use_default_settings: true

server:
  # In production override via env (see docker-compose.prod.yml).
  secret_key: ${SEARXNG_SECRET:-dev-secret-change-in-prod}
  # Disables rate limiter + bot detection. This is a private internal service
  # called only by kochwas — no public exposure, no abuse risk.
  limiter: false
  public_instance: false
  image_proxy: false
  default_http_headers:
    X-Content-Type-Options: nosniff
    X-Download-Options: noopen
    X-Robots-Tag: noindex, nofollow

search:
  formats:
    - html
    - json
  safe_search: 0
  autocomplete: ''
  default_lang: 'de'

ui:
  default_locale: de

# Quieten engines that fail on cold start and aren't useful here
enabled_plugins:
  - 'Hash plugin'
  - 'Tracker URL remover'
  - 'Open Access DOI rewrite'