这里是一些有用的信息和指导,帮助你理解如何安装open-webui以及对接Auth系统。
docker run -d -p 3000:8080 -e OPENAI_API_KEY=your_secret_key -e WEBUI_AUTH=true -e WEBUI_AUTH_TRUSTED_EMAIL_HEADER=X-Forwarded-Email -e WEBUI_AUTH_TRUSTED_NAME_HEADER=X-Forwarded-User -v open-webui:/app/backend/data --name open-webui --restart always ghcr.io/open-webui/open-webui:main
location / {
proxy_pass http://127.0.0.1:3000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
}
location /auth/ {
proxy_pass https://sso.ainx.cc;
proxy_set_header Host sso.ainx.cc;
proxy_set_header open-webui "open-webui.ainx.cc"; # 这个填写你自己的open-webui地址
proxy_ssl_server_name on;
proxy_ssl_verify off; # 临时禁用 SSL 验证以测试(生产环境请删除)
}
location ~* .(css|js|html)$ {
proxy_pass http://127.0.0.1:3000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
expires 24h;
add_header Cache-Control "public, max-age=86400";
}
iframe src="https://open-webui.ainx.cc/[email protected]&username=winter"
a href="https://open-webui.ainx.cc/[email protected]&username=winter"
域名 {
handle /auth/* {
reverse_proxy https://sso.ainx.cc {
header_up Host sso.ainx.cc
header_up open-webui "open-webui.ainx.cc" // 配置成你自己的
}
}
reverse_proxy http://127.0.0.1:3000 {
# 关键:删除后端返回的 X-Frame-Options
header_down -X-Frame-Options
}
# 仅设置允许所有域名嵌入
header Content-Security-Policy "frame-ancestors *"
}