kyle/imladris
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

straylight: add open-webui with Ollama and RAG

Browse Source 
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
K. Isom
2026-06-25 11:10:51 -07:00
parent db96bd1ac7
commit 1df8e46bcf
1 changed files with 19 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
hw/straylight/default.nix
View File

@@ -63,8 +63,25 @@
# 443/8443/9443 for mc-proxy) as straylight takes over the core role.
boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 53;
# Open ports: DNS (53), mc-proxy (443/8443/9443), agent (9444), master (9555).
networking.firewall.allowedTCPPorts = [ 53 443 8443 9443 9444 9555 ];
services.open-webui = {
enable = true;
host = "0.0.0.0";
port = 8080;
environment = {
SCARF_NO_ANALYTICS = "True";
DO_NOT_TRACK = "True";
ANONYMIZED_TELEMETRY = "False";
# Point at the local Ollama instance.
OLLAMA_BASE_URL = "http://127.0.0.1:11434";
# Use Ollama for RAG embeddings (pull nomic-embed-text first).
RAG_EMBEDDING_ENGINE = "ollama";
RAG_OLLAMA_BASE_URL = "http://127.0.0.1:11434";
RAG_EMBEDDING_MODEL = "nomic-embed-text:latest";
};
};
# Open ports: DNS (53), mc-proxy (443/8443/9443), agent (9444), master (9555), open-webui (8080).
networking.firewall.allowedTCPPorts = [ 53 443 8080 8443 9443 9444 9555 ];
networking.firewall.allowedUDPPorts = [ 53 ];
# DNS: MCNS for internal zones, public resolvers as fallback.