services:
  redis:
    image: redis:alpine
    container_name: searx-redis
    restart: unless-stopped
    command: redis-server --save "" --appendonly "no"
    tmpfs:
      - /var/lib/redis
    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - SETUID
      - DAC_OVERRIDE
    networks:
      - default

  searxng:
    image: searxng/searxng:latest
    container_name: searxng
    restart: unless-stopped
    labels:
      - "com.ghost.tel/stack-type=public"
      - "traefik.enable=true"
      - "traefik.http.routers.searx.entrypoints=https"
      - "traefik.http.routers.searx.rule=Host(`searx.uplink.tel`)"
      - "traefik.http.routers.searx.tls.certresolver=http"
      - "traefik.http.services.searx.loadbalancer.server.port=8080"
    environment:
      - SEARXNG_BASE_URL=https://searx.uplink.tel/
    volumes:
      - ./config:/etc/searxng:rw
    expose:
      - "8080"
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    logging:
      driver: "json-file"
      options:
        max-size: "1m"
        max-file: "1"
    depends_on:
      - redis
    networks:
      - web
      - default

networks:
  web:
    external: true