ADD alpine-minirootfs-3.22.1-aarch64.tar.gz / # buildkit

CMD ["/bin/sh"]

ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

RUN /bin/sh -c set -eux; apk add --no-cache ca-certificates tzdata ; # buildkit

ENV GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305

ENV PYTHON_VERSION=3.13.5

ENV PYTHON_SHA256=93e583f243454e6e9e4588ca2c2662206ad961659863277afcdb96801647d640

RUN /bin/sh -c set -eux; apk add --no-cache --virtual .build-deps gnupg tar xz bluez-dev bzip2-dev dpkg-dev dpkg findutils gcc gdbm-dev libc-dev libffi-dev libnsl-dev libtirpc-dev linux-headers make ncurses-dev openssl-dev pax-utils readline-dev sqlite-dev tcl-dev tk tk-dev util-linux-dev xz-dev zlib-dev ; wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; echo "$PYTHON_SHA256 *python.tar.xz" | sha256sum -c -; wget -O python.tar.xz.asc "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc"; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$GPG_KEY"; gpg --batch --verify python.tar.xz.asc python.tar.xz; gpgconf --kill all; rm -rf "$GNUPGHOME" python.tar.xz.asc; mkdir -p /usr/src/python; tar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; rm python.tar.xz; cd /usr/src/python; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; ./configure --build="$gnuArch" --enable-loadable-sqlite-extensions --enable-option-checking=fatal --enable-shared $(test "$gnuArch" != 'riscv64-linux-musl' && echo '--with-lto') --with-ensurepip ; nproc="$(nproc)"; EXTRA_CFLAGS="-DTHREAD_STACK_SIZE=0x100000"; LDFLAGS="${LDFLAGS:--Wl},--strip-all"; arch="$(apk --print-arch)"; case "$arch" in x86_64|aarch64) EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer"; ;; x86) ;; *) EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer"; ;; esac; make -j "$nproc" "EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" "LDFLAGS=${LDFLAGS:-}" ; rm python; make -j "$nproc" "EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" "LDFLAGS=${LDFLAGS:--Wl},-rpath='\$\$ORIGIN/../lib'" python ; make install; cd /; rm -rf /usr/src/python; find /usr/local -depth \( \( -type d -a \( -name test -o -name tests -o -name idle_test \) \) -o \( -type f -a \( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \) \) \) -exec rm -rf '{}' + ; find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec scanelf --needed --nobanner --format '%n#p' '{}' ';' | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' | xargs -rt apk add --no-network --virtual .python-rundeps ; apk del --no-network .build-deps; export PYTHONDONTWRITEBYTECODE=1; python3 --version; pip3 --version # buildkit

RUN /bin/sh -c set -eux; for src in idle3 pip3 pydoc3 python3 python3-config; do dst="$(echo "$src" | tr -d 3)"; [ -s "/usr/local/bin/$src" ]; [ ! -e "/usr/local/bin/$dst" ]; ln -svT "$src" "/usr/local/bin/$dst"; done # buildkit

CMD ["python3"]

WORKDIR /usr/local/searxng/

RUN /bin/sh -c apk add --no-cache libxslt # buildkit

COPY --chown=root:root /tmp/.searxng.passwd /etc/passwd # buildkit

COPY --chown=root:root /tmp/.searxng.group /etc/group # buildkit

COPY --chown=searxng:searxng /usr/local/searxng /usr/local/searxng # buildkit

COPY --chown=searxng:searxng ./src/run.sh /usr/local/bin/run.sh # buildkit

COPY --chown=searxng:searxng ./src/limiter.toml /etc/searxng/limiter.toml # buildkit

COPY --chown=searxng:searxng ./src/favicons.toml /etc/searxng/favicons.toml # buildkit

RUN /bin/sh -c sed -i "/'simple_style': EnumStringSetting(/,/choices=\['', 'auto', 'light', 'dark', 'black'\]/s/choices=\['', 'auto', 'light', 'dark', 'black'\]/choices=\['', 'auto', 'light', 'dark', 'black', 'paulgo', 'latte', 'frappe', 'macchiato', 'mocha', 'kagi', 'brave', 'moa', 'night', 'dracula'\]/" searx/preferences.py && sed -i "s/SIMPLE_STYLE = ('auto', 'light', 'dark', 'black')/SIMPLE_STYLE = ('auto', 'light', 'dark', 'black', 'paulgo', 'latte', 'frappe', 'macchiato', 'mocha', 'kagi', 'brave', 'moa', 'night', 'dracula')/" searx/settings_defaults.py && sed -i "s/{%- for name in \['auto', 'light', 'dark', 'black'\] -%}/{%- for name in \['auto', 'light', 'dark', 'black', 'paulgo', 'latte', 'frappe', 'macchiato', 'mocha', 'kagi', 'brave', 'moa', 'night', 'dracula'\] -%}/" searx/templates/simple/preferences/theme.html # buildkit

COPY --chown=searxng:searxng ./src/privacy-policy/privacy-policy.html searx/templates/simple/privacy-policy.html # buildkit

RUN /bin/sh -c sed -i "/@app\.route('\/client<token>\.css', methods=\['GET', 'POST'\])/i \ \n@app.route('\/privacy', methods=\['GET'\])\ndef privacy_policy():return render('privacy-policy.html')\n" searx/webapp.py # buildkit

COPY --chown=searxng:searxng ./src/captcha/captcha.html searx/templates/simple/captcha.html # buildkit

COPY --chown=searxng:searxng ./src/captcha/captcha.py searx/captcha.py # buildkit

RUN /bin/sh -c sed -i '/search_obj = searx.search.SearchWithPlugins(search_query, sxng_request, sxng_request.user_plugins)/i\ from searx.captcha import handle_captcha\n if (captcha_response := handle_captcha(sxng_request, settings["server"]["secret_key"], raw_text_query, search_query, selected_locale, render)):\n return captcha_response\n' searx/webapp.py # buildkit

COPY --chown=searxng:searxng ./src/auth/auth.py searx/auth.py # buildkit

RUN /bin/sh -c sed -i -e "/if output_format not in settings\\['search'\\]\\['formats'\\]:/a\\ from searx.auth import valid_api_key\\n if (not valid_api_key(sxng_request)):" -e 's|flask.abort(403)| flask.abort(403)|' searx/webapp.py && sed -i "/return Response('', mimetype='text\/css')/a \\\\n@app.route('/<key>/search', methods=['GET', 'POST'])\\ndef search_key(key=None):\\n from searx.auth import auth_search_key\\n return auth_search_key(sxng_request, key)" searx/webapp.py && sed -i "/3\. If the IP is not in either list, the request is not blocked\./a\\ from searx.auth import valid_api_key\\n if (valid_api_key(sxng_request)):\\n return None" searx/limiter.py # buildkit

RUN /bin/sh -c sed -i '/{% if autocomplete %}/,/{% endif %}/s|method="{{ opensearch_method }}"|method="GET"|g' searx/templates/simple/opensearch.xml # buildkit

