services:
  ollama:
    image: ${DOCKER_REGISTRY:-}ollama/ollama:rocm
    container_name: ollama
    restart: ${RESTART:-unless-stopped}
    devices:
      - "/dev/kfd"
      - "/dev/dri"
    volumes:
      - models:/root/.ollama
    environment:
      - HSA_OVERRIDE_GFX_VERSION=11.0.0
      - OLLAMA_VULKAN=1 
    ports:
      - "11434:11434"
    dns:
      - "8.8.8.8"
  openwebui:
    image: ${DOCKER_REGISTRY:-}ghcr.io/open-webui/open-webui:main
    ports:
      - "3004:8080"
    volumes:
      - open-webui:/app/backend/data
    environment:
      - OAUTH_CLIENT_ID=wqH7IRf2xH92nTa3jd0pJUuljHxDNFxQa75uS5cK
      - OAUTH_CLIENT_SECRET=pD0ZMob8kkG1Filb23qKdnbNHRi0lnafhN1OQIgbszymTnZuFrINlnkehZhFGWmFjgxfG4RSLxJi7NmCUpofS6BjZdny7nwxwTyzuiK629GkZE0WMhmTzpTjt4QUsSur
      - OAUTH_PROVIDER_NAME=authentik
      - OPENID_PROVIDER_URL=https://auth.sectorq.eu/application/o/openwebui/.well-known/openid-configuration
      - OPENID_REDIRECT_URI=https://openwebui.sectorq.eu/oauth/oidc/callback
      - WEBUI_URL=https://openwebui.sectorq.eu
      # Allows auto-creation of new users using OAuth. Must be paired with ENABLE_LOGIN_FORM=false.
      - ENABLE_OAUTH_SIGNUP=true
      # Disables user/password login form. Required when ENABLE_OAUTH_SIGNUP=true.
      - ENABLE_LOGIN_FORM=false
      - OAUTH_MERGE_ACCOUNTS_BY_EMAIL=true
    restart: ${RESTART:-unless-stopped}
volumes:
  open-webui:
  models: