Cannot start

[6801318d8d]

I have a Windows environment

I followed the instructions but when I connect to `http://127.0.0.1:8080/' it times out.

Here is my .env:

# By default listen on https://localhost
# To change this:
# * uncomment SEARXNG_HOSTNAME, and replace <host> by the SearXNG hostname
# * uncomment LETSENCRYPT_EMAIL, and replace <email> by your email (require to create a Let's Encrypt certificate)

SEARXNG_HOSTNAME=localhost
LETSENCRYPT_EMAIL=XXXX@gmail.com

Here is my settings.yml:

# see https://docs.searxng.org/admin/settings/settings.html#settings-use-default-settings
use_default_settings: false 
server:
  port: 8888
  bind_address: "127.0.0.1"
  # base_url is defined in the SEARXNG_BASE_URL environment variable, see .env and docker-compose.yml
  secret_key: "XXXXXXXX"  # change this!
  limiter: false  # enable this when running the instance for a public usage on the internet
  image_proxy: true
redis:
  url: redis://redis:6379/0

Here are the logs:

searxng | 2025-09-29 09:50:39.528 | SearXNG 2025.9.29-77fd3ee53
searxng | 2025-09-29 09:50:40.092 | [INFO] Starting granian (main PID: 1)
searxng | 2025-09-29 09:50:40.095 | [INFO] Listening at: http://:::8080
searxng | 2025-09-29 09:50:40.097 | [INFO] Spawning worker-1 with PID: 13
searxng | 2025-09-29 09:50:40.155 | [INFO] Started worker-1
searxng | 2025-09-29 09:50:40.155 | [INFO] Started worker-1 runtime-1
searxng | 2025-09-29 09:50:40.731 | /usr/local/searxng/searx/valkeydb.py:41: DeprecationWarning: setting redis.url is deprecated, use valkey.url
searxng | 2025-09-29 09:50:40.731 |   warnings.warn("setting redis.url is deprecated, use valkey.url", DeprecationWarning)
caddy   | 2025-09-29 09:50:38.626 | {"level":"info","ts":1759132238.6265152,"msg":"maxprocs: Leaving GOMAXPROCS=12: CPU quota undefined"}
caddy   | 2025-09-29 09:50:38.626 | {"level":"info","ts":1759132238.6266215,"msg":"GOMEMLIMIT is updated","package":"github.com/KimMachineGun/automemlimit/memlimit","GOMEMLIMIT":30152927232,"previous":9223372036854775807}
caddy   | 2025-09-29 09:50:38.628 | {"level":"info","ts":1759132238.6286435,"msg":"using config from file","file":"/etc/caddy/Caddyfile"}
caddy   | 2025-09-29 09:50:38.629 | {"level":"info","ts":1759132238.6297674,"msg":"adapted config to JSON","adapter":"caddyfile"}
caddy   | 2025-09-29 09:50:38.629 | {"level":"warn","ts":1759132238.6297925,"msg":"Caddyfile input is not formatted; run 'caddy fmt --overwrite' to fix inconsistencies","adapter":"caddyfile","file":"/etc/caddy/Caddyfile","line":68}
caddy   | 2025-09-29 09:50:38.630 | {"level":"warn","ts":1759132238.6302938,"logger":"admin","msg":"admin endpoint disabled"}
caddy   | 2025-09-29 09:50:38.630 | {"level":"info","ts":1759132238.6304424,"logger":"http.auto_https","msg":"server is listening only on the HTTPS port but has no TLS connection policies; adding one to enable TLS","server_name":"srv0","https_port":443}
caddy   | 2025-09-29 09:50:38.630 | {"level":"info","ts":1759132238.6304662,"logger":"http.auto_https","msg":"enabling automatic HTTP->HTTPS redirects","server_name":"srv0"}
caddy   | 2025-09-29 09:50:38.630 | {"level":"info","ts":1759132238.630545,"logger":"tls.cache.maintenance","msg":"started background certificate maintenance","cache":"0xc00053a580"}
