Minor updates

karakeep-compose.yaml

@@ -10,7 +10,8 @@ services:
     # ports:
     #   - 3000:3000
     env_file:
-      - .env
+      # - .env
+      - /data/secrets/karakeep
     environment:
       MEILI_ADDR: http://meilisearch:7700
       BROWSER_WEB_URL: http://karakeep-chrome:9222
@@ -20,7 +21,7 @@ services:
       INFERENCE_OUTPUT_SCHEMA: json
       INFERENCE_CONTEXT_LENGTH: 1024
       INFERENCE_JOB_TIMEOUT_SEC: 120
-
+      LOG_LEVEL: debug
       # You almost never want to change the value of the DATA_DIR variable.
       # If you want to mount a custom directory, change the volume mapping above instead.
       DATA_DIR: /data # DON'T CHANGE THIS
@@ -65,7 +66,6 @@ services:
       - OLLAMA_DEBUG=1
     networks:
       - ollama-int
-
   ollama-webui:
     image: ghcr.io/open-webui/open-webui:main
     volumes:
@@ -73,12 +73,24 @@ services:
     depends_on:
       - ollama
     environment: # https://docs.openwebui.com/getting-started/env-configuration#default_models
-      - OLLAMA_BASE_URLS=http://host.docker.internal:7869 #comma separated ollama hosts
+      - OLLAMA_BASE_URLS=http://ollama:7869 #comma separated ollama hosts
+      - ENABLE_OPENAI_API=False
+      - WEBUI_URL=https://ollama.loadingm.xyz
       - ENV=dev
-      - WEBUI_AUTH=True
-      - WEBUI_NAME=valiantlynx AI
-      - WEBUI_URL=http://localhost:8080
-      - WEBUI_SECRET_KEY=t0p-s3cr3t
+      - ENABLE_OAUTH_SIGNUP=true
+      - OAUTH_MERGE_ACCOUNTS_BY_EMAIL=true
+      - OPENID_PROVIDER_URL=https://auth.loadingm.xyz/.well-known/openid-configuration
+      - OAUTH_PROVIDER_NAME=Authelia
+      - OAUTH_SCOPES=openid email profile groups
+      - ENABLE_OAUTH_ROLE_MANAGEMENT=true
+      - OAUTH_ALLOWED_ROLES=openwebui,openwebui-admin
+      - OAUTH_ADMIN_ROLES=openwebui-admin
+      - OAUTH_ROLES_CLAIM=groups
+      - OAUTH_CODE_CHALLENGE_METHOD=S256
+    env_file: /data/secrets/ollama-webui
+      # - WEBUI_AUTH=True
+      # - WEBUI_NAME=valiantlynx AI
+      # - WEBUI_SECRET_KEY=t0p-s3cr3t
     extra_hosts:
       - host.docker.internal:host-gateway
     restart: unless-stopped