Open WebUI Architecture

Compose 🐳

flowchart LR
    subgraph role [web-app-openwebui]
        svc_openwebui["openwebui<br>ghcr.io/open-webui/open-webui:0.11.0<br>http 8080"]
    end

Swarm 🐝

flowchart LR
    svc_openwebui["openwebui"]
    svc_openwebui --> rep_openwebui["replicas: from the host group"]
    svc_openwebui --> plc_openwebui["node.role == manager"]:::pinned
    classDef pinned fill:#fef7e0,stroke:#b06000,color:#3d2600;

Volumes

flowchart LR
    vol_openwebui_data["ai_openwebui_data"]
    vol_openwebui_data -->|"role is manager-pinned"| local_openwebui_data["node-local on the manager"]:::local
    classDef shared fill:#e6f4ea,stroke:#137333,color:#0b2e13;
    classDef local fill:#fef7e0,stroke:#b06000,color:#3d2600;

Condition	Effect
swarm, storage.backend: nfs, no nfs: false, role not pinned	shared over NFS
any one of those missing	node-local

All four conditions must hold, so pinning a role takes every one of its volumes node-local. Only the role’s primary entry counts as pinned here: a placement on any other service pins that service alone and leaves the backing of every volume unchanged. The chain is drawn rather than its result, because that coupling is what makes a placement change move data without saying so.

