From 95a87766ebbd52491e5a006e6333a81762ca6142 Mon Sep 17 00:00:00 2001
From: Adrian Gunnar Lauterer <adriangl@pvv.ntnu.no>
Date: Tue, 10 Dec 2024 16:01:53 +0100
Subject: [PATCH] add openwebui to bekkalokk services

This is not directly added to the configuration yet, just a start on the service config.
---
 hosts/bekkalokk/services/open-webui.nix | 49 +++++++++++++++++++++++++
 1 file changed, 49 insertions(+)
 create mode 100644 hosts/bekkalokk/services/open-webui.nix

diff --git a/hosts/bekkalokk/services/open-webui.nix b/hosts/bekkalokk/services/open-webui.nix
new file mode 100644
index 0000000..3a206f9
--- /dev/null
+++ b/hosts/bekkalokk/services/open-webui.nix
@@ -0,0 +1,49 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.services.open-webui;
+  domain = "gpt.pvv.ntnu.no";
+  address = "127.0.1.11";
+  port = 11111;
+
+in
+{
+
+  services.open-webui = {
+    enable = true;
+
+    package = pkgs.unstable.open-webui;
+    port = port;
+    host = "${address}";
+    openFirewall = true;
+	
+	environment = {
+  		ANONYMIZED_TELEMETRY = "False";
+  		DO_NOT_TRACK = "True";
+  		SCARF_NO_ANALYTICS = "True";
+		OLLAMA_API_BASE_URL = "http://127.0.0.1:11434";
+		ENABLE_SIGNUP = "False";
+		ENABLE_OAUTH_SIGNUP = "True";
+		#ENABLE_LOGIN_FORM = "False"; #for forcing oauth only - less confusion but needed for local admin account i think
+		DEFAULT_USER_ROLE = "user";
+		ENABLE_ADMIN_EXPORT = "False";
+		ENABLE_ADMIN_CHAT_ACCESS = "False";
+		ENABLE_COMMUNITY_SHARING = "False";
+		WEBUI_URL = "${domain}";
+	};
+
+  };
+  
+  services.nginx.virtualHosts."${domain}" = {
+    forceSSL = true;
+    enableACME = true;
+    kTLS = true;
+
+    locations."/" = {
+      proxyPass = "http://${address}:${toString port}";
+      proxyWebsockets = true;
+    };
+  };
+
+  
+  
+}
\ No newline at end of file