deleted: Dockerfile.certbot

deleted:    Dockerfile.nginx
	modified:   Makefile
	modified:   README.md
	deleted:    compose.certbot.yml
	modified:   docker-compose.yml
	deleted:    entrypoint-certbot.sh
	deleted:    entrypoint-nginx.sh
	deleted:    nginx-gitea.conf.template
	deleted:    nginx.conf.template
	new file:   proxy/Caddyfile
	new file:   proxy/limiter.toml
	new file:   searx/.env
	new file:   searx/.env.example
	new file:   searx/core-config/limiter.toml
	new file:   searx/limiter.toml
	new file:   web/Caddyfile

searx/.env

@@ -0,0 +1,19 @@
+# Read the documentation before using the `docker-compose.yml` file:
+# https://docs.searxng.org/admin/installation-docker.html
+#
+# Additional ENVs:
+# https://docs.searxng.org/admin/settings/settings_general.html#settings-general
+# https://docs.searxng.org/admin/settings/settings_server.html#settings-server
+
+# Use a specific version tag. E.g. "latest" or "2026.3.25-541c6c3cb".
+# 2026.5.31 has a SQLite init race that breaks the radio browser engine on startup.
+SEARXNG_VERSION=latest
+
+# Listen to a specific address.
+#SEARXNG_HOST=[::]
+
+# Listen to a specific port.
+#SEARXNG_PORT=8080
+
+# Public URL of the instance (served behind the reverse proxy).
+SEARXNG_BASE_URL=https://searx.viljarb.online/

searx/.env.example

@@ -0,0 +1,15 @@
+# Read the documentation before using the `docker-compose.yml` file:
+# https://docs.searxng.org/admin/installation-docker.html
+#
+# Additional ENVs:
+# https://docs.searxng.org/admin/settings/settings_general.html#settings-general
+# https://docs.searxng.org/admin/settings/settings_server.html#settings-server
+
+# Use a specific version tag. E.g. "latest" or "2026.3.25-541c6c3cb".
+#SEARXNG_VERSION=latest
+
+# Listen to a specific address.
+#SEARXNG_HOST=[::]
+
+# Listen to a specific port.
+#SEARXNG_PORT=8080

searx/limiter.toml

@@ -0,0 +1,27 @@
+[botdetection]
+
+ipv4_prefix = 32
+ipv6_prefix = 48
+
+# Trust the Caddy reverse proxy on the docker network.
+trusted_proxies = [
+  "127.0.0.0/8",
+  "::1",
+  "172.16.0.0/12",
+  "10.0.0.0/8",
+]
+
+[botdetection.ip_limit]
+
+filter_link_local = false
+link_token = false
+
+[botdetection.ip_lists]
+
+block_ip = [
+]
+
+pass_ip = [
+]
+
+pass_searxng_org = true