feat: deploy SearXNG search engine with Valkey rate limiting

- Add SearXNG service on port 6060 (replaces old port 11112)
- Add Valkey for rate limiting (5/min, 60/hour, 500/day)
- Add Nginx reverse proxy with X-Real-IP and X-Forwarded-For headers
- Configure JSON format and French locale
- Add rate limiting configuration in limiter.toml
- Add Valkey configuration in valkey.conf

searxng-config/settings.yml

@@ -0,0 +1,61 @@
+use_default_settings: true
+
+general:
+  instance_name: "Effi Search"
+  debug: false
+
+search:
+  format: json
+  max_results: 15
+  default_lang: fr
+  safe_search: 0
+  autocomplete: "google"
+  default_locale: fr
+  formats:
+    - html
+    - json
+
+server:
+  secret_key: "${SEARXNG_SECRET_KEY}"
+  bind_address: "0.0.0.0"
+  port: 8080
+  limiter: true
+  image_proxy: true
+  public_instance: false
+  method: "GET"
+  default_http_headers:
+    X-Content-Type-Options: nosniff
+    X-Download-Options: noopen
+    X-Robots-Tag: noindex, nofollow
+    Referrer-Policy: no-referrer
+
+valkey:
+  url: "valkey://172.19.0.12:6379/0"
+
+limiter:
+  enabled: true
+  search_url: false
+  key:
+    - "client_ip"
+  limits:
+    search: "5/minute;60/hour;500/day"
+    other: "10/minute;100/hour"
+  whitelist: []
+
+ui:
+  default_theme: simple
+  static_use_hash: true
+  default_view: index
+  infinite_scroll: false
+
+outgoing:
+  request_timeout: 10.0
+  max_request_timeout: 15.0
+  pool_connections: 100
+  pool_maxsize: 20
+  enable_http2: true
+  useragent_suffix: ""
+
+enable_obfuscation: false
+
+enable_http2: true