Open WebUI
LLM web UI connecting to Ollama or OpenAI-compatible APIs.
Category AIPlatforms DockerPrivileges Needs Docker accessChinese docs Many Chinese tutorialsStars ~153K
One-click install command
docker run -d -p 3000:8080 --add-host=host.docker.internal:host-gateway -v open-webui:/app/backend/data --name open-webui --restart always ghcr.io/open-webui/open-webui:main
Notes
Pin main to a version in production; volumes and backend address must be explicit.
Agent Prompt
Copy the block below and hand it to an AI Agent — replace [bracketed] parts with your own values.
Deploy Open WebUI (LLM web UI connecting to Ollama or OpenAI-compatible APIs) in my environment. Before starting: 1. Run read-only checks first: OS version, CPU architecture, available disk/RAM, port usage, Docker or sudo access — and report the findings. 2. Use the project source https://github.com/open-webui/open-webui as ground truth; verify the current stable version, prerequisites and compatibility. 3. Present an execution plan, the files/services/firewall rules to be changed, and a complete rollback plan; wait for my confirmation before executing. 4. Download remote scripts locally for review first; pin tag / image digest / commit; don't rely on latest or master. 5. Never put secrets (passwords, API keys, tokens, subscription URLs) in the prompt, shell history or logs — use 600-permission env files, Docker secrets or _FILE variables instead. Verified starting command (don't run blindly — download/expand and review first): docker run -d -p 3000:8080 --add-host=host.docker.internal:host-gateway -v open-webui:/app/backend/data --name open-webui --restart always ghcr.io/open-webui/open-webui:main Project-specific notes: - Pin main to a version in production; volumes and backend address must be explicit. - Permission requirement: Needs Docker access. Don't escalate privileges; don't run containers as root unnecessarily. After execution, verify and report back: - Installed version, service status and health check results; - Open ports, listen addresses, firewall changes; - Config files, data volumes, log and backup locations; - Access method (for sensitive credentials, only state where they're stored — never print them); - Restart policy, plus verified uninstall / rollback commands.