Chapter 13 The Server Route

Replaces the file from Be Your Own Cloud, Chapter 16.

services:
  ollama:
    image: ollama/ollama:0.35.0
    container_name: ollama
    restart: unless-stopped
    environment:
      - OLLAMA_NO_CLOUD=1   # local models only
    volumes:
      - ./ollama-data:/root/.ollama
    ports:
      - '127.0.0.1:11434:11434'

  open-webui:
    image: ghcr.io/open-webui/open-webui:v0.11.4
    container_name: open-webui
    restart: unless-stopped
    depends_on:
      - ollama
    environment:
      - OLLAMA_BASE_URL=http://ollama:11434
      - WEBUI_SECRET_KEY=${WEBUI_SECRET_KEY}
      - ENABLE_SIGNUP=false
      - OFFLINE_MODE=true
      - ENABLE_OPENAI_API=false
      - ENABLE_COMMUNITY_SHARING=false
      - ENABLE_ADMIN_CHAT_ACCESS=false
      - ENABLE_ADMIN_EXPORT=false
      - RAG_EMBEDDING_ENGINE=ollama   # document search, Chapter 15
      - RAG_EMBEDDING_MODEL=nomic-embed-text
      - ENABLE_TOOL_PERMISSIONS=true   # approvals, Chapter 18
    volumes:
      - ./webui-data:/app/backend/data
    networks:
      - default
      - proxy   # Chapter 8's shared network -- no host port published

networks:
  proxy:
    external: true

cd /opt/stacks/ollama
echo "WEBUI_SECRET_KEY=$(openssl rand -hex 32)" > .env
chmod 600 .env

docker compose up -d

docker exec -it ollama ollama pull qwen3:8b
docker exec -it ollama ollama pull nomic-embed-text