Harden a public SearXNG instance
Open SearXNG to other people safely: bind to localhost, align forwarded IP headers with trusted proxies, enable the limiter, and lock down the JSON API.
#rate-limiting
Filtering by topic #rate-limiting · clear
The SearXNG limiter and why it needs Valkey
The SearXNG limiter keeps its per IP counters in Valkey. Set up limiter.toml in a container or a source install, and see which sections actually matter.
Stop subscription bombing on signup forms
An attacker submits a victim's address to hundreds of signup forms at once. Confirmed opt in and rate limits stop your server sending one of them.