veda/apps/open-webui

OpenWebUI

OpenWebUI is exposed at https://openwebui.noxxos.nl and connects to the OpenAI-compatible llama.cpp endpoint at http://framework-llm:8080/v1.

Authentik

Create an Authentik OAuth2/OIDC provider and application with slug open-webui.

Allowed redirect URI:

https://openwebui.noxxos.nl/oauth/oidc/callback

Create the OIDC client secret in Kubernetes before syncing the app:

kubectl create namespace open-webui
kubectl -n open-webui create secret generic open-webui-oidc \
  --from-literal=client-id='<authentik-client-id>' \
  --from-literal=client-secret='<authentik-client-secret>'