From 29ca755e068a570216842cfa2995b88bc45a5502 Mon Sep 17 00:00:00 2001
From: Harald Hoyer <harald@hoyer.xyz>
Date: Fri, 6 Dec 2024 08:56:37 +0100
Subject: [PATCH] feat: add OpenWebUI service configuration

Introduce a new NixOS configuration for the OpenWebUI service, enabling it by default on port 8080. The setup includes environment settings to disable telemetry and authentication, and it adds the openwebui.nix to the system modules.
---
 systems/x86_64-linux/sgx/default.nix   |  1 +
 systems/x86_64-linux/sgx/openwebui.nix | 16 ++++++++++++++++
 2 files changed, 17 insertions(+)
 create mode 100644 systems/x86_64-linux/sgx/openwebui.nix

diff --git a/systems/x86_64-linux/sgx/default.nix b/systems/x86_64-linux/sgx/default.nix
index 6873e12..a49666d 100644
--- a/systems/x86_64-linux/sgx/default.nix
+++ b/systems/x86_64-linux/sgx/default.nix
@@ -10,6 +10,7 @@
     ./fileserver.nix
     ./backup.nix
     ./network.nix
+    ./openwebui.nix
   ];
 
   sops.secrets.pccs.sopsFile = ../../../.secrets/sgx/pccs.yaml;
diff --git a/systems/x86_64-linux/sgx/openwebui.nix b/systems/x86_64-linux/sgx/openwebui.nix
new file mode 100644
index 0000000..61f90ec
--- /dev/null
+++ b/systems/x86_64-linux/sgx/openwebui.nix
@@ -0,0 +1,16 @@
+{ ... }:
+{
+  services.open-webui = {
+    enable = true;
+    port = 8080;
+    host = "0.0.0.0";
+    enviroment = {
+      ANONYMIZED_TELEMETRY = "False";
+      DO_NOT_TRACK = "True";
+      SCARF_NO_ANALYTICS = "True";
+      OLLAMA_API_BASE_URL = "http://m4:11434";
+      # Disable authentication
+      WEBUI_AUTH = "False";
+    };
+  };
+}