---
version: '3.9'

services:
  searxng:
    image: searxng/searxng:latest  # >.<
    container_name: searxng
    restart: always
    networks:
      - default
      - backend
    volumes:
      - ./settings.yml:/etc/searxng/settings.yml:ro,z
      - ./uwsgi.ini:/etc/searxng/uwsgi.ini:ro,z
      - ./limiter.toml:/etc/searxng/limiter.toml:ro,z
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.searxng.rule=Host(`search.tobiasmanske.de`)"
      - "traefik.http.routers.searxng.entryPoints=websecure"
      - "traefik.http.services.searxng.loadbalancer.server.port=8080"
      - "traefik.http.middlewares.compression.compress=true"
      - "traefik.http.routers.searxng.middlewares=compression"

  redis:
    container_name: redis
    image: "redis:alpine"
    restart: always
    command: redis-server --save "" --appendonly "no"
    networks:
      - backend
    tmpfs:
      - /var/lib/redis
    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - SETUID
      - DAC_OVERRIDE

networks:
  backend:
    internal: true
...