Skip to content
Open

Dev #1290

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
49 commits
Select commit Hold shift + click to select a range
1590fd3
docs: document IFRAME_CSP on the Artifacts page
Classic298 Jun 6, 2026
c631533
docs: bump current-version references to v0.9.7 for the next docs cycle
Classic298 Jun 6, 2026
80b5f81
docs: native tool calling is now the default (v0.9.7); rename Default…
Classic298 Jun 6, 2026
9796d78
docs: sweep tool-calling references for native-default; drop tool-cal…
Classic298 Jun 6, 2026
1ce94b2
docs(essentials): add Web Search as a getting-started essential
Classic298 Jun 6, 2026
e1302c1
docs: consolidate tool mode-detection; drop essentials timeframes; fi…
Classic298 Jun 6, 2026
87cb231
docs: revert forced web-search category slug, use default generated-i…
Classic298 Jun 6, 2026
9004413
docs(web-search): fix DDGS labelling, refresh essentials provider pic…
Classic298 Jun 6, 2026
dafedd1
docs(open-terminal): clarify model needs agentic-quality tool calling
Classic298 Jun 6, 2026
3a0241d
docs(essentials): drop the DDGS "free, no sign-up" web-search group
Classic298 Jun 6, 2026
0601288
docs: document Computer (cptr), the standalone "your computer in a br…
Classic298 Jun 6, 2026
fe307b4
docs(computer): reflect cptr's new localhost-only --host default
Classic298 Jun 6, 2026
9188a43
docs(env): fix outdated WEBUI_SECRET_KEY fallback description
Classic298 Jun 7, 2026
2b1254d
docs(env): drop the v0.9.6 hard-requirement paragraph from WEBUI_SECR…
Classic298 Jun 7, 2026
f4d4583
docs(computer): document plan mode + .env protection (cptr v0.1.6)
Classic298 Jun 7, 2026
9d4c257
docs(rich-ui): fix mislabeled Visualizer link
Classic298 Jun 7, 2026
76ed639
docs(env): correct which forward-info headers reach which backends
Classic298 Jun 9, 2026
8622b02
docs(env): rebalance forward-headers description
Classic298 Jun 9, 2026
7b8ea8b
docs(security): add Known & Accepted Risks register; first entry auth…
Classic298 Jun 11, 2026
99b94dd
docs(security): align threat-model wording with policy update (add "s…
Classic298 Jun 11, 2026
95fb3d2
docs(security): sync policy page with the updated Security Policy
Classic298 Jun 11, 2026
ec89afe
docs(security): generalise accepted-risks rationale; drop per-risk th…
Classic298 Jun 11, 2026
181a412
docs(security): reword reporting rationale; use relative vendor-dispo…
Classic298 Jun 11, 2026
44faa57
docs(security): relativise remaining internal links in the policy page
Classic298 Jun 11, 2026
5fb0032
docs(security): add transparency intent + advisory-history stance to …
Classic298 Jun 11, 2026
27de167
docs(computer): update for cptr v0.2.x
Classic298 Jun 12, 2026
4b82251
docs(computer): add messaging bots (cptr v0.3.0)
Classic298 Jun 12, 2026
b31af4b
docs(responses): document native server-side tools (web search)
Classic298 Jun 12, 2026
2d27ab9
docs(computer): add browser tools, image understanding, voice memos (…
Classic298 Jun 12, 2026
6bb44a4
docs(responses): fix broken web-search link (+ em-dash) on open-respo…
Classic298 Jun 12, 2026
be091a3
docs(web-search): give the category a real slug, fix the recurring /c…
Classic298 Jun 12, 2026
1e31cf0
docs(computer): add OpenAI-compatible gateway (cptr v0.3.3/0.3.4)
Classic298 Jun 12, 2026
0a7feac
security-policy: extend already-fixed rule to public PRs and add cred…
Classic298 Jun 13, 2026
a1639fc
docs(computer): gateway now first-class for Open WebUI (cptr v0.3.5)
Classic298 Jun 13, 2026
5d48bc3
docs(computer): add tool servers + sub-agents (cptr v0.4.0)
Classic298 Jun 13, 2026
acb9215
docs(computer): split the cptr page into a section (overview / featur…
Classic298 Jun 13, 2026
eb9f0e0
docs(essentials): add a Computer (cptr) section under Open Terminal
Classic298 Jun 13, 2026
68a60c5
docs(essentials): reword cptr section, full agentic app, first-class …
Classic298 Jun 13, 2026
b5e44ea
security-policy: remove Rule 14 (One Vulnerability Per Report)
Classic298 Jun 13, 2026
5158a21
security-policy: surface "What a Valid Report Gets You" near the top
Classic298 Jun 13, 2026
62028a9
docs: add feature-section banners and overview wayfinding
Classic298 Jun 13, 2026
38145a4
Merge branch 'open-webui:dev' into dev
Classic298 Jun 17, 2026
7173ca8
refac
Classic298 Jun 17, 2026
d9b19d6
sec
Classic298 Jun 18, 2026
4bfd8cc
docs
Classic298 Jun 20, 2026
4b3d764
refac
tjbck Jun 22, 2026
1e747bc
refac
tjbck Jun 22, 2026
7d6e774
refac
tjbck Jun 22, 2026
778e570
Merge remote-tracking branch 'upstream/main' into HEAD
Classic298 Jun 23, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,9 @@
.docusaurus
.cache-loader

# Local banner render scratch (not for commit)
.scratch_banner

# Misc
.DS_Store
.env.local
Expand Down
14 changes: 7 additions & 7 deletions docs/enterprise/customers/astellas-pharma.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,8 @@ How Astellas Pharma Inc. built a secure, flexible internal AI platform with **Op
- **Industry**: Pharmaceutical
- **Deployment**: Azure AKS (private endpoints)
- **Models**: Azure OpenAI, Gemini, DeepSeek, Perplexity
- **Time-to-deploy**: ~1 month (AprilMay 2025)
- **Adoption**: 3040% weekly active users sustained over five months
- **Time-to-deploy**: ~1 month (April to May 2025)
- **Adoption**: 30 to 40% weekly active users sustained over five months
- **Key Results**: 420+ custom models created, 68% of users report significant efficacy gains, +43 NPS


Expand Down Expand Up @@ -60,7 +60,7 @@ Open WebUI was selected for its **flexibility, fine-grained permission controls,
- **Security Controls**: MFA via IdP, RBAC by group, data residency enforced


> “Open WebUI allowed us to create and share custom AI models securely across the entire company, while giving us the flexibility to leverage the full potential of any cutting-edge model available.” - Generative AI Team Manager, Astellas
> “Open WebUI allowed us to create and share custom AI models securely across the entire company, while giving us the flexibility to leverage the full potential of any cutting-edge model available.” Generative AI Team Manager, Astellas

## Models & Data Handling

Expand All @@ -84,12 +84,12 @@ Training included:

Over the following months:

- **Weekly active users stabilized at 3040%** over five months
- **Weekly active users stabilized at 30 to 40%** over five months
- Users organically created **hundreds of custom models**, sharing them across departments
- **All departments** adopted the platform, including Research, Clinical Development, Medical, Sales, Marketing, Legal, Compliance, Pharmacovigilance, Administration, Communications, and Corporate Strategy


> “Our efficiency in gathering external scientific information has improved dramatically. Being able to select and switch models depending on the use case makes our research far more effective.” - Research Department User, Astellas
> “Our efficiency in gathering external scientific information has improved dramatically. Being able to select and switch models depending on the use case makes our research far more effective.” Research Department User, Astellas

## Results: Democratization, Productivity, and Satisfaction

Expand All @@ -114,7 +114,7 @@ The platform grew to **3,200+ total users** organically, with an advanced user b
R&D and research teams reported dramatic improvements in gathering and synthesizing scientific information, clinical trial summaries, and multilingual medical documents.


> “For coding tasks, efficiency has increased more than ten-fold, I can’t imagine working without this tool now.” - Advanced User, Astellas
> “For coding tasks, efficiency has increased more than ten-fold, I can’t imagine working without this tool now.” Advanced User, Astellas

## Top Use Cases

Expand Down Expand Up @@ -146,7 +146,7 @@ R&D and research teams reported dramatic improvements in gathering and synthesiz

:::tip

**Looking for an [Enterprise Plan](https://docs.openwebui.com/enterprise)?** **[Speak with Our Sales Team Today!](https://docs.openwebui.com/enterprise)**
**Looking for an [Enterprise Plan](https://docs.openwebui.com/enterprise)?** **[Speak with Our Sales Team Today!](https://docs.openwebui.com/enterprise)**

Get **enhanced capabilities**, including **custom theming and branding**, **Service Level Agreement (SLA) support**, **Long-Term Support (LTS) versions**, and **more!**

Expand Down
8 changes: 4 additions & 4 deletions docs/enterprise/customers/public-storage.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ How Public Storage used a **champion-driven rollout** to deploy a secure, privat

### At a Glance

- **Users**: 5,00010,000 employees
- **Users**: 5,000 to 10,000 employees
- **Region**: United States (data residency enforced)
- **Industry**: Real Estate
- **Deployment**: GCP (containerized, private networking)
Expand Down Expand Up @@ -60,7 +60,7 @@ Open WebUI was selected for its **extensible foundation**: an open architecture
- **Security Controls**: MFA via IdP, RBAC by group, data residency enforced, PII redaction with user-facing interruption, moderation guardrails, audit exports to SIEM, DLP policies, egress restrictions


> “Our goal wasn’t just to deploy AI, but to scale it responsibly. Open WebUI allows us to crowdsource high-value use cases from the business while maintaining the governance we need.” CTO, Public Storage
> “Our goal wasn’t just to deploy AI, but to scale it responsibly. Open WebUI allows us to crowdsource high-value use cases from the business while maintaining the governance we need.” CTO, Public Storage

## Models & Data Handling

Expand All @@ -84,7 +84,7 @@ Within the first month:
- Usage continued to grow as teams **shared successful workflows** with peers
- **All corporate functions** were represented, including HR, Marketing, Finance, Legal, Call Center, Operations, Sales/Acquisitions, IT, and Risk Management

> “We’re seeing real operational time savings from use cases built by the business, not just IT, which has accelerated adoption and delivered practical results.” VP, Digital Technology, Public Storage
> “We’re seeing real operational time savings from use cases built by the business, not just IT, which has accelerated adoption and delivered practical results.” VP, Digital Technology, Public Storage

## Results: Productivity, Adoption, and Governance

Expand Down Expand Up @@ -132,7 +132,7 @@ The platform empowered every corporate function to discover and share AI-driven

:::tip

**Looking for an [Enterprise Plan](https://docs.openwebui.com/enterprise)?** **[Speak with Our Sales Team Today!](https://docs.openwebui.com/enterprise)**
**Looking for an [Enterprise Plan](https://docs.openwebui.com/enterprise)?** **[Speak with Our Sales Team Today!](https://docs.openwebui.com/enterprise)**

Get **enhanced capabilities**, including **custom theming and branding**, **Service Level Agreement (SLA) support**, **Long-Term Support (LTS) versions**, and **more!**

Expand Down
8 changes: 4 additions & 4 deletions docs/enterprise/customers/samsung-semiconductor.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ How Samsung Semiconductor built a secure, self-hosted AI platform with **Open We

### At a Glance

- **Users**: 1,000 - 4,999 employees
- **Users**: 1,000 to 4,999 employees
- **Region**: United States (data residency enforced)
- **Industry**: Semiconductor
- **Deployment**: On-prem Kubernetes cluster
Expand Down Expand Up @@ -58,7 +58,7 @@ Open WebUI was selected for its **open architecture, flexibility, and rapid proo
- **Security Controls**: Data residency enforced; internal user access controls


> “Open WebUI gave us control across security, models, and UX, without vendor lock-in.” Software Engineering, Samsung Semiconductor, Inc.
> “Open WebUI gave us control across security, models, and UX, without vendor lock-in.” Software Engineering, Samsung Semiconductor, Inc.

## Adoption & Enablement

Expand All @@ -69,7 +69,7 @@ Within 30 days:
- Daily active users stabilized at 5-10% of total employees
- R&D teams reported **significant productivity improvements**

> “Open WebUI provides users with an environment similar to commercial tools, giving them a sense of familiarity, and at the same time, it has the advantage of improving usability with its simple and intuitive design.” AI/ML Engineering, Samsung Semiconductor, Inc.
> “Open WebUI provides users with an environment similar to commercial tools, giving them a sense of familiarity, and at the same time, it has the advantage of improving usability with its simple and intuitive design.” AI/ML Engineering, Samsung Semiconductor, Inc.

## Results: Speed, Adoption, and Control

Expand Down Expand Up @@ -109,7 +109,7 @@ Samsung Semiconductor plans to continue expanding its AI infrastructure with Ope

:::tip

**Looking for an [Enterprise Plan](https://docs.openwebui.com/enterprise)?** **[Speak with Our Sales Team Today!](https://docs.openwebui.com/enterprise)**
**Looking for an [Enterprise Plan](https://docs.openwebui.com/enterprise)?** **[Speak with Our Sales Team Today!](https://docs.openwebui.com/enterprise)**

Get **enhanced capabilities**, including **custom theming and branding**, **Service Level Agreement (SLA) support**, **Long-Term Support (LTS) versions**, and **more!**

Expand Down
6 changes: 3 additions & 3 deletions docs/enterprise/deployment/container-service.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ title: "Container Service"
Run the official `ghcr.io/open-webui/open-webui` image on a managed container platform such as AWS ECS/Fargate, Azure Container Apps, or Google Cloud Run.

:::info Prerequisites
Before proceeding, ensure you have configured the [shared infrastructure requirements](/enterprise/deployment#shared-infrastructure-requirements) PostgreSQL, Redis, a vector database, shared storage, and content extraction.
Before proceeding, ensure you have configured the [shared infrastructure requirements](/enterprise/deployment#shared-infrastructure-requirements): PostgreSQL, Redis, a vector database, shared storage, and content extraction.
:::

## When to Choose This Pattern
Expand Down Expand Up @@ -49,7 +49,7 @@ Use **versioned tags** for production stability:
ghcr.io/open-webui/open-webui:v0.x.x
```

Avoid the `:main` tag in production — it tracks the latest development build and can introduce breaking changes without warning. Check the [Open WebUI releases](https://github.com/open-webui/open-webui/releases) for the latest stable version.
Avoid the `:main` tag in production. It tracks the latest development build and can introduce breaking changes without warning. Check the [Open WebUI releases](https://github.com/open-webui/open-webui/releases) for the latest stable version.

## Scaling Strategy

Expand All @@ -65,7 +65,7 @@ Avoid the `:main` tag in production — it tracks the latest development build a
| **Storage** | Use object storage (S3, GCS, Azure Blob) or a shared filesystem (such as EFS). Container-local storage is ephemeral and not shared across tasks. |
| **Tika sidecar** | Run Tika as a sidecar container in the same task definition, or as a separate service. Sidecar pattern keeps extraction traffic local. |
| **Secrets management** | Use your platform's secrets manager (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager) for `DATABASE_URL`, `REDIS_URL`, and `WEBUI_SECRET_KEY`. |
| **Updates** | Perform a rolling deployment with a single task first — this task runs migrations (`ENABLE_DB_MIGRATIONS=true`). Once healthy, scale the remaining tasks with `ENABLE_DB_MIGRATIONS=false`. |
| **Updates** | Perform a rolling deployment with a single task first. This task runs migrations (`ENABLE_DB_MIGRATIONS=true`). Once healthy, scale the remaining tasks with `ENABLE_DB_MIGRATIONS=false`. |

## Anti-Patterns to Avoid

Expand Down
24 changes: 12 additions & 12 deletions docs/enterprise/deployment/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ title: "Deployment Options"

# Scalable Enterprise Deployment Options

Open WebUI's **stateless, container-first architecture** means the same application runs identically whether you deploy it as a Python process on a VM, a container in a managed service, or a pod in a Kubernetes cluster. The difference between deployment patterns is how you **orchestrate, scale, and operate** the application not how the application itself behaves.
Open WebUI's **stateless, container-first architecture** means the same application runs identically whether you deploy it as a Python process on a VM, a container in a managed service, or a pod in a Kubernetes cluster. The difference between deployment patterns is how you **orchestrate, scale, and operate** the application, not how the application itself behaves.

:::tip Model Inference Is Independent
How you serve LLM models is separate from how you deploy Open WebUI. You can use **managed APIs** (OpenAI, Anthropic, Azure OpenAI, Google Gemini) or **self-hosted inference** (Ollama, vLLM) with any deployment pattern. See [Integration](/enterprise/integration) for details on connecting models.
Expand Down Expand Up @@ -83,7 +83,7 @@ Deploy `open-webui serve` as a systemd-managed process on virtual machines in a

### [Container Service](./container-service)

Run the official Open WebUI container image on a managed platform such as AWS ECS/Fargate, Azure Container Apps, or Google Cloud Run. Best for teams wanting container benefits immutable images, versioned deployments, no OS management without Kubernetes complexity.
Run the official Open WebUI container image on a managed platform such as AWS ECS/Fargate, Azure Container Apps, or Google Cloud Run. Best for teams wanting container benefits (immutable images, versioned deployments, no OS management) without Kubernetes complexity.

### [Kubernetes with Helm](./kubernetes-helm)

Expand All @@ -95,9 +95,9 @@ Deploy using the official Open WebUI Helm chart on any Kubernetes distribution (

| | **Python / Pip (VMs)** | **Container Service** | **Kubernetes (Helm)** |
| :--- | :--- | :--- | :--- |
| **Operational complexity** | Moderate OS patching, Python management | Low platform-managed containers | Higher requires K8s expertise |
| **Operational complexity** | Moderate (OS patching, Python management) | Low (platform-managed containers) | Higher (requires K8s expertise) |
| **Auto-scaling** | Cloud ASG/VMSS with health checks | Platform-native, minimal configuration | HPA with fine-grained control |
| **Container isolation** | None process runs directly on OS | Full container isolation | Full container + namespace isolation |
| **Container isolation** | None (process runs directly on OS) | Full container isolation | Full container + namespace isolation |
| **Rolling updates** | Manual (scale down, update, scale up) | Platform-managed rolling deployments | Declarative rolling updates with rollback |
| **Infrastructure-as-code** | Terraform/Pulumi for VMs + config mgmt | Task/service definitions (CloudFormation, Bicep, Terraform) | Helm charts + GitOps (Argo CD, Flux) |
| **Best suited for** | Teams with VM-centric operations, regulatory constraints | Teams wanting container benefits without K8s complexity | Large-scale, mission-critical deployments |
Expand All @@ -111,8 +111,8 @@ Production deployments should include monitoring and observability regardless of

### Health Checks

- **`/health`** Basic liveness check. Returns HTTP 200 when the application is running. Use this for load balancer and auto-scaler health checks.
- **`/api/models`** Verifies the application can connect to configured model backends. Requires an API key.
- **`/health`**: Basic liveness check. Returns HTTP 200 when the application is running. Use this for load balancer and auto-scaler health checks.
- **`/api/models`**: Verifies the application can connect to configured model backends. Requires an API key.

### OpenTelemetry

Expand All @@ -124,7 +124,7 @@ OTEL_EXPORTER_OTLP_ENDPOINT=http://your-collector:4318
OTEL_SERVICE_NAME=open-webui
```

This auto-instruments FastAPI, SQLAlchemy, Redis, and HTTP clients giving visibility into request latency, database query performance, and cross-service traces.
This auto-instruments FastAPI, SQLAlchemy, Redis, and HTTP clients, giving visibility into request latency, database query performance, and cross-service traces.

