westfarn
7e48c22e3e
Sync runner checkout / sync (push) Successful in 7s
## Summary - Closes [#10](#10). - Deploys **SearxNG** on **ai-server-4080** (`10.0.0.128`) for [chat_backend#62](ai_ml_operations/chat_backend#62) / [PR #65](ai_ml_operations/chat_backend#65) grounded search. - New `roles/searxng/` (compose + JSON-enabled `settings.yml`), gated by `searxng_stack: true`, wired into `site.yml`. - **Host port 8088** (not 8080 — that is `dta_webapp` on this host). UFW allows `10.0.0.0/24` → `8088/tcp` only. ## Ops after merge ```bash ./scripts/provision.sh ai-server-4080 # or targeted: ansible-playbook playbooks/site.yml --limit ai-server-4080 --tags never # full site play includes searxng when searxng_stack ``` Then set in `chat_backend_prod.env` / `chat_backend_beta.env`: ```text SEARCH_PROVIDER=searxng SEARCH_FAILOVER_PROVIDER=ddgs SEARXNG_BASE_URL=http://10.0.0.128:8088 ``` Smoke test from any app host: ```bash curl -sG 'http://10.0.0.128:8088/search' --data-urlencode 'q=test' -d 'format=json' | head ``` ## Test plan - [ ] Provision ai-server-4080; confirm `docker ps` shows `searxng` - [ ] Confirm `:8088` responds with JSON; `:8080` still serves dta_webapp - [ ] Confirm UFW rule is LAN-only - [ ] From adama/roslin container network, curl SearxNG succeeds - [ ] Update chat_backend secrets to `:8088` and redeploy betaReviewed-on: #11
24 lines
552 B
Django/Jinja
24 lines
552 B
Django/Jinja
# Managed by Ansible (roles/searxng). Do not edit by hand.
|
|
services:
|
|
searxng:
|
|
image: {{ searxng_image }}
|
|
container_name: searxng
|
|
restart: unless-stopped
|
|
ports:
|
|
- "{{ searxng_host_port }}:{{ searxng_container_port }}"
|
|
volumes:
|
|
- ./settings.yml:/etc/searxng/settings.yml:rw
|
|
environment:
|
|
- SEARXNG_BASE_URL={{ searxng_base_url }}
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- CHOWN
|
|
- SETGID
|
|
- SETUID
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|