caddy   | 2025-09-29 09:50:38.715 | {"level":"warn","ts":1759132238.715293,"logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
caddy   | 2025-09-29 09:50:38.715 | {"level":"warn","ts":1759132238.7153213,"logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
caddy   | 2025-09-29 09:50:38.715 | {"level":"info","ts":1759132238.7153249,"logger":"http.log","msg":"server running","name":"remaining_auto_https_redirects","protocols":["h1","h2","h3"]}
caddy   | 2025-09-29 09:50:38.747 | {"level":"info","ts":1759132238.7475762,"logger":"http","msg":"enabling HTTP/3 listener","addr":":443"}
caddy   | 2025-09-29 09:50:38.780 | {"level":"info","ts":1759132238.7802715,"msg":"failed to sufficiently increase receive buffer size (was: 208 kiB, wanted: 7168 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details."}
caddy   | 2025-09-29 09:50:38.780 | {"level":"info","ts":1759132238.7804337,"logger":"http.log","msg":"server running","name":"srv0","protocols":["h1","h2","h3"]}
caddy   | 2025-09-29 09:50:38.780 | {"level":"info","ts":1759132238.7804704,"logger":"http","msg":"enabling automatic TLS certificate management","domains":["localhost"]}
caddy   | 2025-09-29 09:50:38.780 | {"level":"info","ts":1759132238.7807603,"msg":"autosaved config (load with --resume flag)","file":"/config/caddy/autosave.json"}
caddy   | 2025-09-29 09:50:38.780 | {"level":"info","ts":1759132238.780788,"msg":"serving initial configuration"}
caddy   | 2025-09-29 09:50:38.788 | {"level":"info","ts":1759132238.7878523,"logger":"tls","msg":"storage cleaning happened too recently; skipping for now","storage":"FileStorage:/data/caddy","instance":"a07473d0-0c27-4d5c-8864-6caed6bbb9bd","try_again":1759218638.7878504,"try_again_in":86399.99999965}
caddy   | 2025-09-29 09:50:38.788 | {"level":"info","ts":1759132238.7879004,"logger":"tls.obtain","msg":"acquiring lock","identifier":"localhost"}
caddy   | 2025-09-29 09:50:38.788 | {"level":"info","ts":1759132238.787929,"logger":"tls","msg":"finished cleaning storage units"}
caddy   | 2025-09-29 09:50:38.789 | {"level":"info","ts":1759132238.7892208,"logger":"tls.obtain","msg":"lock acquired","identifier":"localhost"}
caddy   | 2025-09-29 09:50:38.789 | {"level":"info","ts":1759132238.7892928,"logger":"tls.obtain","msg":"obtaining certificate","identifier":"localhost"}
caddy   | 2025-09-29 09:50:38.789 | {"level":"error","ts":1759132238.7895577,"logger":"tls.obtain","msg":"will retry","error":"[localhost] Obtain: subject 'localhost' does not qualify for a public certificate","attempt":1,"retrying_in":60,"elapsed":0.000320737,"max_duration":2592000}

[inetol]

That's weird, can you paste your Caddyfile config?

[6801318d8d]

It's the default one, here it is. Thanks for your help.

{
	admin off

	log {
		output stderr
		format filter {
			# Preserves first 8 bits from IPv4 and 32 bits from IPv6
			request>remote_ip ip_mask 8 32
			request>client_ip ip_mask 8 32

			# Remove identificable information
			request>remote_port delete
			request>headers delete
			request>uri query {
				delete url
				delete h
				delete q
			}
		}
	}

	servers {
		client_ip_headers X-Forwarded-For X-Real-IP

		# Allow the following IP to passthrough the "X-Forwarded-*" headers to SearXNG
		# https://caddyserver.com/docs/caddyfile/options#trusted-proxies
		trusted_proxies static private_ranges
		trusted_proxies_strict
	}
}

{$SEARXNG_HOSTNAME}

tls {$SEARXNG_TLS}

encode zstd gzip

@api {
	path /config
	path /healthz
	path /stats/errors
	path /stats/checker
}

@static {
	path /static/*
}

@imageproxy {
	path /image_proxy
}

header {
	# CSP (https://content-security-policy.com)
	Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self' https:; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self'; img-src * data:; frame-src https:;"

	# Disable browser features
	Permissions-Policy "accelerometer=(),camera=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),payment=(),usb=()"

	# Only allow same-origin requests
	Referrer-Policy "same-origin"

	# Prevent MIME type sniffing from the declared Content-Type
	X-Content-Type-Options "nosniff"

	# Comment header to allow indexing by search engines
	X-Robots-Tag "noindex, nofollow, noarchive, nositelinkssearchbox, nosnippet, notranslate, noimageindex"
    
	# enable HSTS
	# WARNING: Once this value is set, the site must continue to support HTTPS until the expiry time is reached.

	# Strict-Transport-Security max-age=15768000;

	# Remove "Server" header
	-Server
}

header @api {
	Access-Control-Allow-Methods "GET, OPTIONS"
	Access-Control-Allow-Origin "*"
}

route {
	# Cache policy
	header Cache-Control "no-cache"
	header @static Cache-Control "public, max-age=30, stale-while-revalidate=60"
	header @imageproxy Cache-Control "public, max-age=3600"
}

# SearXNG
reverse_proxy localhost:8080

[inetol]

If you don't require HTTPS (if accessing on LAN or the same computer), I recommend that you comment or delete tls {$SEARXNG_TLS} setting in Caddyfile and restart compose.

[6801318d8d]

:(

Here is the new Caddyfile

{
	admin off

	log {
		output stderr
		format filter {
			# Preserves first 8 bits from IPv4 and 32 bits from IPv6
			request>remote_ip ip_mask 8 32
			request>client_ip ip_mask 8 32

			# Remove identificable information
			request>remote_port delete
			request>headers delete
			request>uri query {
				delete url
				delete h
				delete q
			}
		}
	}

	servers {
		client_ip_headers X-Forwarded-For X-Real-IP

		# Allow the following IP to passthrough the "X-Forwarded-*" headers to SearXNG
		# https://caddyserver.com/docs/caddyfile/options#trusted-proxies
		trusted_proxies static private_ranges
		trusted_proxies_strict
	}
}

{$SEARXNG_HOSTNAME}

#tls {$SEARXNG_TLS}

encode zstd gzip

@api {
	path /config
	path /healthz
	path /stats/errors
	path /stats/checker
}

@static {
	path /static/*
}

@imageproxy {
	path /image_proxy
}

header {
	# CSP (https://content-security-policy.com)
	Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self' https:; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self'; img-src * data:; frame-src https:;"

	# Disable browser features
	Permissions-Policy "accelerometer=(),camera=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),payment=(),usb=()"

	# Only allow same-origin requests
	Referrer-Policy "same-origin"

	# Prevent MIME type sniffing from the declared Content-Type
	X-Content-Type-Options "nosniff"

	# Comment header to allow indexing by search engines
	X-Robots-Tag "noindex, nofollow, noarchive, nositelinkssearchbox, nosnippet, notranslate, noimageindex"
    
	# enable HSTS
	# WARNING: Once this value is set, the site must continue to support HTTPS until the expiry time is reached.

	# Strict-Transport-Security max-age=15768000;

	# Remove "Server" header
	-Server
}

header @api {
	Access-Control-Allow-Methods "GET, OPTIONS"
	Access-Control-Allow-Origin "*"
}

route {
	# Cache policy
	header Cache-Control "no-cache"
	header @static Cache-Control "public, max-age=30, stale-while-revalidate=60"
	header @imageproxy Cache-Control "public, max-age=3600"
}

# SearXNG
reverse_proxy localhost:8080

Here are the logs:

searxng | 2025-09-29 16:09:09.187 | SearXNG 2025.9.29-77fd3ee53
searxng | 2025-09-29 16:09:09.983 | [INFO] Starting granian (main PID: 1)
searxng | 2025-09-29 16:09:09.987 | [INFO] Listening at: http://:::8080
searxng | 2025-09-29 16:09:09.990 | [INFO] Spawning worker-1 with PID: 13
searxng | 2025-09-29 16:09:10.919 | [INFO] Started worker-1
searxng | 2025-09-29 16:09:10.919 | [INFO] Started worker-1 runtime-1
searxng | 2025-09-29 16:09:10.899 | /usr/local/searxng/searx/valkeydb.py:41: DeprecationWarning: setting redis.url is deprecated, use valkey.url
searxng | 2025-09-29 16:09:10.899 |   warnings.warn("setting redis.url is deprecated, use valkey.url", DeprecationWarning)
searxng | 2025-09-29 16:09:19.417 | 2025-09-29 14:09:19,417 ERROR:searx.botdetection: X-Forwarded-For nor X-Real-IP header is set!
searxng | 2025-09-29 16:09:19.431 | 2025-09-29 14:09:19,422 ERROR:searx.webapp: Exception on / [GET]
searxng | 2025-09-29 16:09:19.431 | Traceback (most recent call last):
searxng | 2025-09-29 16:09:19.431 |   File "/usr/local/searxng/.venv/lib/python3.12/site-packages/flask/app.py", line 1511, in wsgi_app
searxng | 2025-09-29 16:09:19.431 |     response = self.full_dispatch_request()
searxng | 2025-09-29 16:09:19.431 |                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.431 |   File "/usr/local/searxng/.venv/lib/python3.12/site-packages/flask/app.py", line 919, in full_dispatch_request
searxng | 2025-09-29 16:09:19.431 |     rv = self.handle_user_exception(e)
searxng | 2025-09-29 16:09:19.431 |          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.431 |   File "/usr/local/searxng/.venv/lib/python3.12/site-packages/flask/app.py", line 915, in full_dispatch_request
searxng | 2025-09-29 16:09:19.431 |     rv = self.preprocess_request()
searxng | 2025-09-29 16:09:19.431 |          ^^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.431 |   File "/usr/local/searxng/.venv/lib/python3.12/site-packages/flask/app.py", line 1291, in preprocess_request
searxng | 2025-09-29 16:09:19.431 |     rv = self.ensure_sync(before_func)()
searxng | 2025-09-29 16:09:19.431 |          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.431 |   File "/usr/local/searxng/searx/webapp.py", line 463, in pre_request
searxng | 2025-09-29 16:09:19.431 |     preferences = Preferences(themes, list(categories.keys()), engines, searx.plugins.STORAGE, client_pref)
searxng | 2025-09-29 16:09:19.431 |                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.431 |   File "/usr/local/searxng/searx/preferences.py", line 458, in __init__
searxng | 2025-09-29 16:09:19.431 |     [settings['default_doi_resolver'], ],
searxng | 2025-09-29 16:09:19.431 |      ~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.431 | KeyError: 'default_doi_resolver'
searxng | 2025-09-29 16:09:19.746 | 2025-09-29 14:09:19,745 ERROR:searx.webapp: Exception on /favicon.ico [GET]
searxng | 2025-09-29 16:09:19.746 | Traceback (most recent call last):
searxng | 2025-09-29 16:09:19.746 |   File "/usr/local/searxng/.venv/lib/python3.12/site-packages/flask/app.py", line 1511, in wsgi_app
searxng | 2025-09-29 16:09:19.746 |     response = self.full_dispatch_request()
searxng | 2025-09-29 16:09:19.746 |                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.746 |   File "/usr/local/searxng/.venv/lib/python3.12/site-packages/flask/app.py", line 919, in full_dispatch_request
searxng | 2025-09-29 16:09:19.746 |     rv = self.handle_user_exception(e)
searxng | 2025-09-29 16:09:19.746 |          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.746 |   File "/usr/local/searxng/.venv/lib/python3.12/site-packages/flask/app.py", line 915, in full_dispatch_request
searxng | 2025-09-29 16:09:19.746 |     rv = self.preprocess_request()
searxng | 2025-09-29 16:09:19.746 |          ^^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.746 |   File "/usr/local/searxng/.venv/lib/python3.12/site-packages/flask/app.py", line 1291, in preprocess_request
searxng | 2025-09-29 16:09:19.746 |     rv = self.ensure_sync(before_func)()
searxng | 2025-09-29 16:09:19.746 |          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.747 |   File "/usr/local/searxng/searx/webapp.py", line 463, in pre_request
searxng | 2025-09-29 16:09:19.747 |     preferences = Preferences(themes, list(categories.keys()), engines, searx.plugins.STORAGE, client_pref)
searxng | 2025-09-29 16:09:19.747 |                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.747 |   File "/usr/local/searxng/searx/preferences.py", line 458, in __init__
searxng | 2025-09-29 16:09:19.747 |     [settings['default_doi_resolver'], ],
searxng | 2025-09-29 16:09:19.747 |      ~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^
searxng | 2025-09-29 16:09:19.747 | KeyError: 'default_doi_resolver'
caddy   | 2025-09-29 16:09:08.377 | {"level":"info","ts":1759154948.3773093,"msg":"maxprocs: Leaving GOMAXPROCS=12: CPU quota undefined"}
caddy   | 2025-09-29 16:09:08.377 | {"level":"info","ts":1759154948.377488,"msg":"GOMEMLIMIT is updated","package":"github.com/KimMachineGun/automemlimit/memlimit","GOMEMLIMIT":30152927232,"previous":9223372036854775807}
caddy   | 2025-09-29 16:09:08.380 | {"level":"info","ts":1759154948.3801124,"msg":"using config from file","file":"/etc/caddy/Caddyfile"}
caddy   | 2025-09-29 16:09:08.381 | {"level":"info","ts":1759154948.381397,"msg":"adapted config to JSON","adapter":"caddyfile"}
caddy   | 2025-09-29 16:09:08.381 | {"level":"warn","ts":1759154948.3814414,"msg":"Caddyfile input is not formatted; run 'caddy fmt --overwrite' to fix inconsistencies","adapter":"caddyfile","file":"/etc/caddy/Caddyfile","line":68}
caddy   | 2025-09-29 16:09:08.382 | {"level":"warn","ts":1759154948.3820677,"logger":"admin","msg":"admin endpoint disabled"}
caddy   | 2025-09-29 16:09:08.382 | {"level":"info","ts":1759154948.3822405,"logger":"http.auto_https","msg":"server is listening only on the HTTPS port but has no TLS connection policies; adding one to enable TLS","server_name":"srv0","https_port":443}
caddy   | 2025-09-29 16:09:08.382 | {"level":"info","ts":1759154948.3822708,"logger":"http.auto_https","msg":"enabling automatic HTTP->HTTPS redirects","server_name":"srv0"}
caddy   | 2025-09-29 16:09:08.382 | {"level":"info","ts":1759154948.3823926,"logger":"tls.cache.maintenance","msg":"started background certificate maintenance","cache":"0xc000051500"}
caddy   | 2025-09-29 16:09:08.394 | {"level":"warn","ts":1759154948.394316,"logger":"pki.ca.local","msg":"installing root certificate (you might be prompted for password)","path":"storage:pki/authorities/local/root.crt"}