### Structured Logging

Expand All @@ -141,11 +141,11 @@ For full monitoring setup details, see [Monitoring](/reference/monitoring) and [

## Next Steps

- **[Architecture & High Availability](/enterprise/architecture)** Deeper dive into Open WebUI's stateless design and HA capabilities.
- **[Security](/enterprise/security)** Compliance frameworks, SSO/LDAP integration, RBAC, and audit logging.
- **[Integration](/enterprise/integration)** Connecting AI models, pipelines, and extending functionality.
- **[Scaling Open WebUI](/getting-started/advanced-topics/scaling)** The complete step-by-step technical scaling guide.
- **[Multi-Replica Troubleshooting](/troubleshooting/multi-replica)** Solutions for common issues in scaled deployments.
- **[Architecture & High Availability](/enterprise/architecture)**: Deeper dive into Open WebUI's stateless design and HA capabilities.
- **[Security](/enterprise/security)**: Compliance frameworks, SSO/LDAP integration, RBAC, and audit logging.
- **[Integration](/enterprise/integration)**: Connecting AI models, pipelines, and extending functionality.
- **[Scaling Open WebUI](/getting-started/advanced-topics/scaling)**: The complete step-by-step technical scaling guide.
- **[Multi-Replica Troubleshooting](/troubleshooting/multi-replica)**: Solutions for common issues in scaled deployments.

---

Expand Down
4 changes: 2 additions & 2 deletions docs/enterprise/deployment/kubernetes-helm.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ title: "Kubernetes with Helm"
Deploy using the official Open WebUI Helm chart on any Kubernetes distribution (EKS, AKS, GKE, OpenShift, Rancher, self-managed).

:::info Prerequisites
Before proceeding, ensure you have configured the [shared infrastructure requirements](/enterprise/deployment#shared-infrastructure-requirements) PostgreSQL, Redis, a vector database, shared storage, and content extraction.
Before proceeding, ensure you have configured the [shared infrastructure requirements](/enterprise/deployment#shared-infrastructure-requirements): PostgreSQL, Redis, a vector database, shared storage, and content extraction.
:::

## When to Choose This Pattern
Expand Down Expand Up @@ -62,7 +62,7 @@ helm repo update
helm install openwebui open-webui/open-webui -f values.yaml
```

Your `values.yaml` should override the defaults to point at your shared infrastructure. The chart has dedicated values for many common settings use these instead of raw environment variables where available:
Your `values.yaml` should override the defaults to point at your shared infrastructure. The chart has dedicated values for many common settings: use these instead of raw environment variables where available:

```yaml
# Example values.yaml overrides (refer to chart documentation for full schema)
Expand Down
2 changes: 1 addition & 1 deletion docs/enterprise/deployment/python-pip.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ title: "Python / Pip on VMs"
Deploy `open-webui serve` as a systemd-managed process on virtual machines in a cloud auto-scaling group (AWS ASG, Azure VMSS, GCP MIG).

:::info Prerequisites
Before proceeding, ensure you have configured the [shared infrastructure requirements](/enterprise/deployment#shared-infrastructure-requirements) PostgreSQL, Redis, a vector database, shared storage, and content extraction.
Before proceeding, ensure you have configured the [shared infrastructure requirements](/enterprise/deployment#shared-infrastructure-requirements): PostgreSQL, Redis, a vector database, shared storage, and content extraction.
:::

## When to Choose This Pattern
Expand Down
2 changes: 1 addition & 1 deletion docs/enterprise/index.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -83,7 +83,7 @@ Understand how Open WebUI supports large-scale deployments. Explore multi-node c
Learn how Open WebUI integrates with your existing identity infrastructure, including LDAP, Active Directory, and SSO providers. Ideal for organizations requiring on-premise or air-gapped deployments.

#### [🚀 Deployment Options](./deployment)
Choose the right deployment pattern for your organization from Python on auto-scaling VMs to managed container services to Kubernetes with Helm.
Choose the right deployment pattern for your organization, from Python on auto-scaling VMs to managed container services to Kubernetes with Helm.

#### [🔗 Integration](./integration)
Connect proprietary, third-party, or local AI models. Extend functionality with plugins, pipelines, and custom workflows that fit your existing infrastructure.
Expand Down
Loading
Loading