Added support for private apis
This commit is contained in:
@@ -31,8 +31,7 @@ sshd_max_auth_tries: 10
|
||||
# Firewall ports
|
||||
ufw_enable: true
|
||||
fw_allowed_ports:
|
||||
- { rule: "allow", port: "80", proto: "tcp" }
|
||||
- { rule: "allow", port: "443", proto: "tcp" }
|
||||
- { rule: "allow", port: "8000", proto: "tcp" }
|
||||
- { rule: "allow", port: "22", proto: "tcp" }
|
||||
|
||||
ufw_outgoing_traffic:
|
||||
|
||||
@@ -45,6 +45,7 @@ ufw_outgoing_traffic:
|
||||
- 123 # NTP
|
||||
- 443 # HTTPS
|
||||
- 853 # DNS over TLS
|
||||
- 8000
|
||||
|
||||
ufw_default_forward_policy: "ACCEPT"
|
||||
|
||||
@@ -70,31 +71,8 @@ unattended_reboot_time: "04:30"
|
||||
duo_users: ["*", "!provision"]
|
||||
duo_api_hostname: api-7cda1654.duosecurity.com
|
||||
|
||||
# ai tools
|
||||
ai_home: "/mnt/data/ai"
|
||||
ai_network_name: "ai-network"
|
||||
ai_user: "ai"
|
||||
ai_group: "ai"
|
||||
ai_workloads:
|
||||
- name: ollama
|
||||
build:
|
||||
dockerfile: "{{ lookup('file', 'dockerfiles/Dockerfile.ollama') }}"
|
||||
ports:
|
||||
- 0.0.0.0:11434:11434/tcp
|
||||
volumes:
|
||||
- "{{ ai_home }}/ollama:/home/worker/.ollama:Z"
|
||||
device:
|
||||
- "nvidia.com/gpu=all"
|
||||
- name: open-webui
|
||||
repo:
|
||||
image: ghcr.io/open-webui/open-webui
|
||||
tag: main
|
||||
ports:
|
||||
- 0.0.0.0:8080:8080/tcp
|
||||
volumes:
|
||||
- "{{ ai_home }}/open-webui:/app/backend/data:Z"
|
||||
device:
|
||||
- "nvidia.com/gpu=all"
|
||||
env:
|
||||
OLLAMA_BASE_URL: "http://ollama:11434"
|
||||
|
||||
# open_web_ui settings
|
||||
open_webui_home: "/mnt/data/ai"
|
||||
open_webui_network_name: "ai-network"
|
||||
open_webui_user: "ai"
|
||||
open_webui_group: "ai"
|
||||
|
||||
Reference in New Issue
Block a user