add searxng

This commit is contained in:
Joseph Hanson 2024-09-05 05:41:21 -05:00
parent 9e126bd52e
commit 84b5f5f139
Signed by: jahanson
SSH key fingerprint: SHA256:vy6dKBECV522aPAwklFM3ReKAVB086rT3oWwiuiFG7o
7 changed files with 232 additions and 0 deletions

View file

@ -21,3 +21,4 @@ resources:
- ./it-tools/ks.yaml - ./it-tools/ks.yaml
- ./excalidraw/ks.yaml - ./excalidraw/ks.yaml
- ./recyclarr/ks.yaml - ./recyclarr/ks.yaml
- ./searxng/ks.yaml

View file

@ -0,0 +1,19 @@
---
# yaml-language-server: $schema=https://ks.hsn.dev/external-secrets.io/externalsecret_v1beta1.json
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: searxng
spec:
secretStoreRef:
kind: ClusterSecretStore
name: onepassword-connect
target:
name: searxng-secret
template:
engineVersion: v2
data:
SEARXNG_SECRET: "{{ .SEARXNG_SECRET }}"
dataFrom:
- extract:
key: searxng

View file

@ -0,0 +1,112 @@
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: searxng
spec:
interval: 30m
chart:
spec:
chart: app-template
version: 3.4.0
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
install:
remediation:
retries: 3
upgrade:
cleanupOnFail: true
remediation:
retries: 3
strategy: rollback
values:
controllers:
searxng:
annotations:
reloader.stakater.com/auto: "true"
containers:
app:
image:
repository: docker.io/searxng/searxng
tag: 2024.7.7-ef103ba80
envFrom:
- secretRef:
name: searxng-secret
env:
TZ: America/Chicago
SEARXNG_BASE_URL: https://search.jahanson.tech
SEARXNG_URL: https://search.jahanson.tech
SEARXNG_PORT: &port 8080
probes:
liveness: &probes
enabled: true
custom: true
spec:
httpGet:
path: /stats
port: *port
initialDelaySeconds: 0
periodSeconds: 10
timeoutSeconds: 1
failureThreshold: 3
readiness: *probes
startup:
enabled: false
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
capabilities:
drop:
- ALL
add:
- CHOWN
- SETGID
- SETUID
- DAC_OVERRIDE
resources:
requests:
cpu: 10m
limits:
memory: 3Gi
service:
app:
controller: searxng
ports:
http:
port: *port
ingress:
app:
enabled: true
className: internal-nginx
hosts:
- host: &host "search.jahanson.tech"
paths:
- path: /
service:
identifier: app
port: http
tls:
- hosts:
- *host
persistence:
config:
type: configMap
name: searxng-configmap
advancedMounts:
searxng:
app:
- path: /etc/searxng/settings.yml
subPath: settings.yml
readOnly: true
- path: /etc/searxng/limiter.toml
subPath: limiter.toml
readOnly: true
tmp:
type: emptyDir
advancedMounts:
searxng:
app:
- path: /etc/searxng

View file

@ -0,0 +1,15 @@
---
# yaml-language-server: $schema=https://json.schemastore.org/kustomization
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ./externalsecret.yaml
- ./helmrelease.yaml
- ../../../../templates/gatus/internal
configMapGenerator:
- name: searxng-configmap
files:
- settings.yml=./resources/settings.yml
- limiter.toml=./resources/limiter.toml
generatorOptions:
disableNameSuffixHash: true

View file

@ -0,0 +1,6 @@
# This configuration file updates the default configuration file
# See https://github.com/searxng/searxng/blob/master/searx/limiter.toml
[botdetection.ip_limit]
# activate link_token method in the ip_limit method
link_token = true

View file

@ -0,0 +1,51 @@
---
use_default_settings: true
server:
limiter: false
image_proxy: true
redis:
url: redis://dragonfly.database.svc.cluster.local:6379?db=10
search:
safe_search: 0
autocomplete: brave
formats:
- html
- json
general:
instance_name: HansonSearch
ui:
static_use_hash: true
default_theme: simple
theme_args:
simple_style: dark
infinite_scroll: true
results_on_new_tab: true
enabled_plugins:
- Basic Calculator
- Hash plugin
- Hostnames plugin
- Open Access DOI rewrite
- Self Informations
- Tracker URL remover
- Unit converter plugin
hostnames:
high_priority:
- (.*)\/blog\/(.*)
- (.*\.)?wikipedia.org$
- (.*\.)?github.com$
- (.*\.)?reddit.com$
- (.*\.)?linuxserver.io$
- (.*\.)?docker.com$
- (.*\.)?archlinux.org$
- (.*\.)?stackoverflow.com$
- (.*\.)?askubuntu.com$
- (.*\.)?superuser.com$
replace:
(www\.)?reddit\.com$: red.hsn.dev

View file

@ -0,0 +1,28 @@
---
# yaml-language-server: $schema=https://ks.hsn.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: &app searxng
namespace: flux-system
spec:
targetNamespace: default
commonMetadata:
labels:
app.kubernetes.io/name: *app
dependsOn:
- name: dragonfly
- name: external-secrets-stores
path: ./kubernetes/apps/default/searxng/app
prune: true
sourceRef:
kind: GitRepository
name: theshire
wait: false
interval: 30m
retryInterval: 1m
timeout: 5m
postBuild:
substitute:
APP: *app
GATUS_SUBDOMAIN: search