services:
  searxng:
    image: searxng/searxng:latest
    container_name: hermes-searxng
    restart: unless-stopped
    ports:
      - "127.0.0.1:8964:8080"
    networks:
      - hermes-net
    volumes:
      - ../../volumes/searxng/config:/etc/searxng:rw
      - ../../volumes/searxng/data:/etc/searxng/data:rw
    environment:
      - SEARXNG_BASE_URL=http://localhost:8964/
      - SEARXNG_SECRET_KEY=${SEARXNG_SECRET_KEY:?err}
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
      - DAC_OVERRIDE
    logging:
      driver: json-file
      options:
        max-size: 10m
        max-file: 3
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://localhost:8080/"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s

networks:
  hermes-net:
    name: hermes-net
    driver: bridge