services:
  searxng:
    image: searxng/searxng:latest
    container_name: searxng
    restart: unless-stopped
    environment:
      - SEARXNG_BASE_URL=${BASE_URL:-http://localhost:8099}/
      - SEARXNG_SECRET=${SEARXNG_SECRET:?secret required}
      - UWSGI_WORKERS=4
      - UWSGI_THREADS=4
    ports:
      - "${HTTP_PORT:-8099}:8080"
    volumes:
      - ${DATA_PATH:-/srv/searxng}:/etc/searxng
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID