FROM docker.io/searxng/searxng:latest

USER root
RUN apk update && apk add --no-cache shadow sed

RUN useradd -m -u 1000 user
USER user

WORKDIR /home/user/app
COPY --chown=user settings.yml /etc/searxng/settings.yml
RUN sed -i "s|ultrasecretkey|$(openssl rand -hex 32)|g" /etc/searxng/settings.yml

EXPOSE 8080
CMD ["uvicorn", "searx.webapp:app", "--host", "0.0.0.0", "--port", "8080"]