# Open WebUI
ollama:
    enabled: false
pipelines:
    enabled: false
# Single replica is safe with the in-memory websocket manager and the default
# local ChromaDB (SQLite-backed) vector store.
# To scale (replicaCount > 1) later you MUST:
#   1. Enable Redis: websocket.manager: redis + websocket.redis.enabled: true
#   2. Switch VECTOR_DB to an external store (PGVector/Qdrant/Milvus) via
#      extraEnvVars, or run ChromaDB as an HTTP server (CHROMA_HTTP_HOST).
#   3. During updates, scale down to 1 replica first (concurrent migrations
#      corrupt the DB).
# See https://docs.openwebui.com/getting-started/advanced-topics/scaling/
replicaCount: 1
websocket:
    enabled: true
    manager: ""
    redis:
        enabled: false
# LAN-only ingress, no TLS, openwebui.lan resolves via in-cluster CoreDNS
ingress:
    enabled: true
    host: openwebui.lan
    tls: false
# Persistent data (SQLite DB, uploads, RAG docs) on Longhorn
persistence:
    enabled: true
    storageClass: longhorn
    size: 5Gi
sops:
    lastmodified: "2026-08-26T19:28:05Z"
    mac: ENC[AES256_GCM,data:L6Jbt3c7BEPNGyAGDUWnyFfNnhXHfMgcE4hAV+aiZ5GJ0kk2B3H6o+dfvGAaPISkdKHQp1xyZJ9HlmC0aLHU+pSJ6ktnS2iepOrxLqWi1G/9E/vibIGh6ztSU6nxwOfT9tRdn0fpoi3dRf3ly9tnUW8eN2V+1WSNE0XgLR9WkKo=,iv:RwrZPS4Aiq2/2CIYDngcwQOX2d8FKRb/FqNSSeeUQ0w=,tag:KC4wiTUEwf0LfGcj25OAQg==,type:str]
    pgp:
        - created_at: "2026-08-26T19:28:05Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiAQ//Tc5LOYZjqIZKUPLSUNt6tJ+1HOFfzAHx7m1T4OlBK7xa
            AxG3Wes/L7p/84dpHmSlW0kzoJfKurogzGsafzIt1JZF9cn2Yi+ya92keyYZTDiH
            m0xYBZBXcmW3+QTekKywGENcnqmbxXDlRnx4t/K9Rs0b7EQ3ZeWW75hr52+17U0C
            lAGucvenrP4Ul03OjH2waHFe80+2nG6B2xazMqwCK4/qzkOcZ0Ko6U6UmQ4YXold
            Q1Gm+Uy+GX46n5nE2HJwsm3NqbVldYjnQONk1iyGljGIHyewOcN5Lg/j/0q9r15n
            dkUMaroPHHVh2QC9fj2G5Y8cPdW6EXP2YlGWIF7KSloDo1QJiuglWIzFXcXLVSt1
            Vhm/qYiVTlm/UMrJg10DyN3jEaDLGFdOA97PUcmLo8lVQpuB7S27WzXuXELBgtVR
            OxMaVJKDJJz2Qjx4wJOI7cxABoFq1OPqy+JnPxc9TGcBKAG0X0Ez+r29zbpaXkZR
            2ZmlMbdunvLMkuaEgjZfF5x8CX3ER5woD5/p/74rWQIusBlZHo4MCDMlh/hBrVWj
            frMA7bF+XgIrSS10CxtEFIFXQqzGJJqXNbJY4wQ911zihVl5sxG7dvzRF8RhzkPM
            3Hny6APAYw/ZtsP4S37v82FPk302Lv2MJn0VladI2qRm/uXtoQo2y9JDRpByNF7S
            XgFd43oP+qGAYupbEZEv9+ODOi24NmpG6tHmbOfJ/d44402X13ONPL6b9YPcbwmD
            +0PmHSahWzSYWY0tbns10+nrWDm0yHlO+ZYDVl7lr4vdPRE4pxA1iVohfLWCXGU=
            =Mb23
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
    mac_only_encrypted: true
    version: 3.10.2