From 81639311835ffe1bac14d546ffcc3aa40e9c0265 Mon Sep 17 00:00:00 2001
From: Marko Korhonen <marko@korhonen.cc>
Date: Sun, 14 Aug 2022 00:36:32 +0300
Subject: [PATCH] Add searx

---
 docker/authentik/docker-compose.toml |  2 +-
 docker/nextcloud/docker-compose.toml |  2 +-
 docker/searx/docker-compose.toml     | 46 ++++++++++++++++++++++++++++
 3 files changed, 48 insertions(+), 2 deletions(-)
 create mode 100644 docker/searx/docker-compose.toml

diff --git a/docker/authentik/docker-compose.toml b/docker/authentik/docker-compose.toml
index 48167a92..1914e50d 100644
--- a/docker/authentik/docker-compose.toml
+++ b/docker/authentik/docker-compose.toml
@@ -1,7 +1,7 @@
 [services]
 
 [services.redis]
-container_name = "authentik-redis"
+container_name = "redis-authentik"
 image = "redis:alpine"
 restart = "unless-stopped"
 networks = ["authentik"]
diff --git a/docker/nextcloud/docker-compose.toml b/docker/nextcloud/docker-compose.toml
index e6f8cb11..62362212 100644
--- a/docker/nextcloud/docker-compose.toml
+++ b/docker/nextcloud/docker-compose.toml
@@ -49,7 +49,7 @@ depends_on = ["redis"]
 
 [services.redis]
 image = "redis:alpine"
-container_name = "redis"
+container_name = "redis-nextcloud"
 networks = ["nextcloud"]
 restart = "unless-stopped"
 command = "redis-server --requirepass 123"
diff --git a/docker/searx/docker-compose.toml b/docker/searx/docker-compose.toml
new file mode 100644
index 00000000..967f4bf1
--- /dev/null
+++ b/docker/searx/docker-compose.toml
@@ -0,0 +1,46 @@
+version = "3.7"
+
+[services]
+
+[services.searx]
+container_name = "searx"
+image = "searxng/searxng:latest"
+networks = ["searx", "proxy"]
+volumes = ["/docker/searx:/etc/searxng:rw"]
+environment = ["SEARXNG_BASE_URL=https://searx.korhonen.cc/"]
+cap_drop = ["ALL"]
+cap_add = ["CHOWN", "SETGID", "SETUID", "DAC_OVERRIDE"]
+labels = [
+  "traefik.enable=true",
+  "traefik.docker.network=proxy",
+  "traefik.http.routers.searx-redirect.entrypoints=http",
+  "traefik.http.routers.searx-redirect.rule=Host(`searx.korhonen.cc`)",
+  "traefik.http.routers.searx-redirect.middlewares=http2https@file",
+  "traefik.http.routers.searx.entrypoints=https",
+  "traefik.http.routers.searx.middlewares=secHeaders@file,compress@file",
+  "traefik.http.routers.searx.rule=Host(`searx.korhonen.cc`)",
+  "traefik.http.routers.searx.service=searx",
+  "traefik.http.services.searx.loadbalancer.server.port=8080",
+]
+
+[services.searx.logging]
+driver = "json-file"
+
+[services.searx.logging.options]
+max-size = "1m"
+max-file = "1"
+
+[services.redis]
+container_name = "redis-searx"
+image = "redis:alpine"
+command = "redis-server --save \"\" --appendonly \"no\""
+networks = ["searx"]
+tmpfs = ["/var/lib/redis"]
+cap_drop = ["ALL"]
+cap_add = ["SETGID", "SETUID", "DAC_OVERRIDE"]
+
+[networks.searx.ipam]
+driver = "default"
+
+[networks.proxy]
+external = true