[Unit]
Description=Searx server
After=network.target

[Service]
Type=simple
User=searx
Environment=SEARX_SETTINGS_PATH=/etc/searx/settings.yml
PrivateTmp=true
PrivateDevices=true
# Prevent accessing /home, /root and /run/user
ProtectHome=true
# Prevent writes to /usr, /boot, and /etc
ProtectSystem=full
ExecStart=/usr/bin/searx-run

Restart=on-failure
RestartSec=1

[Install]
WantedBy=multi-user.target