diff --git a/infrastructure/services/open-webui/docker-compose.open-webui.yml b/infrastructure/services/open-webui/docker-compose.open-webui.yml
index 349bbd3..5eadf65 100644
--- a/infrastructure/services/open-webui/docker-compose.open-webui.yml
+++ b/infrastructure/services/open-webui/docker-compose.open-webui.yml
@@ -1,6 +1,6 @@
 services:
   ollama:
-    image: ollama/ollama:latest
+    image: ollama/ollama:${OLLAMA_DOCKER_TAG-latest}
     #platform: linux/amd64
     container_name: ollama
     profiles:
@@ -12,19 +12,21 @@ services:
     tty: true
     volumes:
       - ollama:/root/.ollama
+    # ports:
+    #   - ${OLLAMA_PORT-11434}:11434
     env_file:
       - ./env/ollama.env
     security_opt:
       - no-new-privileges:true
     networks:
       - open-webui-network
-    # devices:
-     #  - /dev/dri/card0:/dev/dri/card0
-     #  - /dev/dri/renderD128:/dev/dri/renderD128
+    devices:
+      - /dev/dri
+      - /dev/kfd
 
 
   open-webui:
-    image: ghcr.io/open-webui/open-webui:main
+    image: ghcr.io/open-webui/open-webui:${WEBUI_DOCKER_TAG-main}
     container_name: open-webui
     profiles:
       - open-webui
@@ -38,6 +40,8 @@ services:
     #environment:
     #  - UID=${PUID:-1000}
     #  - GID=${PGID:-1000}
+    # ports:
+    #   - ${OPEN_WEBUI_PORT-3000}:8080
     restart: on-failure:5
     networks:
       - open-webui-network
diff --git a/infrastructure/services/open-webui/env/ollama.env b/infrastructure/services/open-webui/env/ollama.env
index 24df31c..9252466 100644
--- a/infrastructure/services/open-webui/env/ollama.env
+++ b/infrastructure/services/open-webui/env/ollama.env
@@ -5,3 +5,4 @@
 # OLLAMA_DEBUG=1
 # OLLAMA_SCHED_SPREAD=1
 # OLLAMA_FLASH_ATTENTION=1
+# OLLAMA_CONTEXT_LENGTH=2048
diff --git a/infrastructure/services/open-webui/env/open-webui.env b/infrastructure/services/open-webui/env/open-webui.env
index ae70e03..5b3e02e 100644
--- a/infrastructure/services/open-webui/env/open-webui.env
+++ b/infrastructure/services/open-webui/env/open-webui.env
@@ -1,5 +1,6 @@
 OLLAMA_BASE_URL=http://ollama:11434
-#WEBUI_SECRET_KEY=
+# openssl rand -hex 32
+WEBUI_SECRET_KEY=7d83b15a417d090ba5c6b899270a05dd215c60848354c0c7574226d6ff02f39e
 #HF_HUB_OFFLINE=1
 # Disable analytics
 SCARF_NO_ANALYTICS=true
diff --git a/infrastructure/services/searxng/config/.env b/infrastructure/services/searxng/config/.env
new file mode 100644
index 0000000..de2d1dd
--- /dev/null
+++ b/infrastructure/services/searxng/config/.env
@@ -0,0 +1,15 @@
+# Read the documentation before using the `docker-compose.yml` file:
+# https://docs.searxng.org/admin/installation-docker.html
+#
+# Additional ENVs:
+# https://docs.searxng.org/admin/settings/settings_general.html#settings-general
+# https://docs.searxng.org/admin/settings/settings_server.html#settings-server
+
+# Use a specific version tag. E.g. "latest" or "2026.3.25-541c6c3cb".
+#SEARXNG_VERSION=latest
+
+# Listen to a specific address.
+#SEARXNG_HOST=[::]
+
+# Listen to a specific port.
+#SEARXNG_PORT=8080
diff --git a/infrastructure/services/searxng/docker-compose.yml b/infrastructure/services/searxng/docker-compose.yml
new file mode 100644
index 0000000..32d02de
--- /dev/null
+++ b/infrastructure/services/searxng/docker-compose.yml
@@ -0,0 +1,31 @@
+# Read the documentation before using the `docker-compose.yml` file:
+# https://docs.searxng.org/admin/installation-docker.html
+
+name: searxng
+
+services:
+  core:
+    container_name: searxng-core
+    image: docker.io/searxng/searxng:${SEARXNG_VERSION:-latest}
+    restart: always
+    ports:
+      - ${SEARXNG_HOST:+${SEARXNG_HOST}:}${SEARXNG_PORT:-8080}:${SEARXNG_PORT:-8080}
+    env_file: ./.env
+    volumes:
+      - ./core-config/:/etc/searxng/:Z
+      - core-data:/var/cache/searxng/
+    dns:
+      - 1.1.1.1
+      - 8.8.8.8
+
+  valkey:
+    container_name: searxng-valkey
+    image: docker.io/valkey/valkey:9-alpine
+    command: valkey-server --save 30 1 --loglevel warning
+    restart: always
+    volumes:
+      - valkey-data:/data/
+
+volumes:
+  core-data:
+  valkey-data: