# OpenWebUI

OpenWebUI is exposed at `https://openwebui.noxxos.nl` and connects to the
OpenAI-compatible llama.cpp endpoint at `http://framework-llm:8080/v1`.

## Authentik

Create an Authentik OAuth2/OIDC provider and application with slug
`open-webui`.

Allowed redirect URI:

```text
https://openwebui.noxxos.nl/oauth/oidc/callback
```

Create the OIDC client secret in Kubernetes before syncing the app:

```bash
kubectl create namespace open-webui
kubectl -n open-webui create secret generic open-webui-oidc \
  --from-literal=client-id='<authentik-client-id>' \
  --from-literal=client-secret='<authentik-client-secret>'
```