services:
  open-webui:
    image: ghcr.io/open-webui/open-webui:main
    container_name: open-webui
    restart: always
    environment:
      # If Ollama is on the same host (Waldorf)
      - OLLAMA_BASE_URL=http://10.0.0.202:11434
      # Standard settings
      - WEBUI_SECRET_KEY=${WEBUI_SECRET_KEY}
      - TZ=America/New_York
    volumes:
      - /mnt/appdata/openwebui:/app/backend/data
    # If you need to talk to your new MCP Gateway
    # extra_hosts:
    #   - "mcp-gateway:10.0.0.x" # IP of Heimdall
    networks:
      - proxy-net
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.openwebui.rule=Host(`gpt.castaldifamily.com`)"
      - "traefik.http.routers.openwebui.entrypoints=websecure"
      - "traefik.http.routers.openwebui.tls.certresolver=cloudflare"
      - "traefik.http.services.openwebui.loadbalancer.server.port=8080"

networks:
  proxy-net:
    external: true