Dependencies

flowchart LR
    subgraph deps [Dependencies]
        dep_svc_ai_agent_broker["svc-ai-agent-broker 🐳🐝"]
        dep_svc_ai_litellm["svc-ai-litellm 🐳🐝"]
        dep_svc_bkp_volume_2_local["svc-bkp-volume-2-local 💻"]
        dep_svc_db_openldap["svc-db-openldap 🐳🐝"]
        dep_svc_db_qdrant["svc-db-qdrant 🐳🐝"]
        dep_svc_net_tor["svc-net-tor 🐳🐝"]
        dep_web_app_dashboard["web-app-dashboard 🐳🐝"]
        dep_web_app_docs["web-app-docs 🐳🐝"]
        dep_web_app_keycloak["web-app-keycloak 🐳🐝"]
        dep_web_app_matomo["web-app-matomo 🐳🐝"]
        dep_web_app_prometheus["web-app-prometheus 🐳🐝"]
        dep_web_app_stalwart["web-app-stalwart 🐳🐝"]
        dep_web_svc_design["web-svc-design 💻"]
        dep_web_svc_logout["web-svc-logout 🐳🐝"]
        dep_web_svc_seaweedfs["web-svc-seaweedfs 🐳🐝"]
    end
    subgraph role [web-app-openwebui 🐳🐝]
        svc_sso["sso"]
        svc_ldap["ldap"]
        svc_logout["logout"]
        svc_dashboard["dashboard"]
        svc_matomo["matomo"]
        svc_openwebui["openwebui"]
        svc_redis["redis"]
        svc_minio["minio ❌"]
        svc_seaweedfs["seaweedfs"]
        svc_design["design"]
        svc_javascript["javascript"]
        svc_litellm["litellm"]
        svc_agent_broker["agent-broker"]
        svc_qdrant["qdrant"]
        svc_tika["tika ❌"]
        svc_searxng["searxng ❌"]
        svc_jupyter["jupyter ❌"]
        svc_email["email"]
        svc_prometheus["prometheus"]
        svc_tor["tor"]
        svc_container_backup["container_backup"]
        svc_docs["docs"]
    end
    subgraph dependents [Dependents]
        dpt_svc_db_qdrant["svc-db-qdrant 🐳🐝"]
        dpt_web_app_baserow["web-app-baserow 🐳🐝"]
        dpt_web_app_checkmk["web-app-checkmk 🐳🐝"]
        dpt_web_app_fider["web-app-fider 🐳🐝"]
        dpt_web_app_gitea["web-app-gitea 🐳🐝"]
        dpt_web_app_gitlab["web-app-gitlab 🐳🐝"]
        dpt_web_app_homeassistant["web-app-homeassistant 🐳🐝"]
        dpt_web_app_jellyfin["web-app-jellyfin 🐳🐝"]
        dpt_web_app_jenkins["web-app-jenkins 🐳🐝"]
        dpt_web_app_listmonk["web-app-listmonk 🐳🐝"]
        dpt_web_app_mattermost["web-app-mattermost 🐳🐝"]
        dpt_web_app_moodle["web-app-moodle 🐳🐝"]
        dpt_web_app_n8n["web-app-n8n 🐳🐝"]
        dpt_web_app_nextcloud["web-app-nextcloud 🐳🐝"]
        dpt_web_app_pretix["web-app-pretix 🐳🐝"]
        dpt_web_app_prometheus["web-app-prometheus 🐳🐝"]
        dpt_web_app_snipe_it["web-app-snipe-it 🐳🐝"]
        dpt_web_app_zammad["web-app-zammad 🐳🐝"]
        dpt_web_svc_libretranslate["web-svc-libretranslate 🐳🐝"]
    end
    dep_svc_ai_agent_broker -. "0..1" .-> svc_agent_broker
    dep_svc_ai_litellm -. "0..1" .-> svc_litellm
    dep_svc_bkp_volume_2_local -. "0..1" .-> svc_container_backup
    dep_svc_db_openldap -. "0..1" .-> svc_ldap
    dep_svc_db_qdrant -. "0..1" .-> svc_qdrant
    dep_svc_net_tor -. "0..1" .-> svc_tor
    dep_web_app_dashboard -. "0..1" .-> svc_dashboard
    dep_web_app_docs -. "0..1" .-> svc_docs
    dep_web_app_keycloak -. "0..1" .-> svc_sso
    dep_web_app_matomo -. "0..1" .-> svc_matomo
    dep_web_app_prometheus -. "0..1" .-> svc_prometheus
    dep_web_app_stalwart -. "0..1" .-> svc_email
    dep_web_svc_design -. "0..1" .-> svc_design
    dep_web_svc_logout -. "0..1" .-> svc_logout
    dep_web_svc_seaweedfs -. "0..1" .-> svc_seaweedfs
    svc_sso -. "0..1" .-> dpt_svc_db_qdrant
    svc_sso -. "0..1" .-> dpt_web_app_baserow
    svc_sso -. "0..1" .-> dpt_web_app_checkmk
    svc_sso -. "0..1" .-> dpt_web_app_fider
    svc_sso -. "0..1" .-> dpt_web_app_gitea
    svc_sso -. "0..1" .-> dpt_web_app_gitlab
    svc_sso -. "0..1" .-> dpt_web_app_homeassistant
    svc_sso -. "0..1" .-> dpt_web_app_jellyfin
    svc_sso -. "0..1" .-> dpt_web_app_jenkins
    svc_sso -. "0..1" .-> dpt_web_app_listmonk
    svc_sso -. "0..1" .-> dpt_web_app_mattermost
    svc_sso -. "0..1" .-> dpt_web_app_moodle
    svc_sso -. "0..1" .-> dpt_web_app_n8n
    svc_sso -. "0..1" .-> dpt_web_app_nextcloud
    svc_sso -. "0..1" .-> dpt_web_app_pretix
    svc_sso -. "0..1" .-> dpt_web_app_prometheus
    svc_sso -. "0..1" .-> dpt_web_app_snipe_it
    svc_sso -. "0..1" .-> dpt_web_app_zammad
    svc_sso -. "0..1" .-> dpt_web_svc_libretranslate

Symbol	Meaning
1:1 solid	fixed relationship
0..1 dashed	conditional, enabled only in matching deployments
0..0 red	declared but turned off in this role
💻	deploys to the host
🐳	deploys under compose
🐝	deploys under swarm
❌	service explicitly turned off
⚙️	Ansible role dependency from meta/main.yml

Every dependency and dependent is listed; the graph is not truncated.