From 0eac82e06eb9ff810abe9f6739c119a0acf97624 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Sat, 21 Mar 2026 06:02:25 +0000
Subject: [PATCH] lock safesearch preference when level is moderate or strict
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

SearXNG's preferences.lock list prevents users from changing a setting
via the UI — it greys out the option. Without this, safe_search in
settings.yml was only a server default that users could still override
in their preferences page.

For moderate/strict, add:
  preferences:
    lock:
      - safesearch

For none, the lock is omitted so users can freely adjust it.

https://claude.ai/code/session_012gDnantBmFTWZGCiKyjazx
---
 configure-searxng-safesearch.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/configure-searxng-safesearch.sh b/configure-searxng-safesearch.sh
index ad0ea00..7080d7c 100755
--- a/configure-searxng-safesearch.sh
+++ b/configure-searxng-safesearch.sh
@@ -190,6 +190,10 @@ set -u
   printf 'general:\n  instance_name: "Local Search"\n'
   printf 'server:\n  secret_key: "%s"\n  limiter: false\n' "$SECRET_KEY"
   printf 'search:\n  safe_search: %d\n  default_lang: "en"\n  formats: [html, json]\n' "$SAFE_INT"
+  # Lock the safe-search preference so users cannot override it via the UI
+  if [[ "$LEVEL" != "none" ]]; then
+    printf 'preferences:\n  lock:\n    - safesearch\n'
+  fi
   if [[ -n "$ENGINE_BLOCK" ]]; then
     printf 'engines:\n'
     printf '%b' "$ENGINE_BLOCK"