{configVars, ...}: let # configVars = import ../../../../vars {inherit inputs}; piholeIp = configVars.networking.addresses.pihole.ip; in { virtualisation.arion = { backend = "podman-socket"; projects.searxng = { settings = { services.redis.service = { container_name = "redis"; image = "redis:alpine"; restart = "always"; command = [ "redis-server" "--save" "" "--appendonly" "no" ]; tmpfs = [ "/var/lib/redis" ]; capabilities = { ALL = false; SETGID = true; SETUID = true; DAC_OVERRIDE = true; }; }; services.searxng.service = { container_name = "searxng"; image = "searxng/searxng:latest"; restart = "always"; ports = [ "8855:8080" ]; dns = [ piholeIp ]; volumes = [ "/srv/docker/searxng-docker/searxng:/etc/searxng:rw" ]; capabilities = { ALL = false; CHOWN = true; SETGID = true; SETUID = true; DAC_OVERRIDE = true; }; }; }; }; }; }