image:
  pullPolicy: IfNotPresent
  repository: tccr.io/truecharts/searxng
  tag: latest@sha256:37a2a1007615e40dcd936968b08c6ed632e7ad6cd20152b0241a2f70ed94f4ce

workload:
  main:
    podSpec:
      containers:
        main:
          env:
            BIND_ADDRESS: '{{ printf "0.0.0.0:%v" .Values.service.main.ports.main.port }}'
            INSTANCE_NAME: SearXng
            BASE_URL: ""
          probes:
            liveness:
              path: /healthz
              port: '{{ .Values.service.main.ports.main.port }}'
            readiness:
              path: /healthz
              port: '{{ .Values.service.main.ports.main.port }}'
            startup:
              type: tcp
              port: '{{ .Values.service.main.ports.main.port }}'

securityContext:
  container:
    runAsGroup: 0
    runAsUser: 0
    capabilities:
      disableS6Caps: true

      add:
        - SETUID
        - SETGID

service:
  main:
    ports:
      main:
        port: 8080
        protocol: http

persistence:
  config:
    enabled: true
    mountPath: /etc/searxng

portal:
  open:
    enabled: true
