services:
  # Ollama runs once, shared across ololo.dev / plum.ololo.dev / this chat.
  # It lives on the dev host behind Traefik at ollama.ololo.dev (IP allow-list),
  # so Open WebUI talks to it over HTTPS instead of a co-located container.
  open-webui:
    build:
      context: .
      dockerfile: Dockerfile
    image: ghcr.io/open-webui/open-webui:${WEBUI_DOCKER_TAG-main}
    container_name: open-webui
    volumes:
      - open-webui:/app/backend/data
    ports:
      - ${OPEN_WEBUI_PORT-3000}
    environment:
      - 'OLLAMA_BASE_URL=${OLLAMA_BASE_URL-https://ollama.ololo.dev}'
      - 'WEBUI_SECRET_KEY=${WEBUI_SECRET_KEY}'
    extra_hosts:
      - host.docker.internal:host-gateway
    restart: unless-stopped

volumes:
  open-webui: {}