From 2dd4ae352b3009d11336b3af7afcbe0da24c5b14 Mon Sep 17 00:00:00 2001
From: Sam Al-Sapti <sam@sapti.me>
Date: Sun, 1 Oct 2023 18:12:23 +0200
Subject: [PATCH] Mount settings files read-only to SearXNG container

---
 roles/docker_services/tasks/services/searxng.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/docker_services/tasks/services/searxng.yml b/roles/docker_services/tasks/services/searxng.yml
index 0176608..dc4d60e 100644
--- a/roles/docker_services/tasks/services/searxng.yml
+++ b/roles/docker_services/tasks/services/searxng.yml
@@ -52,7 +52,8 @@
               aliases:
                 - searxng
           volumes:
-            - "{{ services.searxng.volume }}/searxng:/etc/searxng:rw"
+            - "{{ services.searxng.volume }}/searxng/settings.yml:/etc/searxng/settings.yml:ro"
+            - "{{ services.searxng.volume }}/searxng/limiter.toml:/etc/searxng/limiter.toml:ro"
           cap_add:
             - chown
             - dac_override