# Paste these commands line by line.
# You don't need to paste anything after the hash (#) like this, here text
# they are just helpful comments

#                '.'--.--'.-'
#   .,_------.___,   \' r'
#  ', '-._a      '-' .'
#   '.    '-'Y \._  /
#     '--;____'--.'-,
#      /..'       '''
########################
# $200 CREDIT WITH DIGITAL OCEAN: https://m.do.co/c/9beb563908a1
########################

# Run OpenWebUI with Docker (copy everything here)
docker run -d \
  --name open-webui \
  -p 3000:8080 \
  -v open-webui:/app/backend/data \
  --restart unless-stopped \
  ghcr.io/open-webui/open-webui:main

# Enable firewall
ufw enable

# Allow SSH
ufw allow 22

# Allow OpenWebUI port
ufw allow 3000

# Allow HTTP/HTTPS (if setting up reverse proxy later)
ufw allow 80
ufw allow 443

# You should have OpenWebUI running on the IP address given to you by your Digital Ocean Droplet

# Install Nginx
apt install -y nginx

# Create Nginx configuration. Change your_domain.com as the domain you wish to run this from
cat > /etc/nginx/sites-available/openwebui << 'EOF'
server {
    listen 80;
    server_name your_domain.com;

    location / {
        proxy_pass http://localhost:3000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}
EOF

# Enable the site
ln -s /etc/nginx/sites-available/openwebui /etc/nginx/sites-enabled/

# Test the settings
nginx -t

# Restart
systemctl restart nginx

# install ssl. Change you-domain.com and [email protected] to relevant values
apt install -y certbot python3-certbot-nginx
certbot --nginx -d your-domain.com --non-interactive --agree-tos --email your@email.com

# Run this in your console to disable all models
document.querySelectorAll('#model-list button[data-switch-root]').forEach(input => input.click())