caddy   | 2025-09-29 16:09:08.397 | {"level":"info","ts":1759154948.3971348,"msg":"warning: \"certutil\" is not available, install \"certutil\" with \"apt install libnss3-tools\" or \"yum install nss-tools\" and try again"}
caddy   | 2025-09-29 16:09:08.397 | {"level":"info","ts":1759154948.397176,"msg":"define JAVA_HOME environment variable to use the Java trust"}
caddy   | 2025-09-29 16:09:08.397 | {"level":"info","ts":1759154948.3976085,"logger":"tls","msg":"storage cleaning happened too recently; skipping for now","storage":"FileStorage:/data/caddy","instance":"a07473d0-0c27-4d5c-8864-6caed6bbb9bd","try_again":1759241348.3976068,"try_again_in":86399.999999534}
caddy   | 2025-09-29 16:09:08.397 | {"level":"info","ts":1759154948.3977191,"logger":"tls","msg":"finished cleaning storage units"}
caddy   | 2025-09-29 16:09:08.444 | {"level":"info","ts":1759154948.4445043,"msg":"certificate installed properly in linux trusts"}
caddy   | 2025-09-29 16:09:08.532 | {"level":"info","ts":1759154948.5322104,"logger":"http","msg":"enabling HTTP/3 listener","addr":":443"}
caddy   | 2025-09-29 16:09:08.564 | {"level":"info","ts":1759154948.5636587,"msg":"failed to sufficiently increase receive buffer size (was: 208 kiB, wanted: 7168 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details."}
caddy   | 2025-09-29 16:09:08.564 | {"level":"info","ts":1759154948.5638158,"logger":"http.log","msg":"server running","name":"srv0","protocols":["h1","h2","h3"]}
caddy   | 2025-09-29 16:09:08.595 | {"level":"warn","ts":1759154948.594978,"logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
caddy   | 2025-09-29 16:09:08.596 | {"level":"warn","ts":1759154948.5950184,"logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
caddy   | 2025-09-29 16:09:08.596 | {"level":"info","ts":1759154948.5950265,"logger":"http.log","msg":"server running","name":"remaining_auto_https_redirects","protocols":["h1","h2","h3"]}
caddy   | 2025-09-29 16:09:08.596 | {"level":"info","ts":1759154948.5950336,"logger":"http","msg":"enabling automatic TLS certificate management","domains":["localhost"]}
caddy   | 2025-09-29 16:09:08.596 | {"level":"info","ts":1759154948.595241,"msg":"autosaved config (load with --resume flag)","file":"/config/caddy/autosave.json"}
caddy   | 2025-09-29 16:09:08.596 | {"level":"info","ts":1759154948.5952682,"msg":"serving initial configuration"}
caddy   | 2025-09-29 16:09:08.598 | {"level":"info","ts":1759154948.5983105,"logger":"tls.obtain","msg":"acquiring lock","identifier":"localhost"}
caddy   | 2025-09-29 16:09:08.600 | {"level":"info","ts":1759154948.600727,"logger":"tls.obtain","msg":"lock acquired","identifier":"localhost"}
caddy   | 2025-09-29 16:09:08.601 | {"level":"info","ts":1759154948.6010938,"logger":"tls.obtain","msg":"obtaining certificate","identifier":"localhost"}
caddy   | 2025-09-29 16:09:08.611 | {"level":"info","ts":1759154948.611066,"logger":"tls.obtain","msg":"certificate obtained successfully","identifier":"localhost","issuer":"local"}
caddy   | 2025-09-29 16:09:08.611 | {"level":"info","ts":1759154948.6111767,"logger":"tls.obtain","msg":"releasing lock","identifier":"localhost"}
caddy   | 2025-09-29 16:09:08.612 | {"level":"warn","ts":1759154948.6120477,"logger":"tls","msg":"stapling OCSP","identifiers":["localhost"]}

[6801318d8d]

I was able to set it up following these instructions

https://www.tanyongsheng.com/note/setting-up-searxng-on-windows-localhost-your-private-customizable-search-engine/