rootless searxng stdisco

searxng/docker-compose.yaml

@@ -4,21 +4,24 @@ services:
     image: docker.io/library/redis:alpine
     restart: always
     command: redis-server --save 30 1 --loglevel warning
+    user: '999:999'
     networks:
       - searxng
     volumes:
-      - redis-data:/data
+      - redis:/data
-    cap_drop:
-      - ALL
-    cap_add:
-      - SETGID
-      - SETUID
-      - DAC_OVERRIDE
   
   searxng:
     container_name: searxng
     image: searxng/searxng:latest
     restart: always
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - SETGID
+      - SETUID
+    environment:
+      - SEARXNG_BASE_URL=https://searx.viyurz.fr/
     networks:
       - searxng
     ports:
@@ -26,14 +29,6 @@ services:
     volumes:
       - ./settings.yml:/etc/searxng/settings.yml
       - ./limiter.toml:/etc/searxng/limiter.toml
-    environment:
-      - SEARXNG_BASE_URL=https://searx.viyurz.fr/
-    cap_drop:
-      - ALL
-    cap_add:
-      - CHOWN
-      - SETGID
-      - SETUID
     logging:
       driver: "json-file"
       options:
@@ -46,4 +41,4 @@ networks:
       driver: default
 
 volumes:
-  redis-data:
+  redis:

syncthing/docker-compose.yaml

@@ -3,9 +3,10 @@ services:
     image: syncthing/syncthing:latest
     container_name: syncthing
     restart: always
+    user: '1001:1001'
     environment:
-      - PUID=1003
+      - PUID=1001
-      - PGID=1003
+      - PGID=1001
     ports:
       - "[::1]:8384:8384" # Web UI
       - 22000:22000/tcp # TCP file transfers