ubersearch 1.6.1 → 1.6.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ubersearch",
-  "version": "1.6.1",
+  "version": "1.6.2",
   "module": "src/index.ts",
   "type": "module",
   "bin": {

package/providers/searxng/config/{settings.yml.new → settings.yml}

@@ -76,6 +76,7 @@ search:
   # formats: [html, csv, json, rss]
   formats:
     - html
+    - json
 
 server:
   # Is overwritten by ${SEARXNG_PORT} and ${SEARXNG_BIND_ADDRESS}
@@ -94,7 +95,7 @@ server:
   # If your instance owns a /etc/searxng/settings.yml file, then set the following
   # values there.
 
-  secret_key: "ultrasecretkey"  # Is overwritten by ${SEARXNG_SECRET}
+  secret_key: "5d12e53bd34ee628ed8f8f90d796a8ea3f5640eb9b381d2b58945f2a0d210468"  # Is overwritten by ${SEARXNG_SECRET}
   # Proxy image results through SearXNG. Is overwritten by ${SEARXNG_IMAGE_PROXY}
   image_proxy: false
   # 1.0 and 1.1 are supported

package/providers/searxng/docker-compose.yml

@@ -9,7 +9,7 @@ services:
     environment:
       # SearXNG configuration options
       - SEARXNG_BIND_ADDRESS=0.0.0.0:8080
-      - SEARXNG_SECRET_KEY=${SEARXNG_SECRET_KEY:-changeme}
+      - SEARXNG_SECRET=${SEARXNG_SECRET}
       - SEARXNG_DEBUG=false
       # Enable JSON API
       - SEARXNG_ENABLE_JSON_API=true

package/src/core/docker/dockerComposeHelper.ts

@@ -4,13 +4,43 @@
  * Manages Docker Compose services for local providers
  */
 
-import { exec } from "node:child_process";
-import { existsSync } from "node:fs";
+import { exec, execSync } from "node:child_process";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
 import { promisify } from "node:util";
 import { getSearxngPaths } from "../paths";
 
 const execAsync = promisify(exec);
 
+/**
+ * Get or generate a persistent SearXNG secret key
+ * Stored in the config directory so it persists across restarts
+ */
+function getSearxngSecret(configDir: string): string {
+  const secretFile = join(configDir, ".secret");
+  try {
+    if (existsSync(secretFile)) {
+      const secret = readFileSync(secretFile, "utf-8").trim();
+      if (secret.length >= 32) {
+        return secret;
+      }
+    }
+  } catch {
+    // Fall through to generate new secret
+  }
+
+  // Generate a new secret using crypto
+  const secret = [...Array(64)]
+    .map(() => Math.floor(Math.random() * 16).toString(16))
+    .join("");
+  try {
+    writeFileSync(secretFile, secret, { mode: 0o600 });
+  } catch {
+    // If we can't write, use a session-only secret
+  }
+  return secret;
+}
+
 export interface DockerComposeOptions {
   cwd?: string;
   timeout?: number;
@@ -44,6 +74,7 @@ export class DockerComposeHelper {
           ...process.env,
           SEARXNG_CONFIG: configDir,
           SEARXNG_DATA: dataDir,
+          SEARXNG_SECRET: getSearxngSecret(configDir),
         },
       });