open-webui:
  ollama:
    enabled: false

  ollamaUrls: []

  pipelines:
    enabled: true
    ingress:
      enabled: false
    persistence:
      enabled: true
      storageClass: ceph-block
      size: 5Gi
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
      limits:
        memory: 1Gi
    extraEnvVars:
      - name: PIPELINES_API_KEY
        value: 0p3n-w3bu!
      - name: PIPELINES_URLS
        value: ""

  websocket:
    enabled: true
    manager: redis
    redis:
      enabled: true
      resources:
        requests:
          cpu: 25m
          memory: 64Mi
        limits:
          memory: 256Mi

  replicaCount: 1

  resources:
    requests:
      cpu: 100m
      memory: 512Mi
    limits:
      memory: 2Gi

  service:
    type: ClusterIP

  route:
    enabled: true
    hostnames:
      - openwebui.noxxos.nl
    parentRefs:
      - name: traefik-gateway
        namespace: traefik
        sectionName: websecure

  persistence:
    enabled: true
    storageClass: ceph-block
    size: 20Gi

  enableOpenaiApi: true
  openaiBaseApiUrls:
    - http://framework-llm:8080/v1
  openaiApiKeys:
    - 0p3n-w3bu!
    - not-needed

  extraEnvVars:
    - name: WEBUI_URL
      value: https://openwebui.noxxos.nl
    - name: CORS_ALLOW_ORIGIN
      value: https://openwebui.noxxos.nl
    - name: WEBUI_SESSION_COOKIE_SECURE
      value: "true"
    - name: WEBUI_AUTH_COOKIE_SECURE
      value: "true"
    - name: WEBUI_SESSION_COOKIE_SAME_SITE
      value: lax
    - name: WEBUI_AUTH_COOKIE_SAME_SITE
      value: lax

  sso:
    enabled: true
    enableSignup: true
    oidc:
      enabled: true
      providerName: Authentik
      providerUrl: https://sso.noxxos.nl/application/o/open-webui/.well-known/openid-configuration
      clientExistingSecret: open-webui-oidc
      clientIdExistingSecretKey: client-id
      clientExistingSecretKey: client-secret