services:
  open-webui:
    image: ghcr.io/open-webui/open-webui:0.9.4
    restart: unless-stopped
    environment:
      - ENABLE_OLLAMA_API=false
      - ENABLE_RAG_WEB_SEARCH=true
      - RAG_WEB_SEARCH_ENGINE=searxng
      - ENABLE_OAUTH_SIGNUP=true
      - ENABLE_SIGNUP=false
      - WEBUI_URL=https://openwebui.gandalf.dfas4.de
      - USER_AGENT="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
    env_file:
      - .env
    volumes:
      - ./data:/app/backend/data
    networks:
      - proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.openwebui.rule=Host(`openwebui.gandalf.dfas4.de`)"
      - "traefik.http.routers.openwebui.entrypoints=websecure"
      - "traefik.http.routers.openwebui.tls=true"
      - "traefik.http.routers.openwebui.tls.certresolver=myresolver"
      - "traefik.http.services.openwebui.loadbalancer.server.port=8080"
      - "traefik.http.routers.openwebui.tls.domains[0].main=gandalf.dfas4.de"
      - "traefik.http.routers.openwebui.tls.domains[0].sans=*.gandalf.dfas4.de"
networks:
  proxy:
    name: proxy