diff --git a/docker-compose.yml b/docker-compose.yml index cbeec1e3..80f76698 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -71,8 +71,8 @@ services: - PUID=${PUID:-1000} - PGID=${PGID:-1000} depends_on: - searxng: - condition: service_healthy +# searxng: +# condition: service_healthy chromadb: condition: service_started restart: unless-stopped @@ -87,55 +87,55 @@ services: - ANONYMIZED_TELEMETRY=FALSE restart: unless-stopped - searxng: +# searxng: # Pinned, not :latest — odysseus waits on searxng's healthcheck # (depends_on: condition: service_healthy), so a broken upstream `latest` # tag blocks the whole app from starting. 2026.6.2 crashes on boot with # `KeyError: 'default_doi_resolver'`, failing the healthcheck (issue #1414). # Bump this deliberately after verifying a newer tag boots clean. - image: docker.io/searxng/searxng:2026.5.31-7159b8aed - entrypoint: - - /bin/sh - - -c - - | - set -eu - if [ ! -s /etc/searxng/settings.yml ] || grep -q 'odysseus-local-searxng-json-2026-05-30\|__SEARXNG_SECRET__' /etc/searxng/settings.yml; then - secret="$${SEARXNG_SECRET:-}" - if [ -z "$$secret" ]; then - secret="$$(python -c 'import secrets; print(secrets.token_urlsafe(48))')" - fi - sed "s|__SEARXNG_SECRET__|$$secret|g" /tmp/searxng-settings.yml.template > /etc/searxng/settings.yml - fi - exec /usr/local/searxng/entrypoint.sh - ports: - - "127.0.0.1:8080:8080" - volumes: - - searxng-data:/etc/searxng - - ./config/searxng/settings.yml:/tmp/searxng-settings.yml.template:ro,z - environment: - - SEARXNG_BASE_URL=http://localhost:8080/ - - SEARXNG_SECRET=${SEARXNG_SECRET:-} - # The official searxng image runs as the non-root `searxng` user, but its - # entrypoint still needs to chown /etc/searxng on first boot, drop privs via - # su-exec, and (with our wrapper above) write settings.yml into the named - # volume. Without these capabilities the wrapper aborts at the redirection - # with EACCES and the container fails its healthcheck with permission - # errors during setup. Mirrors the cap set recommended by the upstream - # searxng-docker compose file. See issue #721. - cap_drop: - - ALL - cap_add: - - CHOWN - - SETGID - - SETUID - - DAC_OVERRIDE - healthcheck: - test: ["CMD-SHELL", "python -c \"import urllib.request; urllib.request.urlopen('http://localhost:8080/', timeout=5).read(1)\""] - interval: 5s - timeout: 6s - retries: 20 - start_period: 10s - restart: unless-stopped +# image: docker.io/searxng/searxng:2026.5.31-7159b8aed +# entrypoint: +# - /bin/sh +# - -c +# - | +# set -eu +# if [ ! -s /etc/searxng/settings.yml ] || grep -q 'odysseus-local-searxng-json-2026-05-30\|__SEARXNG_SECRET__' /etc/searxng/settings.yml; then +# secret="$${SEARXNG_SECRET:-}" +# if [ -z "$$secret" ]; then +# secret="$$(python -c 'import secrets; print(secrets.token_urlsafe(48))')" +# fi +# sed "s|__SEARXNG_SECRET__|$$secret|g" /tmp/searxng-settings.yml.template > /etc/searxng/settings.yml +# fi +# exec /usr/local/searxng/entrypoint.sh +# ports: +# - "127.0.0.1:8080:8080" +# volumes: +# - searxng-data:/etc/searxng +# - ./config/searxng/settings.yml:/tmp/searxng-settings.yml.template:ro,z +# environment: +# - SEARXNG_BASE_URL=http://localhost:8080/ +# restart: unless-stopped +# # The official searxng image runs as the non-root `searxng` user, but its +# # entrypoint still needs to chown /etc/searxng on first boot, drop privs via +# # su-exec, and (with our wrapper above) write settings.yml into the named +# # volume. Without these capabilities the wrapper aborts at the redirection +# # with EACCES and the container fails its healthcheck with permission +# # errors during setup. Mirrors the cap set recommended by the upstream +# # searxng-docker compose file. See issue #721. +# cap_drop: +# - ALL +# cap_add: +# - CHOWN +# - SETGID +# - SETUID +# - DAC_OVERRIDE +# healthcheck: +# test: ["CMD-SHELL", "python -c \"import urllib.request; urllib.request.urlopen('http://localhost:8080/', timeout=5).read(1)\""] +# interval: 5s +# timeout: 6s +# retries: 20 +# start_period: 10s +# restart: unless-stopped ntfy: image: docker.io/binwiederhier/ntfy @@ -149,6 +149,6 @@ services: restart: unless-stopped volumes: - searxng-data: +# searxng-data: chromadb-data: ntfy-cache: