fullnameOverride: open-webui

replicaCount: 1
strategy:
  type: Recreate
workload:
  kind: Deployment

image:
  # The newest upstream chart currently trails the already-running image.
  # Remove this tag override when a chart includes Open WebUI 0.12.3 or newer.
  tag: v0.12.3

ollama:
  enabled: false
ollamaUrlsFromExtraEnv: true
pipelines:
  enabled: false
tika:
  enabled: false
terminals:
  enabled: false
websocket:
  enabled: true
  manager: ""
  redis:
    enabled: false

enableOpenaiApi: false

sso:
  enabled: true
  enableSignup: true
  mergeAccountsByEmail: false
  oidc:
    enabled: true
    clientExistingSecret: open-webui-secrets
    clientIdExistingSecretKey: OAUTH_CLIENT_ID
    clientExistingSecretKey: OAUTH_CLIENT_SECRET
    providerUrl: https://auth.brunner.ninja/application/o/ollama-chat/.well-known/openid-configuration
    providerName: brunner.ninja Auth
    scopes: openid email profile

service:
  type: ClusterIP
  port: 80
  containerPort: 8080

ingress:
  enabled: false

persistence:
  enabled: true
  existingClaim: open-webui-data

resources:
  requests:
    cpu: 250m
    memory: 1Gi
  limits:
    cpu: "2"
    memory: 4Gi

startupProbe:
  httpGet:
    path: /health
    port: http
  periodSeconds: 10
  timeoutSeconds: 5
  failureThreshold: 60

readinessProbe:
  httpGet:
    path: /health/db
    port: http
  periodSeconds: 10
  timeoutSeconds: 5
  failureThreshold: 6

livenessProbe:
  httpGet:
    path: /health
    port: http
  periodSeconds: 30
  timeoutSeconds: 5
  failureThreshold: 3

containerSecurityContext:
  allowPrivilegeEscalation: false
  capabilities:
    drop:
      - ALL
  seccompProfile:
    type: RuntimeDefault

extraEnvVars:
  - name: WEBUI_SECRET_KEY
    valueFrom:
      secretKeyRef:
        name: open-webui-secrets
        key: WEBUI_SECRET_KEY
  - name: WEBUI_NAME
    value: brunner.ninja Chat
  - name: WEBUI_URL
    value: https://chat.brunner.ninja
  - name: DEFAULT_MODEL_METADATA
    value: '{"capabilities":{"builtin_tools":true,"web_search":true},"defaultFeatureIds":["web_search"]}'
  - name: DEFAULT_MODEL_PARAMS
    value: '{"function_calling":"native"}'
  - name: CORS_ALLOW_ORIGIN
    value: https://chat.brunner.ninja
  - name: OLLAMA_BASE_URL
    value: http://ollama:11434
  - name: BYPASS_MODEL_ACCESS_CONTROL
    value: "True"
  - name: RAG_EMBEDDING_ENGINE
    value: ollama
  - name: RAG_EMBEDDING_MODEL
    value: qwen3-embedding:0.6b
  - name: RAG_EMBEDDING_BATCH_SIZE
    value: "8"
  - name: RAG_EMBEDDING_CONCURRENT_REQUESTS
    value: "2"
  - name: RAG_EMBEDDING_CONTENT_PREFIX
    value: "search_document: "
  - name: RAG_EMBEDDING_QUERY_PREFIX
    value: "search_query: "
  - name: RAG_FILE_MAX_SIZE
    value: "100"
  - name: RAG_FILE_MAX_COUNT
    value: "20"
  - name: ENABLE_KB_EXEC
    value: "True"
  - name: ENABLE_WEB_SEARCH
    value: "True"
  - name: WEB_SEARCH_ENGINE
    value: duckduckgo
  - name: WEB_SEARCH_RESULT_COUNT
    value: "3"
  - name: WEB_LOADER_CONCURRENT_REQUESTS
    value: "3"
  - name: WEB_FETCH_MAX_CONTENT_LENGTH
    value: "30000"
  - name: ENABLE_TITLE_GENERATION
    value: "False"
  - name: ENABLE_TAGS_GENERATION
    value: "False"
  - name: ENABLE_FOLLOW_UP_GENERATION
    value: "False"
  - name: ENABLE_LOGIN_FORM
    value: "False"
  - name: ENABLE_SIGNUP
    value: "False"
  - name: DEFAULT_USER_ROLE
    value: user
  - name: OPENID_REDIRECT_URI
    value: https://chat.brunner.ninja/oauth/oidc/callback
  - name: SCARF_NO_ANALYTICS
    value: "true"
  - name: DO_NOT_TRACK
    value: "true"
  - name: ANONYMIZED_TELEMETRY
    value: "false"