Cleared out some old roles and installed searxng

ansible/roles/searxng/handlers/main.yml

@@ -0,0 +1,5 @@
+- name: restart searxng
+  community.docker.docker_compose:
+    project_src: "{{ install_directory }}/{{ role_name }}"
+    restarted: true
+

ansible/roles/searxng/tasks/main.yml

@@ -0,0 +1,30 @@
+- name: Create install directory
+  file:
+    path: "{{ install_directory }}/{{ role_name }}"
+    state: directory
+    owner: "{{ docker_user }}"
+    mode: "{{ docker_compose_directory_mask }}"
+  become: true
+
+- name: Copy docker-compose file to destination
+  template:
+    src: docker-compose.yml
+    dest: "{{ install_directory }}/{{ role_name }}/docker-compose.yml"
+    owner: "{{ docker_user }}"
+    mode: "{{ docker_compose_file_mask }}"
+    validate: docker-compose -f %s config
+  become: true
+
+- name: Copy settings file to destionation
+  template:
+    src: settings.yml
+    dest: "{{ data_dir }}/{{ role_name }}/settings.yml"
+    owner: "{{ docker_user }}"
+  become: true
+  notify: restart searxng
+
+- name: Start docker container
+  community.docker.docker_compose:
+    project_src: "{{ install_directory }}/{{ role_name }}"
+    pull: true
+    remove_orphans: yes

ansible/roles/searxng/templates/docker-compose.yml

@@ -0,0 +1,38 @@
+version: "{{ docker_compose_version }}"
+
+networks:
+  traefik:
+    external: true
+
+services:
+  searxng:
+    container_name: searxng
+    image: searxng/searxng
+    restart: unless-stopped
+    networks:
+      - traefik
+    volumes:
+      - "{{ data_dir }}/{{ role_name }}:/etc/searxng"
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - SETGID
+      - SETUID
+    labels:
+      traefik.enable: true
+      traefik.http.routers.searxng.rule: "Host(`search.{{ personal_domain }}`)"
+      traefik.http.routers.searxng.middlewares: lan-whitelist@file
+
+  redis:
+    image: redis:alpine
+    restart: unless-stopped
+    command: redis-server --save "" --appendonly "no"
+    tmpfs:
+      - /var/lib/redis
+    cap_drop:
+      - ALL
+    cap_add:
+      - SETGID
+      - SETUID
+      - DAC_OVERRIDE

ansible/roles/searxng/vars/main.yml

@@ -0,0 +1,10 @@
+searxng_secret_key: !vault |
+  $ANSIBLE_VAULT;1.1;AES256
+  33656138666464373665663339363665346566613637626131363335336535313131333265646539
+  3037373439643964343139383764386364623961383737610a313063613736316437366239663238
+  65333735633661316463336665353138623264396534383865363134613165636164303765356265
+  3865626366613966660a313738353339313133393765643136306361373061366132373130656531
+  61396230346333346636356562353733623332333662653164373630626339376433353663313862
+  61303230613135336662313531313836363466623162666233646231616333643536303233616231
+  62353866333465646162633738383866363338383932623335353038393130323932343363653233
+  62663465386661663262