main.yml

---
application_id: "web-app-openwebui"
entity_name: "{{ application_id | entity_name }}"

OPENWEBUI_URL: "{{ lookup('tls', application_id, 'url.base') }}"
OPENWEBUI_CONTAINER: "{{ lookup('config', application_id, 'services.openwebui.name') }}"
OPENWEBUI_OFFLINE_MODE: "{{ lookup('config', application_id, 'services.openwebui.offline_mode') }}"
OPENWEBUI_HF_HUB_OFFLINE: "{{ lookup('config', application_id, 'services.openwebui.hf_hub_offline') }}"
OPENWEBUI_ENABLE_API_KEYS: "{{ lookup('config', application_id, 'services.openwebui.enable_api_keys') }}"
OPENWEBUI_LDAP_ENABLED: "{{ lookup('config', application_id, 'services.ldap.enabled') }}"
OPENWEBUI_LITELLM_ENABLED: "{{ lookup('config', application_id, 'services.litellm.enabled') }}"
OPENWEBUI_LITELLM_API_KEY: "{{ lookup('config', application_id, 'secrets.credentials.litellm_api_key') }}"
OPENWEBUI_COMFYUI_URL: "{{ lookup('config', application_id, 'services.openwebui.comfyui_url') }}"
OPENWEBUI_COMFYUI_API_KEY: "{{ lookup('config', application_id, 'secrets.credentials.comfyui_api_key') }}"
OPENWEBUI_IMAGE_MODEL: "{{ lookup('config', application_id, 'services.openwebui.image_model') }}"
OPENWEBUI_EMBEDDING_MODEL: "{{ lookup('config', application_id, 'services.openwebui.embedding_model') }}"
OPENWEBUI_STT_MODEL: "{{ lookup('config', application_id, 'services.openwebui.speech_to_text_model') }}"
OPENWEBUI_TTS_MODEL: "{{ lookup('config', application_id, 'services.openwebui.text_to_speech_model') }}"
OPENWEBUI_JUPYTER_ENABLED: "{{ lookup('config', application_id, 'services.jupyter.enabled') }}"
OPENWEBUI_JUPYTER_URL: "{{ lookup('container_url', 'svc-ai-jupyter', 'jupyter') }}"
OPENWEBUI_JUPYTER_TOKEN: "{{ lookup('config', 'svc-ai-jupyter', 'secrets.credentials.auth_token') }}"
OPENWEBUI_SEARXNG_ENABLED: "{{ lookup('config', application_id, 'services.searxng.enabled') }}"
OPENWEBUI_SEARXNG_URL: "{{ lookup('container_url', 'svc-ai-searxng', 'searxng') }}/search?q=<query>"
OPENWEBUI_TIKA_ENABLED: "{{ lookup('config', application_id, 'services.tika.enabled') }}"
OPENWEBUI_TIKA_URL: "{{ lookup('container_url', 'svc-ai-tika', 'tika') }}"
OPENWEBUI_QDRANT_ENABLED: "{{ lookup('config', application_id, 'services.qdrant.enabled') }}"
OPENWEBUI_QDRANT_URL: "{{ lookup('engine', 'qdrant', application_id, 'url') }}"
OPENWEBUI_QDRANT_API_KEY: "{{ lookup('engine', 'qdrant', application_id, 'password') }}"
OPENWEBUI_QDRANT_COLLECTION_PREFIX: "{{ lookup('engine', 'qdrant', application_id, 'prefix') }}"
OPENWEBUI_AGENT_BROKER_ENABLED: "{{ lookup('config', application_id, 'services.agent-broker.enabled') }}"
OPENWEBUI_AGENT_BROKER_URL: "{{ lookup('container_url', 'svc-ai-agent-broker', 'agent-broker') }}/v1"
OPENWEBUI_AGENT_BROKER_KEY: "{{ lookup('config', 'svc-ai-agent-broker', 'secrets.credentials.api_key') }}"
OPENWEBUI_AGENT_BROKER_TIMEOUT: "{{ lookup('config', 'svc-ai-agent-broker', 'services.agent-broker.request_timeout') }}"
OPENWEBUI_AGENT_MODELS:
  hermes: "/{{ lookup('rbac_group_path', application_id='web-app-hermes', role='agent-user') }}"
  openclaw: "/{{ lookup('rbac_group_path', application_id='web-app-openclaw', role='agent-user') }}"
OPENWEBUI_OPENAI_CONNECTIONS: >-
  {{ ([{'url': LITELLM_BASE_LOCAL_URL ~ '/v1', 'key': OPENWEBUI_LITELLM_API_KEY}] if (OPENWEBUI_LITELLM_ENABLED | bool) else [])
     + ([{'url': OPENWEBUI_AGENT_BROKER_URL, 'key': OPENWEBUI_AGENT_BROKER_KEY}] if (OPENWEBUI_AGENT_BROKER_ENABLED | bool) else []) }}
OPENWEBUI_SECRET_KEY: "{{ lookup('config', application_id, 'secrets.credentials.webui_secret_key') }}"
OPENWEBUI_MCP_SERVERS: "{{ MCP_DISCOVERED_SERVERS if (lookup('config', application_id, 'mcp.enabled') | bool) else [] }}"
OPENWEBUI_MCP_GROUP_OWNER: "openwebui-mcp-groups"
OPENWEBUI_MCP_GROUP_IDS: "{{ (lookup('users', OPENWEBUI_MCP_GROUP_OWNER, {}) | default({}, true)).get('tokens', {}) }}"
OPENWEBUI_MCP_MEMBERS: "{{ lookup('users') | mcp_group_members(OPENWEBUI_MCP_SERVERS, 'mcp-reader') }}"
OPENWEBUI_INTERNAL_HTTP_PORT: "{{ lookup('config', application_id, 'services.openwebui.ports.internal.http') }}"
OPENWEBUI_API_BOT_USER: "{{ lookup('users', 'openwebui-api-bot') }}"
OPENWEBUI_ADMIN_USER: "{{ lookup('users', 'platform_administrator') }}"
OPENWEBUI_DESIGN_ENABLED: "{{ lookup('config', application_id, 'services.design.enabled') }}"
OPENWEBUI_CUSTOM_CSS_HOST: "{{ [lookup('container', application_id, 'directories.volumes'), 'custom.css'] | path_join }}"

OPENWEBUI_OIDC_ENABLED: "{{ lookup('config', application_id, 'services.sso.enabled') }}"
OPENWEBUI_OIDC_REDIRECT_URL: "{{ [OPENWEBUI_URL,'/oauth/oidc/callback'] | url_join }}"
OPENWEBUI_OIDC_ADMIN_GROUP: "{{ lookup('rbac_group_path', application_id=application_id, role='administrator') }}"