image:
  pullPolicy: IfNotPresent
  repository: tccr.io/truecharts/searxng
  tag: latest@sha256:880321e4497925165beda91167e5f9bbc699ed0e272edf46fdcee4fdc94c5097

workload:
  main:
    podSpec:
      containers:
        main:
          env:
            BIND_ADDRESS: '{{ printf "0.0.0.0:%v" .Values.service.main.ports.main.port }}'
            INSTANCE_NAME: SearXng
            BASE_URL: ""
          probes:
            liveness:
              path: /healthz
              port: "{{ .Values.service.main.ports.main.port }}"
            readiness:
              path: /healthz
              port: "{{ .Values.service.main.ports.main.port }}"
            startup:
              type: tcp
              port: "{{ .Values.service.main.ports.main.port }}"

securityContext:
  container:
    runAsGroup: 0
    runAsUser: 0
    capabilities:
      disableS6Caps: true

      add:
        - SETUID
        - SETGID

service:
  main:
    ports:
      main:
        port: 8080
        protocol: http

persistence:
  config:
    enabled: true
    mountPath: /etc/searxng

portal:
  open:
    enabled: true