FROM searxng/searxng:latest

# Switch to root to perform setup
USER root

# Copy settings AND set ownership to the 'searxng' user in one step
COPY --chown=searxng:searxng settings.yml /etc/searxng/settings.yml

# Switch back to the restricted user
USER searxng

# Expose the default SearXNG port
EXPOSE 8080

# Start the engine
CMD ["/usr/local/searxng/dockerfiles/docker-entrypoint.sh"]