes:
+  data:

compose/03_search/uwsgi.ini

@@ -0,0 +1,49 @@
+[uwsgi]
+# Who will run the code
+uid = searxng
+gid = searxng
+
+# Number of workers (usually CPU count)
+workers = %k
+threads = 4
+
+# The right granted on the created socket
+chmod-socket = 666
+
+# Plugin to use and interpretor config
+single-interpreter = true
+master = true
+plugin = python3
+lazy-apps = true
+enable-threads = true
+
+# Module to import
+module = searx.webapp
+
+# Virtualenv and python path
+pythonpath = /usr/local/searxng/
+chdir = /usr/local/searxng/searx/
+
+# automatically set processes name to something meaningful
+auto-procname = true
+
+# Disable request logging for privacy
+disable-logging = true
+log-5xx = true
+
+# Set the max size of a request (request-body excluded)
+buffer-size = 8192
+
+# No keep alive
+# See https://github.com/searx/searx-docker/issues/24
+add-header = Connection: close
+
+# uwsgi serves the static files
+# expires set to one year since there are hashes
+static-map = /static=/usr/local/searxng/searx/static
+static-expires = /* 31557600
+static-gzip-all = True
+offload-threads = %k
+
+# Cache
+cache2 = name=searxngcache,items=2000,blocks=2000,blocksize=4096,bitmap=1