version: '3'
services:
  openwebui:
    container_name: Openweb-UI
    image: ghcr.io/open-webui/open-webui:main
    ports:
      - "11674:8080"
    environment:
      - OPENAI_API_KEY=${OPEN_API_KEY}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
      - ENABLE_OAUTH_SIGNUP=true
      - OAUTH_MERGE_ACCOUNTS_BY_EMAIL=true
      - OAUTH_PROVIDER_NAME=Authentik
      - OPENID_PROVIDER_URL=${OPENID_PROVIDER_URL}
      - OAUTH_CLIENT_ID=${OAUTH_CLIENT_ID}
      - OAUTH_CLIENT_SECRET=${OAUTH_CLIENT_SECRET}
      - OAUTH_SCOPES=openid email profile
      - OPENID_REDIRECT_URI=${OPENID_REDIRECT_URI}
      - ENABLE_OAUTH_GROUP_MANAGEMENT=true
    volumes:
      - open-webui:/app/backend/data
    restart: unless-stopped
volumes:
  open-webui: