setup openwebui

hosts/freun-dev/secrets.nix

@@ -33,6 +33,8 @@
           "gitea"
           "gitea-actions-runner"
           "searx"
+          "open-webui"
+          "open-terminal-api-key"
         ]
     )
     // {

hosts/freun-dev/services.nix

@@ -19,6 +19,7 @@ let
   secrets = config.age.secrets;
 in
 {
+  nixpkgs.config.allowUnfree = true;
   imports = [
     ./glance.nix
   ];
@@ -425,11 +426,35 @@ in
       };
     };
 
+    open-webui = {
+      enable = true;
+      port = 3500;
+      environmentFile = secrets.open-webui.path;
+      environment = {
+        ENABLE_WEB_SEARCH = "True";
+        ENABLE_OLLAMA_API = "False";
+      };
+      subdomain = "owu";
+    };
+
     webserver = {
       acme.dnsChallenge = true;
       tailscaleAuth.expectedTailnet = "tempel-vibes.ts.net";
     };
   };
 
+  virtualisation.oci-containers.containers.open-terminal = {
+    image = "ghcr.io/open-webui/open-terminal:latest";
+    autoStart = true;
+    ports = [ "127.0.0.1:3700:8000" ];
+    environmentFiles = [ config.age.secrets."open-terminal-api-key".path ];
+    environment = {
+      OPEN_TERMINAL_MULTI_USER = "true";
+    };
+    volumes = [
+      "open-terminal-data:/home/user"
+    ];
+  };
+
   virtualisation.docker.autoPrune.enable = true;
 }