services:
  valkey:
    image: docker.io/valkey/valkey:8-alpine
    container_name: searxng-valkey
    command: valkey-server --save 30 1 --loglevel warning
    restart: unless-stopped
    volumes:
      - valkey-data:/data
    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - SETUID
      - DAC_OVERRIDE

  searxng:
    image: docker.io/searxng/searxng:latest
    container_name: searxng-core
    restart: unless-stopped
    ports:
      - "8888:8080"
    environment:
      - SEARXNG_SECRET=${SEARXNG_SECRET}
      - SEARXNG_BASE_URL=${SEARXNG_BASE_URL}
    volumes:
      - ./config:/etc/searxng:rw
      - searxng-data:/var/cache/searxng
    networks:
      - proxy
      - searxng-internal
    depends_on:
      - valkey
    labels:
      - "treafik.enable=true"
      - "treafik.http.routers.searxng.rule=Host(`search.home`)"
      - "treafik.http.routers.searxng.entrypoints=websecure"
      - "treafik.http.routers.searxng.tls=true"
      - "treafik.http.services.searxng.loadbalancer.server.port=8080"

volumes:
  valkey-data:
  searxng-data:

networks:
  proxy:
    external: true
  searxng-internal: