deploy/searxng/settings.yml enables the json format, turns off the public limiter and bot detection (internal use only) and keeps only general web search engines; the secret key comes from SEARXNG_SECRET in the git-ignored deploy/secrets/searxng.env. deploy/compose.yaml adds the searxng service (digest-pinned image, mealquest network only, no published port, healthcheck, read-only root) and sets MEALQUEST_SEARXNG_URL=http://searxng:8080 for mealquest. deploy/compose.dev.yaml publishes it on 127.0.0.1:8888 for development. RUNBOOK and .env.example document the new secret and checks. Task 641f468b-68e9-42e2-b640-3199984cf75c. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
62 lines
1.6 KiB
YAML
62 lines
1.6 KiB
YAML
# SearXNG settings for the MealQuest recipe-search sidecar (Feature 10).
|
|
# Mounted read-only at /etc/searxng/settings.yml by deploy/compose.yaml.
|
|
#
|
|
# Internal use only: SearXNG is reachable on the compose network
|
|
# `mealquest` and nowhere else, and its only client is the mealquest
|
|
# service. That is why the public limiter and bot detection are off.
|
|
#
|
|
# The secret key is not in this file. SearXNG reads it from SEARXNG_SECRET,
|
|
# set from deploy/secrets/searxng.env (never committed). Without it the
|
|
# default "ultrasecretkey" stays in place and SearXNG refuses to start.
|
|
#
|
|
# Settings reference: https://docs.searxng.org/admin/settings/
|
|
|
|
use_default_settings:
|
|
engines:
|
|
# General web search engines only; every other default engine is
|
|
# dropped.
|
|
keep_only:
|
|
- duckduckgo
|
|
- brave
|
|
- google
|
|
- bing
|
|
- mojeek
|
|
- startpage
|
|
|
|
general:
|
|
instance_name: MealQuest search
|
|
|
|
server:
|
|
# Internal use: no public limiter and no bot detection.
|
|
limiter: false
|
|
public_instance: false
|
|
image_proxy: false
|
|
|
|
search:
|
|
safe_search: 0
|
|
# No autocomplete: the mealquest service never asks for suggestions.
|
|
autocomplete: ""
|
|
# json is the format the mealquest service reads; html stays for
|
|
# debugging through deploy/compose.dev.yaml.
|
|
formats:
|
|
- html
|
|
- json
|
|
|
|
# Some general web engines are disabled or inactive by default; enable all
|
|
# of the kept ones.
|
|
engines:
|
|
- name: duckduckgo
|
|
disabled: false
|
|
- name: brave
|
|
disabled: false
|
|
- name: google
|
|
disabled: false
|
|
- name: bing
|
|
disabled: false
|
|
- name: mojeek
|
|
disabled: false
|
|
inactive: false
|
|
- name: startpage
|
|
disabled: false
|
|
inactive: false
|