Ingestics Agent
Harden HF runtime against proc-scan and startup egress flags
80e68eb
Raw
History Blame Contribute Delete
3.52 kB
# Ingestics research backend — hardened production settings for Hugging Face Space.
# The Docker entrypoint can inject optional proxy endpoints from HF secrets:
# SEARXNG_PROXY_HTTP / SEARXNG_PROXY_HTTPS
use_default_settings: true
general:
debug: false
instance_name: "Ingestics SearXNG"
enable_metrics: false
search:
safe_search: 1
autocomplete: ""
default_lang: "en"
ban_time_on_fail: 15
max_ban_time_on_fail: 3600
formats:
- html
- json
- rss
server:
# Granian listens on 127.0.0.1:8080; Nginx exposes HF port 7860.
port: 8080
bind_address: "127.0.0.1"
base_url: "http://localhost:7860/"
secret_key: "ultrasecretkey"
# Nginx always enforces ingress rate limits. The SearXNG limiter can be
# enabled at boot with SEARXNG_ENABLE_LIMITER=true when Valkey/Redis exists.
limiter: false
public_instance: false
image_proxy: false
http_protocol_version: "1.0"
method: "GET"
default_http_headers:
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Robots-Tag: noindex, nofollow
Referrer-Policy: no-referrer
ui:
static_use_hash: true
default_locale: "en"
query_in_title: false
infinite_scroll: false
center_alignment: false
results_on_new_tab: false
search_on_category_select: true
hotkeys: default
url_formatting: pretty
outgoing:
request_timeout: 4.5
max_request_timeout: 10.0
pool_connections: 100
pool_maxsize: 200
enable_http2: true
keepalive_expiry: 30.0
# __INGESTICS_PROXY_BLOCK__
engines:
# Google is retained only as a low-priority backup and suspended quickly on
# bot challenges/rate limits. Most traffic should land on tolerant engines.
- name: google
timeout: 4.0
weight: 0.15
disabled: false
- name: duckduckgo
timeout: 4.5
weight: 2.0
- name: brave
timeout: 4.5
weight: 2.0
- name: qwant
timeout: 5.0
weight: 1.5
- name: bing
timeout: 5.0
weight: 1.3
- name: yahoo
timeout: 5.0
weight: 1.1
- name: mojeek
timeout: 6.0
weight: 1.1
- name: startpage
timeout: 6.0
disabled: true
- name: wikipedia
timeout: 4.0
- name: wikidata
disabled: true
timeout: 4.0
- name: pubmed
timeout: 8.0
disabled: false
shortcut: pm
- name: arxiv
timeout: 6.0
- name: crossref
timeout: 6.0
- name: semantic scholar
timeout: 6.0
- name: google news
timeout: 5.0
weight: 0.3
- name: bing news
timeout: 5.0
# Disable noise / abuse-prone categories.
- name: youtube
disabled: true
- name: vimeo
disabled: true
- name: dailymotion
disabled: true
- name: soundcloud
disabled: true
- name: bandcamp
disabled: true
- name: reddit
disabled: true
- name: 9gag
disabled: true
- name: 1337x
disabled: true
- name: piratebay
disabled: true
- name: nyaa
disabled: true
- name: btdigg
disabled: true
- name: kickass
disabled: true
- name: solidtorrents
disabled: true
enabled_plugins:
- 'Hash plugin'
- 'Self Information'
- 'Ahmia blacklist'
- 'Hostnames plugin'
hostnames:
remove:
- '(.*\.)?pinterest\.com$'
- '(.*\.)?quora\.com$'
- '(.*\.)?facebook\.com$'
- '(.*\.)?instagram\.com$'
- '(.*\.)?tiktok\.com$'
- '(.*\.)?twitter\.com$'
- '(.*\.)?x\.com$'
- '(.*\.)?youtube\.com$'
- '(.*\.)?reddit\.com$'
doi_resolvers:
oadoi.org: 'https://oadoi.org/'
doi.org: 'https://doi.org/'
doai.io: 'https://dissem.in/'
default_doi_resolver: 'doi.org'