Searx on Arch

This tutorial is on how to install Searx on Arch servers. On Debian or other distros lacking morty, filtron, and searx in their repos the guide giving by the Searx devs themselves is fine but you will have to rely on Python VENVs and updating is difficult/tedious.

For this tutorial we will follow the recommended setup of installing morty and filtron alongside searx for a more secure setup.

For this tutorial we are assuming you already have nginx set up, a SSL certificate for the domain you want to use, and the domain we use as a dummy is example.com.

Installation

Switch to a non-root user with sudo rights for an AUR manager:

su - alex
paru -S morty-git filtron-git searx

Configuration

Services

Morty

First we need a morty secret key which should be base64 encoded:

openssl rand -hex 16 | base64

Edit the ExecStart in /usr/lib/systemd/system/morty.service:

ExecStart=/usr/bin/morty -listen 127.0.0.1:3000 -key '<your_key_here>' -timeout 5

and add

Environment=DEBUG=false

We also need to add this to our /etc/searx/settings.yml:

result_proxy:
	url: example.com/morty/
	key: !!binary "<your_key_here>"

Filtron

Should be good with defaults

Searx

Sytemd

Adjust your service file for searx (/etc/uwsgi/searx.ini) to include

# comment out the http-socket line
http = 127.0.0.1:8888

env = LANG=C.UTF-8
env = LANGUAGE=C.UTF-8
env = LC_ALL=C.UTF-8

# OPTIONAl and does nothing if disable-logging = true
logger = systemd

settings.yml

Change the following lines in /etc/searx/settings.yml

server:
	image_proxy: True
	http_protocol_version: "1.1"

ui:
	theme_args:
		oscar-style: logicodev-dark

# Ensure that this is also set to something, should be done automatically by the PKGBUILD for searx
server:
	secret_key: "<ensure_this_is_set_to_something_secure>"

Nginx

In the appropriate server{ listen 443 ssl; } section of your nginx setup add the following: Where MINOR_VERSION should be 11 for example for python 3.11, adjust appropriately.

location /searx/static/ {
	alias /usr/lib/python3.<MINOR VERSION>/site-packages/searx/static/;
}
location /morty {
	proxy_pass         http://127.0.0.1:3000/;

	proxy_set_header   Host             $host;
	proxy_set_header   Connection       $http_connection;
	proxy_set_header   X-Real-IP        $remote_addr;
	proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
	proxy_set_header   X-Scheme         $scheme;
}
location /searx{
    proxy_pass         http://127.0.0.1:4004/;

    proxy_set_header   Host             $host;
    proxy_set_header   Connection       $http_connection;
    proxy_set_header   X-Real-IP        $remote_addr;
    proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
    proxy_set_header   X-Scheme         $scheme;
    proxy_set_header   X-Script-Name    /searx;
}

Verify via nginx -t, then we are ready to start our services.

systemctl daemon-reload
sysetmctl restart nginx
systemctl enable --now morty
systemctl enable --now filtron
systemctl enable --now uwsgi@searx

You should now be able to use searx @ https://example.com/searx

3.1 KiB Raw Blame History