feat: add self-hosted SearXNG research mode

docker-compose.yml

@@ -25,6 +25,8 @@ services:
       NOUS_MODEL: ${NOUS_MODEL:-Hermes-4-405B}
       NOUS_BASE_URL: ${NOUS_BASE_URL:-https://inference-api.nousresearch.com/v1}
       NOUS_ALLOWED_HOSTS: ${NOUS_ALLOWED_HOSTS:-inference-api.nousresearch.com}
+      SEARXNG_BASE_URL: ${SEARXNG_BASE_URL:-http://searxng:8080}
+      SEARXNG_ALLOWED_HOSTS: ${SEARXNG_ALLOWED_HOSTS:-searxng}
       FIRECRAWL_API_KEY: ${FIRECRAWL_API_KEY:-}
       FIRECRAWL_BASE_URL: ${FIRECRAWL_BASE_URL:-https://api.firecrawl.dev/v2}
       FIRECRAWL_ALLOWED_HOSTS: ${FIRECRAWL_ALLOWED_HOSTS:-api.firecrawl.dev}
@@ -52,6 +54,8 @@ services:
       retries: 5
       start_period: 5s
     restart: unless-stopped
+    networks:
+      - prospect_internal
 
   web:
     build:
@@ -80,7 +84,34 @@ services:
       retries: 5
       start_period: 3s
     restart: unless-stopped
+    networks:
+      - prospect_internal
+
+  searxng:
+    image: searxng/searxng:latest
+    environment:
+      SEARXNG_SECRET_KEY: ${SEARXNG_SECRET_KEY:-change-me-in-production}
+    volumes:
+      - ./searxng/settings.yml:/etc/searxng/settings.yml:ro
+    read_only: true
+    tmpfs:
+      - /tmp
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    expose:
+      - "8080"
+    networks:
+      - prospect_internal
+      - searxng_egress
+    restart: unless-stopped
 
 volumes:
   prospect_api_data:
     name: prospect-platform-api-data
+
+networks:
+  prospect_internal:
+    internal: true
+  searxng_egress: