services:
  openwebui:
    image: ghcr.io/open-webui/open-webui:0.6.5
    container_name: open-webui
    restart: always
    environment:
     - 'OLLAMA_BASE_URL=http://mini:11434'
     - 'ENABLE_OAUTH_SIGNUP=true'
     - 'OAUTH_MERGE_ACCOUNTS_BY_EMAIL=true'
     - 'OAUTH_PROVIDER_NAME=Authentik'
     - 'OPENID_PROVIDER_URL=https://auth.home.thoster.net/application/o/open-webui/.well-known/openid-configuration'
     - 'OAUTH_CLIENT_ID=GwEpuLXtQsvXTV1BofDolEB6GXnhH1pqg7vDyZcm'
     - 'OAUTH_CLIENT_SECRET=7DvwzbhHEElZLoZjEcHOtpwIU2IxhyNPv5sGmdOnJvvaMxQVQTgbaP6OAcEKTGLtUvIzgh8c8juvTYsrOkdp2WXCLNTrM2ZQP3UhHTBjESRU1yZK4MaVG46jnLj9Aaks'
     - 'OAUTH_SCOPES=openid email profile'
     - 'OPENID_REDIRECT_URI=https://ai.home.thoster.net/oauth/oidc/callback'
     - 'GLOBAL_LOG_LEVEL=DEBUG'
    volumes:
      - ./data:/app/backend/data
    ports:
      - 8082:8080
    extra_hosts:
      - host.docker.internal:host-gateway