version: '3.7'

networks:
  traefik:
    external: true
  default:
    driver: overlay

services:
  redis:
    image: docker.io/library/redis:alpine
    networks:
      - default
      - traefik
    volumes:
      - /mnt/tank/persist/nixc.us/searxng/redis:/data
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.hostname == ingress.nixc.us
    logging:
      driver: "gelf"
      options:
        gelf-address: "udp://log.nixc.us:15124"
        tag: "redis"

  searxng:
    image: searxng/searxng:latest
    networks:
      - default
      - traefik
    volumes:
      - /mnt/tank/persist/nixc.us/searxng/config:/etc/searxng:rw
    environment:
      - SEARXNG_BASE_URL=https://searx.nixc.us
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.hostname == ingress.nixc.us
      labels:
        traefik.docker.network: traefik
        traefik.enable: "true"
        traefik.http.routers.searxng_searxng.entrypoints: websecure
        traefik.http.routers.searxng_searxng.rule: Host(`searx.nixc.us`)
        traefik.http.routers.searxng_searxng.tls: "true"
        traefik.http.routers.searxng_searxng.tls.certresolver: letsencryptresolver
        traefik.http.services.searxng_searxng.loadbalancer.server.port: '8080'
        traefik.http.routers.searxng_searxng.service: searxng_searxng
        traefik.tags: traefik
    logging:
      driver: "gelf"
      options:
        gelf-address: "udp://log.nixc.us:15124"
        tag: "searxng"