From e65f526e924d9fe44fe6f117aeb60de8b63bee7b Mon Sep 17 00:00:00 2001
From: Michael Thomson <me@michaelthomson.dev>
Date: Fri, 20 Mar 2026 01:42:02 -0400
Subject: [PATCH] open webui

---
 apps/open-webui/release.yaml                  | 27 +++++++++++++++++++
 apps/open-webui/repository.yaml               |  8 ++++++
 bootstrap/apps/kustomization-open-webui.yaml  | 19 +++++++++++++
 .../namespaces/namespace-open-webui.yaml      |  4 +++
 4 files changed, 58 insertions(+)
 create mode 100644 apps/open-webui/release.yaml
 create mode 100644 apps/open-webui/repository.yaml
 create mode 100644 bootstrap/apps/kustomization-open-webui.yaml
 create mode 100644 infrastructure/namespaces/namespace-open-webui.yaml

diff --git a/apps/open-webui/release.yaml b/apps/open-webui/release.yaml
new file mode 100644
index 0000000..f4561c4
--- /dev/null
+++ b/apps/open-webui/release.yaml
@@ -0,0 +1,27 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: open-webui
+  namespace: open-webui
+spec:
+  chart:
+    spec:
+      chart: open-webui
+      version: 12.x
+      sourceRef:
+        kind: HelmRepository
+        name: open-webui
+  interval: 15m
+  releaseName: open-webui
+  values:
+    ollama:
+      enabled: false
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: "letsencrypt-prod"
+        traefik.ingress.kubernetes.io/router.tls: "true"
+        traefik.ingress.kubernetes.io/router.entrypoints: websecure
+      host: "chat.michaelthomson.dev" # update to your real domain
+      tls: true
+      existingSecret: open-webui-tls
diff --git a/apps/open-webui/repository.yaml b/apps/open-webui/repository.yaml
new file mode 100644
index 0000000..9f2502e
--- /dev/null
+++ b/apps/open-webui/repository.yaml
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: open-webui
+  namespace: open-webui
+spec:
+  interval: 15m
+  url: https://helm.openwebui.com/
diff --git a/bootstrap/apps/kustomization-open-webui.yaml b/bootstrap/apps/kustomization-open-webui.yaml
new file mode 100644
index 0000000..48ba2f1
--- /dev/null
+++ b/bootstrap/apps/kustomization-open-webui.yaml
@@ -0,0 +1,19 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: open-webui
+  namespace: flux-system
+spec:
+  interval: 1m
+  path: ./apps/open-webui
+  prune: true # remove any elements later removed from the above path
+  wait: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  dependsOn:
+    - name: infra-configs
diff --git a/infrastructure/namespaces/namespace-open-webui.yaml b/infrastructure/namespaces/namespace-open-webui.yaml
new file mode 100644
index 0000000..b84d4e8
--- /dev/null
+++ b/infrastructure/namespaces/namespace-open-webui.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: open-webui