fix: Complete SearXNG bot detection bypass configuration

- Add real_ip config to settings.yml to trust proxy headers
- Update limiter.toml to allow all IPs (0.0.0.0/0 and ::/0)
- Re-add limiter.toml volume mount (file now exists)
- Add localhost range (127.0.0.0/8) to pass_ip list

docker-compose.yml

@@ -62,6 +62,7 @@ services:
       - SEARXNG_SECRET=priceflow-searxng-secret
     volumes:
       - ./searxng/settings.yml:/etc/searxng/settings.yml:ro
+      - ./searxng/limiter.toml:/etc/searxng/limiter.toml:ro
     networks:
       - nginx_default
 

searxng/limiter.toml

@@ -1,13 +1,19 @@
 # SearXNG rate limiter configuration
-# Disabled for internal use
+# Disabled for internal use in PriceFlow
 
 [botdetection.ip_limit]
-# Disable rate limiting for internal Docker network
+# Disable IP rate limiting completely
 link_token = false
 
 [botdetection.ip_lists]
+# Allow all private network ranges + localhost
 pass_ip = [
+    "0.0.0.0/0",
+    "127.0.0.0/8",
     "192.168.0.0/16",
     "172.16.0.0/12",
     "10.0.0.0/8",
+    "::/0",
 ]
+# No blocked IPs
+block_ip = []

searxng/settings.yml

@@ -10,6 +10,11 @@ server:
   port: 8080
   bind_address: "0.0.0.0"
   method: "GET"
+  # Trust all proxies for X-Forwarded-For header
+  real_ip:
+    x_for: 1
+    ipv4_prefix: 32
+    ipv6_prefix: 128
 
 # Disable bot detection completely
 redis: