add searxng deployment, service, PVC, and sealed secret configuration

clusters/default/tools/searxng/searxng-pvc.yml

@@ -0,0 +1,14 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: searxng-longhorn
+  namespace: tools
+spec:
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Filesystem
+  resources:
+    requests:
+      storage: 100Mi
+  storageClassName: longhorn

clusters/default/tools/searxng/searxng-secret.yml

@@ -0,0 +1,14 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: searxng-secret
+  namespace: tools
+spec:
+  encryptedData:
+    BASE_URL: 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
+  template:
+    metadata:
+      name: searxng-secret
+      namespace: tools
+    type: Opaque

clusters/default/tools/searxng/searxng-svc.yml

@@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: searxng-service
+  namespace: tools
+spec:
+  selector:
+    app: searxng
+  type: LoadBalancer
+  ports:
+  - port: 8085
+    targetPort: 8080

clusters/default/tools/searxng/searxng.yml

@@ -0,0 +1,38 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: searxng
+  namespace: tools
+spec:
+  strategy:
+    type: Recreate
+  replicas: 1
+  selector:
+    matchLabels:
+      app: searxng
+  template:
+    metadata:
+      labels:
+        app: searxng
+    spec:
+      containers:
+      - name: searxng
+        image: searxng/searxng@sha256:1458a9e6df554fa0306f2f4b770e2e49ad49dc726dddaa598eb4613718cb3b81
+        ports:
+        - containerPort: 8080
+        env:
+        - name: "INSTANCE_NAME"
+          value: "searxng"
+        - name: BASE_URL
+          valueFrom:
+            secretKeyRef:
+              name: searxng-secret
+              key: BASE_URL
+        volumeMounts:
+        - name: searxng
+          mountPath: /etc/searxng
+      volumes:
+      - name: searxng
+        persistentVolumeClaim:
+          claimName: searxng-longhorn