kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-09-24 11:06:24 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,715 Commits 1 Branch 0 Tags
f4cf55b3c8ae17dfb98010b37ab2e7d31324cf24
Commit Graph

11 Commits

Author SHA1 Message Date
Kevin Veen-Birkenbach
f4cf55b3c8 Open WebUI OIDC & proxy fixes + Ollama preload + async-safe pull 
- svc-ai-ollama:
  - Add preload_models (llama3, mistral, nomic-embed-text)
  - Pre-pull task: loop_var=model, async-safe changed_when/failed_when

- sys-svc-proxy (OpenResty):
  - Forward Authorization header
  - Ensure proxy_pass_request_headers on

- web-app-openwebui:
  - ADMIN_EMAIL from users.administrator.email
  - Request RBAC group scope in OAUTH_SCOPES

Ref: ChatGPT support (2025-09-23) — https://chatgpt.com/share/68d20588-2584-800f-aed4-26ce710c69c4
 2025-09-23 04:27:46 +02:00
Kevin Veen-Birkenbach
7a119c3175 Deactivated CSS for Open WebUI 2025-09-23 02:21:59 +02:00
Kevin Veen-Birkenbach
790c184e66 feat(web-app-openwebui): add bootstrap admin configuration via ADMIN_EMAIL 
Introduce ADMIN_EMAIL and SHOW_ADMIN_DETAILS options to bootstrap the first
administrator account on fresh installations. This ensures at least one admin
exists without manual database intervention.

Conversation: https://chatgpt.com/share/68d18e02-d6b8-800f-aaab-920c61b9284a
 2025-09-22 21:41:32 +02:00
Kevin Veen-Birkenbach
93d165fa4c Solved CSP issue 2025-09-22 21:22:35 +02:00
Kevin Veen-Birkenbach
08720a43c1 feat(web-app-openwebui): enable OIDC role-based admin mapping 
Activate ENABLE_OAUTH_ROLE_MANAGEMENT and configure OAUTH_ROLES_CLAIM from
RBAC.GROUP.CLAIM. Define OAUTH_ADMIN_ROLES dynamically based on RBAC group
and application administrator naming convention.

Conversation: https://chatgpt.com/share/68d18e02-d6b8-800f-aaab-920c61b9284a
 2025-09-22 20:27:01 +02:00
Kevin Veen-Birkenbach
1baed62078 Removed ollama dependendy because it's managed via Ansible and not docker compose dependency 2025-09-22 20:22:54 +02:00
Kevin Veen-Birkenbach
963e1aea21 Removed ollama from openwebui 2025-09-22 20:15:33 +02:00
Kevin Veen-Birkenbach
002f45d1df Added LDAP draft for Open WebUI - Deactivated just PoC, because OIDC is anyhow prefered 2025-09-22 20:02:36 +02:00
Kevin Veen-Birkenbach
70d395ed15 feat(web-app-openwebui): add OIDC support via env.j2 with feature flag 
Enables OIDC login by adding feature flag (features.oidc), rendering OIDC-related
environment variables, and introducing OPENWEBUI_OIDC_ENABLED.

Conversation: https://chatgpt.com/share/68d18e02-d6b8-800f-aaab-920c61b9284a
 2025-09-22 19:57:55 +02:00
Kevin Veen-Birkenbach
588cd1959f Added local_ai configuration feature 2025-09-22 18:56:38 +02:00
Kevin Veen-Birkenbach
5d1210d651 feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack 
• Add svc-ai category under roles and load it in constructor stage

• Create new 'svc-ai-ollama' role (vars, tasks, compose, meta, README) and dedicated network

• Refactor former AI stack into separate app roles: web-app-flowise and web-app-openwebui

• Add web-app-minio role; adjust config (no central DB), meta (fa-database, run_after), compose networks include, volume key

• Provide user-focused READMEs for Flowise, OpenWebUI, MinIO, Ollama

• Networks: add subnets for web-app-openwebui, web-app-flowise, web-app-minio; rename web-app-ai → svc-ai-ollama

• Ports: rename ai_* keys to web-app-openwebui / web-app-flowise; keep minio_api/minio_console

• Add group_vars/all/17_ai.yml (OLLAMA_BASE_LOCAL_URL, OLLAMA_LOCAL_ENABLED)

• Replace hardcoded include paths with path_join in multiple roles (svc-db-postgres, sys-service, sys-stk-front-proxy, sys-stk-full-stateful, sys-svc-webserver, web-svc-cdn, web-app-keycloak)

• Remove obsolete web-app-ai templates/vars/env; split Flowise into its own role

• Minor config cleanups (CSP flags to {}, central_database=false)

https://chatgpt.com/share/68d15cb8-cf18-800f-b853-78962f751f81
 2025-09-22 18:40:20 +02:00