Initial Commit

searxng/README.md

@@ -0,0 +1,7 @@
+# SearXNG
+
+This nomad file runs the [SearXNG](https://docs.searxng.org/) metasearch engine. SearXNG is a search engine that takes its results from other search engines and aggregates all of them into one, also known as a metasearch engine.
+
+There is one thing you will want to change in this config. In the `env` stanza, there is a secret set to "CHANGE ME". Set this to a random string. If you're on Linux, most linux distros can generate a suitable string using `openssl rand -base64 25`.
+
+This job is stateless, so it can be moved around freely by Nomad.

searxng/searxng.nomad

@@ -0,0 +1,50 @@
+job "searxng" {
+  region      = "global"
+  datacenters = ["dc1"]
+  type        = "service"
+
+  group "searxng" {
+    count = 1
+
+    network {
+      port "searx" {}
+    }
+
+    task "searxng" {
+      driver = "docker"
+
+      env {
+        BIND_ADDRESS     = "0.0.0.0:${NOMAD_PORT_searx}"
+        SEARXNG_BASE_URL = "https://search.arsenm.dev"
+        SEARXNG_SECRET   = "CHANGE ME"
+      }
+
+      config {
+        image = "searxng/searxng:latest"
+
+        ports = ["searx"]
+
+        cap_drop = ["all"]
+        cap_add = [
+          "chown",
+          "setgid",
+          "setuid",
+          "dac_override"
+        ]
+      }
+
+      service {
+        name = "searxng"
+        port = "searx"
+
+        tags = [
+          "traefik.enable=true",
+          "traefik.http.routers.searxng.rule=Host(`search.arsenm.dev`)",
+          "traefik.http.routers.searxng.tls.certResolver=letsencrypt",
+          "traefik.http.routers.searxng.middlewares=searxng-headers",
+          "traefik.http.middlewares.searxng-headers.headers.customrequestheaders.X-Robots-Tag=noindex, noarchive, nofollow"
+        ]
+      }
+    }
+  }
+}