From 624aad4938ec3ce37f07796a91b3892988e4de00 Mon Sep 17 00:00:00 2001
From: Lumpiasty <arek.dzski@gmail.com>
Date: Mon, 18 Aug 2025 03:02:40 +0200
Subject: [PATCH] add searxng

---
 apps/kustomization.yaml           |  1 +
 apps/searxng/configs/settings.yml |  1 +
 apps/searxng/deployment.yaml      | 42 +++++++++++++++++++++++++++++++
 apps/searxng/ingress.yaml         | 25 ++++++++++++++++++
 apps/searxng/kustomization.yaml   | 13 ++++++++++
 apps/searxng/namespace.yaml       |  5 ++++
 apps/searxng/pvc.yaml             | 13 ++++++++++
 apps/searxng/service.yaml         | 14 +++++++++++
 8 files changed, 114 insertions(+)
 create mode 100644 apps/searxng/configs/settings.yml
 create mode 100644 apps/searxng/deployment.yaml
 create mode 100644 apps/searxng/ingress.yaml
 create mode 100644 apps/searxng/kustomization.yaml
 create mode 100644 apps/searxng/namespace.yaml
 create mode 100644 apps/searxng/pvc.yaml
 create mode 100644 apps/searxng/service.yaml

diff --git a/apps/kustomization.yaml b/apps/kustomization.yaml
index bf76859..c061107 100644
--- a/apps/kustomization.yaml
+++ b/apps/kustomization.yaml
@@ -9,3 +9,4 @@ resources:
   - frigate
   - llama
   - immich
+  - searxng
diff --git a/apps/searxng/configs/settings.yml b/apps/searxng/configs/settings.yml
new file mode 100644
index 0000000..abe652c
--- /dev/null
+++ b/apps/searxng/configs/settings.yml
@@ -0,0 +1 @@
+use_default_settings: true
\ No newline at end of file
diff --git a/apps/searxng/deployment.yaml b/apps/searxng/deployment.yaml
new file mode 100644
index 0000000..aab8a68
--- /dev/null
+++ b/apps/searxng/deployment.yaml
@@ -0,0 +1,42 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: searxng
+  namespace: searxng
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: searxng
+  template:
+    metadata:
+      labels:
+        app: searxng
+    spec:
+      containers:
+        - name: searxng
+          image: searxng/searxng:2025.8.12-6b1516d
+          ports:
+            - containerPort: 8080
+          env:
+            - name: SEARXNG_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: searxng-secret
+                  key: SEARXNG_SECRET
+                  optional: false
+          volumeMounts:
+            - name: config-volume
+              mountPath: /etc/searxng/settings.yml
+              subPath: settings.yml
+              readOnly: true
+            - name: searxng-persistent-data
+              mountPath: /var/cache/searxng
+      volumes:
+        - name: config-volume
+          configMap:
+            name: searxng-config
+        - name: searxng-persistent-data
+          persistentVolumeClaim:
+            claimName: searxng-persistent-data
diff --git a/apps/searxng/ingress.yaml b/apps/searxng/ingress.yaml
new file mode 100644
index 0000000..5ff1f17
--- /dev/null
+++ b/apps/searxng/ingress.yaml
@@ -0,0 +1,25 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  namespace: searxng
+  name: searxng
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+spec:
+  ingressClassName: nginx-ingress
+  rules:
+    - host: searxng.lumpiasty.xyz
+      http:
+        paths:
+          - backend:
+              service:
+                name: searxng
+                port:
+                  number: 8080
+            path: /
+            pathType: Prefix
+  tls:
+    - hosts:
+        - searxng.lumpiasty.xyz
+      secretName: searxng-ingress
diff --git a/apps/searxng/kustomization.yaml b/apps/searxng/kustomization.yaml
new file mode 100644
index 0000000..5aaf39e
--- /dev/null
+++ b/apps/searxng/kustomization.yaml
@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - pvc.yaml
+  - deployment.yaml
+  - service.yaml
+  - ingress.yaml
+configMapGenerator:
+  - name: searxng-config
+    namespace: searxng
+    files:
+      - settings.yml=configs/settings.yml
diff --git a/apps/searxng/namespace.yaml b/apps/searxng/namespace.yaml
new file mode 100644
index 0000000..4350b1e
--- /dev/null
+++ b/apps/searxng/namespace.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: searxng
diff --git a/apps/searxng/pvc.yaml b/apps/searxng/pvc.yaml
new file mode 100644
index 0000000..7be7797
--- /dev/null
+++ b/apps/searxng/pvc.yaml
@@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  namespace: searxng
+  name: searxng-persistent-data
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+  storageClassName: mayastor-single-ssd
diff --git a/apps/searxng/service.yaml b/apps/searxng/service.yaml
new file mode 100644
index 0000000..8e6f2af
--- /dev/null
+++ b/apps/searxng/service.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: searxng
+  namespace: searxng
+spec:
+  selector:
+    app: searxng
+  ports:
+    - protocol: TCP
+      port: 8080
+      targetPort: 8080
+  type: ClusterIP