SearXNG をオフショアVPSでホスト

# 1. Create the config dir and a settings.yml (SearXNG generates one on first boot).
# 2. Generate a real secret:  openssl rand -hex 32
# 3. docker compose up -d
#
# docker-compose.yml
services:
  searxng:
    image: docker.io/searxng/searxng:latest
    container_name: searxng
    restart: unless-stopped
    ports:
      - "127.0.0.1:8080:8080"      # bind to loopback; put a TLS proxy in front
    volumes:
      - ./searxng:/etc/searxng:rw
    environment:
      - SEARXNG_BASE_URL=https://search.example.com/
      - SEARXNG_SECRET=REPLACE_WITH_openssl_rand_hex_32
      - UWSGI_WORKERS=4
      - UWSGI_THREADS=4
    depends_on:
      - valkey
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    logging:
      driver: json-file
      options:
        max-size: "1m"
        max-file: "1"

  valkey:
    image: docker.io/valkey/valkey:8-alpine
    container_name: searxng-valkey
    restart: unless-stopped
    command: valkey-server --save 30 1 --loglevel warning
    volumes:
      - valkey-data:/data
    cap_drop:
      - ALL
    cap_add:
      - SETGID
      - SETUID
      - DAC_OVERRIDE

volumes:
  valkey-data:

# After first boot, edit ./searxng/settings.yml:
#   server.secret_key: <same 32-byte hex>
#   server.limiter: true
#   valkey.url: redis://searxng-valkey:6379/0
# then:  docker compose restart searxng