kind: compose
metadata:
  icon:
    provider: selfh
    id: open-webui
  name: Openwebui
  description: 'OpenWebUI is an open-source web-based user interface for managing
    and interacting with AI models. It provides a user-friendly platform to deploy,
    monitor, and utilize various AI models for tasks such as image generation, text
    generation, and more. OpenWebUI supports integration with popular AI frameworks
    and offers features like model management, user authentication, and real-time
    interaction.


    Project: https://openwebui.io/

    Documentation: https://docs.openwebui.io/

    GitHub: https://github.com/openwebui/openwebui

    '
  version: 0.7.2
  author: Christian Lempa
  date: '2026-01-10'
  tags:
  - traefik
  - authentik
  draft: true
schema: '1.2'
spec:
  general:
    vars:
      service_name:
        default: openwebui
      container_name:
        default: openwebui
      container_hostname:
        type: str
      container_timezone:
        type: str
      restart_policy:
        type: enum
        options:
        - unless-stopped
        - always
        - on-failure
        - 'no'
        default: unless-stopped
        required: true
      ollama_base_url:
        type: str
        description: Ollama API base URL
        default: http://ollama:11434
  traefik:
    vars:
      traefik_host:
        default: openwebui.home.arpa
      traefik_network:
        default: traefik
        type: str
        required: true
      traefik_domain:
        default: home.arpa
        type: str
        required: true
      traefik_enabled:
        type: bool
        default: false
        description: Enable Traefik integration
    toggle: traefik_enabled
    title: Traefik
    description: Configure Traefik reverse proxy integration
  traefik_tls:
    vars:
      traefik_tls_certresolver:
        type: str
        default: cloudflare
        required: true
      traefik_tls_enabled:
        type: bool
        default: false
        description: Enable Traefik TLS
    toggle: traefik_tls_enabled
    title: Traefik TLS
    description: Configure Traefik TLS/SSL certificates
    needs: traefik
  ports:
    vars:
      ports_http:
        description: Web UI port
        type: int
        default: 8080
  authentik:
    toggle: authentik_enabled
    vars:
      authentik_enabled:
        default: false
      openid_provider_url:
        type: str
        description: OpenID provider configuration URL
        default: https://authentik.example.com/application/o/openwebui/.well-known/openid-configuration
      openid_redirect_uri:
        type: str
        description: OAuth redirect URI
        default: https://openwebui.example.com/oauth/oidc/callback
      oauth_scopes:
        type: str
        description: OAuth scopes (space-separated)
        default: openid email profile
      oauth_merge_accounts:
        type: bool
        description: Merge OAuth accounts by email
        default: false
      authentik_client_id:
        type: str
        sensitive: true
        required: true
      authentik_client_secret:
        type: str
        sensitive: true
        required: true
      authentik_slug:
        type: str
        default: ''
        description: The Authentik application slug
      authentik_url:
        type: str
        default: ''
        description: The Authentik URL