Consolidate Tatlock API into new agents stack and add Webber LLM agent orchestration service. Webber provides autonomous agent execution with tool use, authenticating via Tatlock API. Changes: - Add stacks/agents.yml with Tatlock (port 8000) and Webber (port 8086) - Remove stacks/tatlock.yml (merged into agents stack) - Document Webber service in CONTAINERS.md (Redis DB 9) - Add full Tatlock API documentation to CONTAINERS.md Config updates (pre-existing): - core-api: Enable OIDC, add host stats access, simplify model config - gitea: Migrate from dedicated DB to postgres-shared - media: Remove GPU reservation from Jellyfin Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
102 lines
2.6 KiB
YAML
102 lines
2.6 KiB
YAML
version: '3.8'
|
|
|
|
# Core API - OpenAPI-compatible functions and AI orchestration for Open WebUI
|
|
# Purpose: Provides OpenAI-compatible API (/v1/chat/completions) and tool functions (web scraping)
|
|
# Port: 8083 (HTTP API)
|
|
# Network: docker-dataplane (shared infrastructure network)
|
|
#
|
|
# Container image built from: git.schweitz.internal/jpmschweitzer/core-api (internal registry)
|
|
|
|
services:
|
|
core-api:
|
|
image: git.schweitz.internal/jpmschweitzer/core-api:latest
|
|
container_name: core-api
|
|
restart: unless-stopped
|
|
|
|
ports:
|
|
- "8083:8083"
|
|
|
|
environment:
|
|
# Application
|
|
- APP_NAME=Core API
|
|
- DEBUG=false
|
|
- OIDC_ENABLED=true
|
|
|
|
# Server
|
|
- HOST=0.0.0.0
|
|
- PORT=8083
|
|
|
|
# Logging
|
|
- LOG_LEVEL=INFO
|
|
|
|
# Portainer API
|
|
- PORTAINER_URL=http://192.168.86.149:8001
|
|
- PORTAINER_API_KEY=${PORTAINER_API_KEY}
|
|
|
|
# Nginx Proxy Manager API
|
|
- NPM_URL=http://192.168.86.149:81
|
|
- NPM_EMAIL=${NPM_EMAIL}
|
|
- NPM_PASSWORD=${NPM_PASSWORD}
|
|
|
|
# Postgres Shared Database API
|
|
- POSTGRES_HOST=192.168.86.149:5432
|
|
- POSTGRES_USER=core_api
|
|
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
|
|
|
# Authentik Configuration
|
|
- AUTHENTIK_URL=https://auth.schweitz.net
|
|
- AUTHENTIK_USERNAME=${AUTHENTIK_USERNAME}
|
|
- AUTHENTIK_PASSWORD=${AUTHENTIK_PASSWORD}
|
|
- AUTHENTIK_CORE_API_TOKEN=${AUTHENTIK_CORE_API_TOKEN}
|
|
|
|
# HOME ASSITANT VARIABLES
|
|
- HOMEASSISTANT_URL=http://home-assistant:8123
|
|
- HOMEASSISTANT_TOKEN=${HOMEASSISTANT_TOKEN}
|
|
|
|
# AI SYSTEM VARIABLES
|
|
- SEARXNG_URL=http://192.168.86.149:8080
|
|
- QDRANT_HOST=192.168.86.149
|
|
- QDRANT_PORT=6333
|
|
|
|
# Python path
|
|
- PYTHONPATH=/app
|
|
|
|
- PSUTIL_PROCFS_PATH=/host/proc
|
|
- HOSTFS_ROOT=/hostfs
|
|
|
|
volumes:
|
|
# Data volumes only - no source code
|
|
- /home/jpmschweitzer/docker-data/core-api/logs:/app/logs
|
|
# Docker socket for direct container access (fallback when Portainer API incomplete)
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
- /proc:/host/proc:ro
|
|
- /sys:/host/sys:ro
|
|
- /:/hostfs:ro
|
|
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
cpus: '2.0'
|
|
memory: 6G
|
|
reservations:
|
|
memory: 1G
|
|
devices:
|
|
- driver: nvidia
|
|
count: all
|
|
capabilities: [gpu]
|
|
|
|
labels:
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:8083/health"]
|
|
interval: 30s
|
|
timeout: 20s
|
|
retries: 3
|
|
start_period: 60s
|
|
|
|
networks:
|
|
docker-dataplane:
|
|
external: true
|
|
name: docker-dataplane
|