Is Open WebUI HTTPS Capable?

[yuchenxie4645]

Is Open WebUI HTTPS Capable? If not, how do I make it HTTPS capable, if yes, how do I make it HTTPS capable?
I have my own personal domain already attached to Open WebUI but it shows as unsecure, I wanted to know, how do I make it HTTPS.
If this helps, I am using cloudflare for SSL certificate.

[0xThresh]

Open WebUI itself doesn't implement SSL, most people have used another service (Nginx, Apache, AWS ALB, etc.) in front of Open WebUI to implement SSL. The maintainers have said in Discord many times that SSL and load balancing are too opinionated for them to want to implement it in Open WebUI.

[yuchenxie4645]

Can you elaborate on “most people have used another service”. My understanding is that the “another service” will forward it to Open WebUI. If my understanding is correct, is there anyway I can do that?

[skrenes]

Check out https://github.com/nginx-proxy/nginx-proxy

[tedraymond]

Yes it does,

I've used uvicorn in previous tools, noticed WebUI does as well.

In Start.sh

In the last line where there is uvicorn app --host -- port .... '*'

Just add the uvicorn options

--ssl-certfile="/path/to/file.pem" --ssl-keyfile="/path/to/file.key"

Did so today to replace my older gradio app and worked like a charm.

[SurvivaLlama]

I use a cloudflare tunnel for https.

[KelvinCampelo]

Install Nginx: sudo apt install nginx

Create Nginx server block: /etc/nginx/sites-available/openwebui

server {
    listen 80;
    server_name YOURDOMAIN.com;

    location / {
        proxy_pass http://127.0.0.1:4000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

Enable server block: sudo ln -s /etc/nginx/sites-available/openwebui /etc/nginx/sites-enabled/

Test and restart Nginx: sudo nginx -t and sudo systemctl restart nginx

Install Certbot: sudo apt install certbot python3-certbot-nginx

Obtain SSL certificate: sudo certbot --nginx -d YOURDOMAIN.com

Verify SSL: Visit https:// YOURDOMAIN. com

Test renewal: sudo certbot renew --dry-run

[yuchenxie4645]

I really appreciate your help, however, I got it fix using my own way. I bought a domain off of namecheap and transferred it to CloudFlare which provided me a "flexible" SSL certificate which encrypts the client end not the server end. Again, I really appreciate your help :D

[kubikub]

I followed @KelvinCampelo steps but could not connect https openwebui server. I got ERR_SSL_PROTOCOL_ERROR.
My Nginx server block: /etc/nginx/sites-available/openwebui :

                                                          
server {
    listen 80;
    server_name mydomain.duckdns.org;
    return 301 https://$host:10443$request_uri;
}

server {

    listen 10443 ssl; # managed by Certbot
    server_name mydomain.duckdns.org;
    ssl_certificate /etc/letsencrypt/live/mydomain.duckdns.org/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/mydomain.duckdns.org/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

    location / {
        proxy_pass http://127.0.0.1:3000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

}

Did I something wrong ?

[reiebrole30]

I am using a cloudflare domain ,

my setups are all via docker
cloudflared
ollama
open-webui

heck, even the login is via cloudflare authentication

---
version: "3.8"
services:
  ollama:
    volumes:
      - ollama:/root/.ollama
    container_name: ollama
    pull_policy: always
    tty: true
    restart: unless-stopped
    image: ollama/ollama:${OLLAMA_DOCKER_TAG-latest}
  open-webui:
    build:
      context: .
      args:
        OLLAMA_BASE_URL: /ollama
      dockerfile: Dockerfile
    image: ghcr.io/open-webui/open-webui:${WEBUI_DOCKER_TAG-main}
    container_name: open-webui
    volumes:
      - open-webui:/app/backend/data
    depends_on:
      - ollama
    ports:
      - ${OPEN_WEBUI_PORT-3000}:8080
     environment:
      - OLLAMA_BASE_URL=http://ollama:11434
      - WEBUI_SECRET_KEY=
      - ENABLE_MODEL_FILTER=True
      - DEFAULT_MODELS=gpt-3.5-turbo
      - MODEL_FILTER_LIST:gpt-3.5-turbo;gemma:2b;gpt-4-turbo-preview;Code
        llama;Mistral 7B;MythoMax
      - WEBUI_NAME=Rei Home Server
      - OPENAI_API_KEYS=xxxxxxxxxxxx
      - WEBUI_AUTH_TRUSTED_EMAIL_HEADER=Cf-Access-Authenticated-User-Email
    extra_hosts:
      - host.docker.internal:host-gateway
    restart: unless-stopped
  cloudflared:
    image: cloudflare/cloudflared:latest
    environment:
      - TUNNEL_TOKEN=xxxxxxxxxxxxxxx
    command: tunnel run
    restart: unless-stopped
volumes:
  ollama: {}
  open-webui: {}