RUN /bin/sh -c sed -i -e "/safe_search:/s/0/1/g" -e "/autocomplete:/s/\"\"/\"google\"/g" -e "/autocomplete_min:/s/4/0/g" -e "/favicon_resolver:/s/\"\"/\"google\"/g" -e "/port:/s/8888/8080/g" -e "/simple_style:/s/auto/macchiato/g" -e "/infinite_scroll:/s/false/true/g" -e "/query_in_title:/s/false/true/g" -e "s+donation_url: https://docs.searxng.org/donate.html+donation_url: false+g" -e '/default_lang:/s/ ""/ en/g' -e "/method:/s/\"POST\"/\"GET\"/g" -e "/http_protocol_version:/s/1.0/1.1/g" -e "/X-Content-Type-Options: nosniff/d" -e "/X-XSS-Protection: 1; mode=block/d" -e "/X-Robots-Tag: noindex, nofollow/d" -e "/Referrer-Policy: no-referrer/d" -e "/news:/{n;s/.*//}" -e "/files:/d" -e "/social media:/d" -e "/static_use_hash:/s/false/true/g" -e "s/ use_mobile_ui: false/ use_mobile_ui: true/g" -e "/disabled: false/d" -e "/name: wikipedia/s/$/\n disabled: true/g" -e "/name: wikidata/s/$/\n disabled: true/g" -e "/name: wikispecies/s/$/\n disabled: true/g" -e "/name: wikinews/s/$/\n disabled: true/g" -e "/name: wikibooks/s/$/\n disabled: true/g" -e "/name: wikivoyage/s/$/\n disabled: true/g" -e "/name: wikiversity/s/$/\n disabled: true/g" -e "/name: wikiquote/s/$/\n disabled: true/g" -e "/name: wikisource/s/$/\n disabled: true/g" -e "/name: wikicommons.images/s/$/\n disabled: true/g" -e "/name: pinterest/s/$/\n disabled: true/g" -e "/name: piped/s/$/\n disabled: true/g" -e "/name: piped.music/s/$/\n disabled: true/g" -e "/name: bandcamp/s/$/\n disabled: true/g" -e "/name: radio browser/s/$/\n disabled: true/g" -e "/name: mixcloud/s/$/\n disabled: true/g" -e "/name: hoogle/s/$/\n disabled: true/g" -e "/name: currency/s/$/\n disabled: true/g" -e "/name: qwant/s/$/\n disabled: true/g" -e "/name: btdigg/s/$/\n disabled: true/g" -e "/name: sepiasearch/s/$/\n disabled: true/g" -e "/name: dailymotion/s/$/\n disabled: true/g" -e "/name: deviantart/s/$/\n disabled: true/g" -e "/name: vimeo/s/$/\n disabled: true/g" -e "/name: openairepublications/s/$/\n disabled: true/g" -e "/name: library of congress/s/$/\n disabled: true/g" -e "/name: dictzone/s/$/\n disabled: true/g" -e "/name: baidu/s/$/\n disabled: true/g" -e "/name: lingva/s/$/\n disabled: true/g" -e "/name: genius/s/$/\n disabled: true/g" -e "/name: wallhaven/s/$/\n disabled: true/g" -e "/name: artic/s/$/\n disabled: true/g" -e "/name: flickr/s/$/\n disabled: true/g" -e "/name: unsplash/s/$/\n disabled: true/g" -e "/name: gentoo/s/$/\n disabled: true/g" -e "/name: openverse/s/$/\n disabled: true/g" -e "/name: google videos/s/$/\n disabled: true/g" -e "/name: yahoo news/s/$/\n disabled: true/g" -e "/name: bing news/s/$/\n disabled: true/g" -e "/name: tineye/s/$/\n disabled: true/g" -e "/engine: startpage/s/$/\n disabled: true/g" -e "/engine: wikipedia/s/$/\n timeout: 1.0/g" -e "/shortcut: fd/{n;s/.*/ disabled: false/}" -e "/searx.plugins.calculator.SXNGPlugin:/,/^[^[:space:]]/s/active: true/active: false/" searx/settings.yml; # buildkit

EXPOSE map[8080/tcp:{}]

ENV GRANIAN_PROCESS_NAME=searxng GRANIAN_INTERFACE=wsgi GRANIAN_HOST=:: GRANIAN_PORT=8080 GRANIAN_WEBSOCKETS=false GRANIAN_LOOP=uvloop GRANIAN_BLOCKING_THREADS=1 GRANIAN_WORKERS_KILL_TIMEOUT=30 GRANIAN_BLOCKING_THREADS_IDLE_TIMEOUT=300 IMAGE_PROXY=true PROXY= REDIS_URL= LIMITER= BASE_URL= CAPTCHA= AUTHORIZED_API= NAME= SEARCH_DEFAULT_LANG= SEARCH_ENGINE_ACCESS_DENIED= PUBLIC_INSTANCE= GOOGLE_DEFAULT=true BING_DEFAULT= BRAVE_DEFAULT= DUCKDUCKGO_DEFAULT= OPENMETRICS= PRIVACYPOLICY= DONATION_URL= CONTACT=https://vojk.au FOOTER_MESSAGE= ISSUE_URL=https://github.com/privau/searxng/issues GIT_URL=https://github.com/privau/searxng GIT_BRANCH=main

CMD ["run.sh"]