seperate into api and browser

clusters/cl01tl/applications/searxng/values.yaml

@@ -1,6 +1,6 @@
 searxng:
   controllers:
-    main:
+    api:
       type: deployment
       replicas: 1
       strategy: Recreate
@@ -18,8 +18,6 @@ searxng:
               value: http://searxng.searxng:8080/search?q=<query>
             - name: SEARXNG_HOSTNAME
               value: searxng.searxng
-            - name: SEARXNG_REDIS_URL
-              value: redis://searxng-valkey-primary.searxng:6379/0
             - name: UWSGI_WORKERS
               value: 4
             - name: UWSGI_THREADS
@@ -36,16 +34,51 @@ searxng:
             requests:
               cpu: 10m
               memory: 256Mi
+    browser:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: docker.io/searxng/searxng
+            tag: 2025.1.26-70f1b6500
+            pullPolicy: IfNotPresent
+          env:
+            - name: SEARXNG_BASE_URL
+              value: https://searxng-cl01tl.boreal-beaufort.ts.net/
+            - name: SEARXNG_QUERY_URL
+              value: https://searxng-cl01tl.boreal-beaufort.ts.net/search?q=<query>
+            - name: SEARXNG_HOSTNAME
+              value: searxng-cl01tl.boreal-beaufort.ts.net
+            - name: SEARXNG_REDIS_URL
+              value: redis://searxng-valkey-primary.searxng:6379/0
+            - name: UWSGI_WORKERS
+              value: 4
+            - name: UWSGI_THREADS
+              value: 4
+          resources:
+            requests:
+              cpu: 10m
+              memory: 256Mi
   serviceAccount:
     create: true
   service:
-    main:
-      controller: main
+    api:
+      controller: api
       ports:
         mail:
           port: 8080
           targetPort: 8080
           protocol: HTTP
+    browser:
+      controller: browser
+      ports:
+        mail:
+          port: 80
+          targetPort: 8080
+          protocol: HTTP
   ingress:
     tailscale:
       enabled: true
@@ -56,7 +89,7 @@ searxng:
             - path: /
               pathType: Prefix
               service:
-                name: searxng
+                name: searxng-browser
                 port: 80
       tls:
         - hosts:
@@ -67,7 +100,7 @@ searxng:
       type: secret
       name: searxng-config-secret
       advancedMounts:
-        main:
+        api:
           main:
             - path: /etc/searxng/settings.yml
               readOnly: true
@@ -77,12 +110,21 @@ searxng:
               readOnly: true
               mountPropagation: None
               subPath: limiter.toml
-    data:
+    api-data:
       storageClass: ceph-block-delete
       accessMode: ReadWriteOnce
       size: 5Gi
       advancedMounts:
-        main:
+        api:
+          main:
+            - path: /etc/searxng
+              readOnly: false
+    browser-data:
+      storageClass: ceph-block-delete
+      accessMode: ReadWriteOnce
+      size: 5Gi
+      advancedMounts:
+        browser:
           main:
             - path: /etc/searxng
               readOnly: false