apps

apps/searxng/manifest.yml

@@ -0,0 +1,47 @@
+app:
+  id: searxng
+  name: SearXNG
+  version: 2024.1.0
+  description: Privacy-respecting metasearch engine. Search the web without tracking.
+  
+  container:
+    image: searxng/searxng:2024.1.0
+    image_signature: cosign://...
+    pull_policy: if-not-present
+    
+  dependencies:
+    - storage: 2Gi
+    
+  resources:
+    cpu_limit: 2
+    memory_limit: 1Gi
+    disk_limit: 2Gi
+    
+  security:
+    capabilities: []
+    readonly_root: true
+    network_policy: isolated
+    apparmor_profile: searxng
+    
+  ports:
+    - host: 8888
+      container: 8080
+      protocol: tcp  # Web UI
+    
+  volumes:
+    - type: bind
+      source: /var/lib/archipelago/searxng
+      target: /etc/searxng
+      options: [rw]
+      
+  environment:
+    - SEARXNG_HOSTNAME=localhost
+    - SEARXNG_BIND_ADDRESS=0.0.0.0:8080
+    
+  health_check:
+    type: http
+    endpoint: http://localhost:8888
+    path: /
+    interval: 30s
+    timeout: 5s
+    retries: 3