services:
  open-webui:
    image: ghcr.io/open-webui/open-webui:v0.9.1
    container_name: open-webui
    restart: always
    environment:
      # If Ollama is on the same host (Waldorf)
      - OLLAMA_BASE_URL=${OLLAMA_BASE_URL}
      # Standard settings
      - WEBUI_SECRET_KEY=${WEBUI_SECRET_KEY:-change-me-to-a-random-secret}
      - HF_TOKEN=${HF_TOKEN:-}
      - TZ=America/New_York
    ports:
      - "8080:8080"
    volumes:
      - /mnt/appdata/openwebui:/app/backend/data
    # If you need to talk to your new MCP Gateway
    # extra_hosts:
    #   - "mcp-gateway:10.0.0.x" # IP of Heimdall
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.openwebui.rule=Host(`gpt.castaldifamily.com`)"
      - "traefik.http.routers.openwebui.entrypoints=websecure"
      - "traefik.http.routers.openwebui.tls=true"
      - "traefik.http.routers.openwebui.tls.certresolver=cloudflare"
      - "traefik.http.services.openwebui.loadbalancer.server.port=8080"