🐛 fix(mana-search): fix SearXNG docker config for local development

- Remove :ro flag from volume mounts (SearXNG needs write access)
- Simplify limiter.toml to match current SearXNG schema
- Disable link_token for API usage without browser

services/mana-search/docker-compose.dev.yml

@@ -13,8 +13,8 @@ services:
     ports:
       - "8080:8080"  # Exposed for development
     volumes:
-      - ./searxng/settings.yml:/etc/searxng/settings.yml:ro
-      - ./searxng/limiter.toml:/etc/searxng/limiter.toml:ro
+      - ./searxng/settings.yml:/etc/searxng/settings.yml
+      - ./searxng/limiter.toml:/etc/searxng/limiter.toml
     environment:
       SEARXNG_BASE_URL: http://localhost:8080
       SEARXNG_SECRET: dev-secret-change-in-production

services/mana-search/searxng/limiter.toml

@@ -2,14 +2,8 @@
 # Documentation: https://docs.searxng.org/admin/settings/limiter.html
 
 [botdetection.ip_limit]
-# Enable link token for bot detection
-link_token = true
-
-# Maximum searches per minute per IP
-limit = 60
-
-# Burst limit (requests before rate limiting kicks in)
-burst = 20
+# Disable link token for API usage
+link_token = false
 
 [botdetection.ip_lists]
 # Allow internal Docker network IPs (no rate limiting for internal services)
@@ -22,6 +16,3 @@ pass_ip = [
     "127.0.0.1",
     "::1",
 ]
-
-# Block known bad actors (add IPs as needed)
-block_ip = []