ChristianLempa_Boilerplates/docker-compose/openwebui/compose.yaml

---
services:
  openwebui:
    image: ghcr.io/open-webui/open-webui:v0.5.14
    environment:
      - OLLAMA_BASE_URL=http://10.20.0.20:11434
      # -- Authentik SSO
      #    Uncomment the following lines to enable SSO with Authentik OIDC / OAuth2
      # - ENABLE_OAUTH_SIGNUP=true
      # - OAUTH_MERGE_ACCOUNTS_BY_EMAIL=false
      # - OAUTH_PROVIDER_NAME=authentik
      # - OPENID_PROVIDER_URL=https://authentik.example.com/application/o/openwebui-slug/.well-known/openid-configuration
      # - OAUTH_CLIENT_ID=${OAUTH_CLIENT_ID}
      # - OAUTH_CLIENT_SECRET=${OAUTH_CLIENT_SECRET}
      # - OAUTH_SCOPES=openid email profile
      # - OPENID_REDIRECT_URI=https://openwebui.example.com/oauth/oidc/callback
    volumes:
      - data:/app/backend/data:rw
    networks:
      - frontend
    labels:
      - traefik.enable=true
      - traefik.http.routers.openwebui.rule=Host(`openwebui.example.com`)
      - traefik.http.routers.openwebui.entrypoints=websecure
      - traefik.http.routers.openwebui.tls=true
      - traefik.http.routers.openwebui.tls.certresolver=cloudflare
      - traefik.http.routers.openwebui.service=openwebui
      - traefik.http.services.openwebui.loadBalancer.server.port=8080
    restart: unless-stopped

volumes:
  data:
    driver: local

networks:
  frontend:
    external: true