内容
<div align="center">
<br>
# Libre WebUI
### The local-first AI workspace you control.
Chat with local or cloud models, search your documents, create artifacts, and run
agentic tasks in isolated workspaces—all from a self-hosted interface.
**Private by default · Provider-flexible · No application telemetry · Apache 2.0**
<br>
<p>
<a href="https://github.com/libre-webui/libre-webui/releases">
<img src="https://img.shields.io/github/v/release/libre-webui/libre-webui?style=flat-square&label=release&color=2563eb" alt="Latest release">
</a>
<a href="https://www.npmjs.com/package/libre-webui">
<img src="https://img.shields.io/npm/v/libre-webui?style=flat-square&label=npm&color=cb3837" alt="npm version">
</a>
<a href="https://github.com/libre-webui/libre-webui/blob/main/LICENSE">
<img src="https://img.shields.io/badge/license-Apache--2.0-15803d?style=flat-square" alt="Apache 2.0 License">
</a>
<a href="https://github.com/libre-webui/libre-webui/actions/workflows/format.yml">
<img src="https://img.shields.io/github/actions/workflow/status/libre-webui/libre-webui/format.yml?branch=main&style=flat-square&label=main%20checks" alt="Main branch checks">
</a>
<a href="https://github.com/libre-webui/libre-webui">
<img src="https://img.shields.io/github/stars/libre-webui/libre-webui?style=flat-square&label=stars&color=ff7b52" alt="GitHub stars">
</a>
</p>
<p>
<a href="https://librewebui.org"><strong>Website</strong></a> ·
<a href="https://docs.librewebui.org"><strong>Documentation</strong></a> ·
<a href="https://github.com/libre-webui/libre-webui/releases"><strong>Releases</strong></a> ·
<a href="#quick-start"><strong>Quick start</strong></a>
</p>
<br>
<img src="https://raw.githubusercontent.com/libre-webui/libre-webui/main/screenshot.png" width="100%" alt="Libre WebUI self-hosted AI workspace">
</div>
---
## What is Libre WebUI?
Libre WebUI is a self-hosted AI workspace for people who want control over
their models, data, providers, and interface.
Use local models through [Ollama](https://ollama.com), connect the providers you
choose, search your own documents, create interactive artifacts, and give
model-driven tasks an isolated workspace with files, tools, a terminal, and a
live preview.
It runs on your machine, server, or cluster. Libre WebUI is not a hosted AI
service and does not require a cloud account for local inference.
## Why Libre WebUI?
- **Local-first:** Use Ollama and other local inference backends.
- **Provider-flexible:** Connect cloud providers or OpenAI-compatible endpoints
when you choose.
- **Private by default:** Libre WebUI ships without application telemetry or
analytics.
- **Built for work:** Turn conversations into documents, code, websites, SVG,
JSON, and other artifacts.
- **Isolated tasks:** Work provides a persistent project environment with
sandboxed commands, files, diffs, and previews.
- **Open source:** Use, modify, redistribute, and fork the core project under
the Apache License 2.0.
- **Self-hosted:** Keep the interface, conversations, and configuration on
infrastructure you control.
> When you use a remote provider, that provider receives the requests you send
> to it. Local-first does not mean that remote inference is invisible.
## Quick start
### Requirements
- [Node.js 22.22 or newer](https://nodejs.org)
- [Ollama](https://ollama.com) for local models
- Docker is optional and required only for local **Work** sandboxes
### Start with npm
```bash
npx libre-webui@latest
```
Open [http://localhost:8080](http://localhost:8080).
The first account created on a fresh installation becomes the administrator.
### Connect a local model
Install Ollama, then pull a model:
```bash
ollama pull gemma4:12b
```
Libre WebUI can now use Ollama for local inference. No cloud account or API key
is required.
### Start with Docker
Clone the repository and start the default stack:
```bash
git clone https://github.com/libre-webui/libre-webui.git
cd libre-webui
docker compose up -d
```
See the [Docker deployment guide](https://docs.librewebui.org/DOCKER) for
production configuration, external Ollama, GPU support, networking, and
persistent storage.
## Features
| Feature | Description |
| ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Chat** | Streaming conversations with prompt queueing, multi-model comparison, and chat forking |
| **Local inference** | Ollama support with no required cloud account |
| **Provider plugins** | Chat, image, video, embedding, and speech providers through an extensible plugin layer |
| **Knowledge** | Chat with PDF, Office, Markdown, HTML, code, and CSV documents via hybrid retrieval with cited sources |
| **Web search** | Self-hosted SearXNG search for chats and Work tasks |
| **Artifacts** | Generate and preview HTML, SVG, JSON, code, and multi-file projects |
| **Workspaces** | Persistent, task-scoped environments with files, terminal, diffs, and previews |
| **Work Computer** | A watchable desktop with a browser for each agent — verified clicks and typing, take over for sign-ins, hear its audio, and teach it anchored tasks by demonstration |
| **Channels** | Public, private, and direct-message team conversations with threads, reactions, files, and `@model` |
| **Calendar** | Multiple shareable calendars with recurrence, reminders, and ICS import/export, encrypted at rest |
| **Automations** | Scheduled AI runs delivered as normal chat sessions |
| **Notifications** | Durable in-app inbox with live delivery and signed, egress-guarded outbound webhooks |
| **Notes** | Notebook with revision history, attachments, sharing, and reversible AI edits |
| **Personas** | Reusable assistant profiles with their own prompts, models, and memory |
| **Media generation** | Image generation and editing plus video generation, with a persistent gallery and retention controls |
| **Voice** | Speech-to-text dictation, text-to-speech playback, and hands-free voice mode with consent-aware voices |
| **Context management** | Context meter and undoable conversation compaction for long chats |
| **Agents** | Optional installed agent CLIs and the embedded Strands agent engine |
| **Sharing** | One grant model for chats, notes, knowledge, personas, prompts, skills, and calendars |
| **Accounts** | Local accounts, roles, groups, API tokens, and SSO |
| **Public API** | OpenAI-compatible `/v1` endpoints on scoped API tokens |
| **Evaluations** | Feedback with topic tags, blind arena matches with an Elo leaderboard, and reproducible eval runs |
| **Monitoring** | System diagnostics, usage analytics with tariffs and budgets, OpenTelemetry export, and an audit log |
| **Deployment** | npm, Docker Compose, Kubernetes, Helm, and desktop client |
| **Interface** | Tabs, full-text search across chats, notes, and documents, themes, and 25 locales including Arabic RTL |
## Models and providers
Ollama is the default local path, but Libre WebUI is designed to avoid provider
lock-in.
Supported integrations include:
- Ollama and Ollama Cloud
- OpenAI
- Anthropic
- Google Gemini
- Groq
- Mistral
- DeepSeek
- Amazon Bedrock
- OpenRouter
- Hugging Face
- GitHub Models
- Moonshot AI / Kimi Code
- ComfyUI
- ElevenLabs
- Qwen3-TTS
- Kyutai TTS
- MLX LM on Apple Silicon
- llama.cpp
- OpenAI-compatible services
Provider availability can change between releases. See the
[provider documentation](https://docs.librewebui.org/PROVIDER_CONNECTIONS) for
current configuration instructions.
Credentials can be supplied through deployment environment variables or stored
in encrypted, user-scoped settings.
## Work: an isolated workspace for every task
**Work** gives a model a persistent project environment where it can build,
modify, and preview files.
Each task includes:
```text
Work task
├── Persistent conversation and run history
├── Dedicated workspace volume
├── Policy-checked command sandbox
└── Files · Activity · Changes · Terminal · Preview · Screen
```
Work can allow a model to:
- Read, create, edit, move, delete, and search files
- Run bounded shell commands
- Start and stop a browser preview
- Drive a real desktop with a browser through screenshots and input
- Produce syntax-highlighted code
- Show file diffs
- Continue work in the same environment later
**[▶ Watch a real run (2:22)](https://s3.librewebui.org/media/work-computer-demo.mp4?v=2)** —
a Work agent browsing NASA's galleries on its own screen, choosing
photos, then building and testing an interactive Three.js gallery,
unedited, from a single prompt.
https://github.com/user-attachments/assets/acd1ee80-c643-4622-bee6-3cdc2325a4ca
With the **Work Computer** enabled (one click for an administrator; the
GUI image is published ready to pull), each task also gets a live virtual
desktop: watch the agent browse in real time, unmute the computer's
audio, take over the mouse and keyboard for sign-ins or CAPTCHAs —
credentials go directly from your keyboard to the page, never through the
model — and teach reusable tasks by demonstrating them once on screen.
Taught playbooks name the controls that were clicked, carry the sites the
demonstration actually visited as their allowed scope, and collect a
worked/failed track record from your one-click reviews. The agent's own
actions are verified, not assumed: typing asserts the focused field,
batches stop when the screen changes underneath them, outcomes are
checked against declared expectations, and repeated no-effect actions end
the run asking for help instead of burning its budget. Policies decide
whether takeover is allowed at all. You can message the agent while it
works; it picks the message up at its next step without stopping the
run.
Work is disabled for regular users by default and never falls back to executing
commands directly on the host.
### Important security limitations
Containers are not virtual machines. Work tasks have outbound internet access
by design, and administrators should review the deployment model before enabling
agentic execution.
The default Docker Compose setup mounts the Docker socket so Work can create
task containers. This gives the application root-equivalent control of the host.
Every Libre WebUI administrator should therefore be treated as a host
administrator when using that configuration.
For stronger isolation, use:
- The Docker socket proxy configuration
- Kubernetes-based Work sandboxes
- A separate host or cluster dedicated to Libre WebUI
Read the complete
[Work security documentation](https://docs.librewebui.org/WORKSPACES) before
enabling it for untrusted users.
## Privacy and security
Libre WebUI ships without application telemetry or analytics.
When using a local provider such as Ollama, prompts and responses remain on the
infrastructure where that provider runs. When using a remote provider, prompts,
responses, documents, and tool results may be sent to that provider as part of
the request.
For multi-user deployments, Libre WebUI supports:
- Local accounts, roles, and groups
- Per-resource sharing with access grants
- bcrypt password hashing
- JWT sessions and scoped API tokens (which also drive the OpenAI-compatible `/v1` API)
- Login and signup rate limits
- Optional Cloudflare Turnstile
- Optional GitHub and Hugging Face OAuth, plus generic OIDC single sign-on
- An admin-facing security audit log
- AES-256-GCM encryption for sensitive application values
- Persistent SQLite storage, or PostgreSQL with S3 blobs and pgvector for the multi-replica team profile
- Configurable data directories
Application-layer encryption is not full-disk encryption or end-to-end
encryption. For production deployments, use HTTPS, stable secrets,
access-controlled storage, backups, and disk encryption where appropriate.
- [Authentication](https://docs.librewebui.org/AUTHENTICATION)
- [Database encryption](https://docs.librewebui.org/DATABASE_ENCRYPTION)
- [Deployment](https://docs.librewebui.org/DOCKER)
## Optional agent integrations
Libre WebUI can expose installed Claude Code or Codex CLIs as chat models when
they are configured on the server.
This uses the credentials available to the Libre WebUI server user. Treat this
as equivalent to granting the selected agent shell access on that system.
Disable this feature with:
```bash
AGENT_CLI_MODELS_ENABLED=false
```
- [Installed agent CLIs](https://docs.librewebui.org/AGENT_CLI_MODELS)
## Strands engine
Libre WebUI embeds an agent engine built on the open-source
[Strands Agents harness](https://github.com/strands-agents/harness-sdk). It
runs inside the backend process and drives the models Libre WebUI already
has: Ollama models when Ollama is enabled, and active chat or completion
provider plugins. It needs no separate provider configuration or API keys.
An administrator chooses who can use it in **Settings → User Management →
Access & policies → Strands engine**: off (the default), administrators, or
all users. `LIBRE_STRANDS_ACCESS=disabled|admins|all-users` pins the mode, and
any other value locks the engine off. The server enforces the mode on every
REST, WebSocket, and Work request.
- **Strands page** (`/strands`): persistent sessions with a model picker,
streaming replies, reasoning, and tool-call cards. The agent can only read,
write, and edit files in a private workspace for each session. It cannot run
shell commands or reach the network.
- **Chat**: pick **Strands** in the model selector, next to the Agent CLI
models.
- **Work**: choose **Strands** in the composer's **Engine** control. A Strands
agent plans each step, and Work runs the tools in its sandbox under the
normal approval policy.
See the [Strands engine documentation](https://docs.librewebui.org/STRANDS_ENGINE)
for the security model, limits, storage, and API.
## Deployment options
| Deployment | Command or link | Use case |
| ------------------- | ----------------------------------------------------------------------- | ---------------------------------------- |
| **npm** | `npx libre-webui@latest` | Fast local start |
| **Docker Compose** | `docker compose up -d` | Persistent self-hosted deployment |
| **External Ollama** | `docker compose -f docker-compose.external-ollama.yml up -d` | Use an existing Ollama instance |
| **NVIDIA Docker** | `docker compose -f docker-compose.gpu.yml up -d` | GPU-enabled local inference |
| **Kubernetes** | `helm install libre-webui oci://ghcr.io/libre-webui/charts/libre-webui` | Cluster deployment |
| **Team profile** | `docker compose -f docker-compose.team.yml up -d` | Multi-replica PostgreSQL + S3 deployment |
| **Desktop client** | [GitHub Releases](https://github.com/libre-webui/libre-webui/releases) | Desktop interface over a managed backend |
| **Source** | `npm install && npm run dev` | Development |
For production deployments:
1. Set stable `JWT_SECRET` and `ENCRYPTION_KEY` values.
2. Persist the application data directory.
3. Back up the database and encryption key together.
4. Use HTTPS through a trusted reverse proxy.
5. Review the Docker socket and Work security model.
6. Disable public signup unless it is explicitly required.
See the [deployment documentation](https://docs.librewebui.org) for details.
## Documentation
- [Quick start](https://docs.librewebui.org/QUICK_START)
- [Docker deployment](https://docs.librewebui.org/DOCKER)
- [Kubernetes deployment](https://docs.librewebui.org/KUBERNETES)
- [Working with models](https://docs.librewebui.org/WORKING_WITH_MODELS)
- [Provider connections](https://docs.librewebui.org/PROVIDER_CONNECTIONS)
- [Work workspaces](https://docs.librewebui.org/WORKSPACES)
- [Document chat](https://docs.librewebui.org/RAG_FEATURE)
- [Channels](https://docs.librewebui.org/CHANNELS)
- [Notifications](https://docs.librewebui.org/NOTIFICATIONS)
- [Sharing](https://docs.librewebui.org/SHARING)
- [Calendar](https://docs.librewebui.org/CALENDAR)
- [Public API](https://docs.librewebui.org/PUBLIC_API)
- [Plugin architecture](https://docs.librewebui.org/PLUGIN_ARCHITECTURE)
- [Strands engine](https://docs.librewebui.org/STRANDS_ENGINE)
- [Capability contracts](https://docs.librewebui.org/CAPABILITY_CONTRACTS)
- [Authentication](https://docs.librewebui.org/AUTHENTICATION)
- [Data portability](https://docs.librewebui.org/DATA_PORTABILITY)
- [Platform foundation](https://docs.librewebui.org/PLATFORM_FOUNDATION)
- [Speech to text](https://docs.librewebui.org/SPEECH_TO_TEXT)
- [Environment variables](https://docs.librewebui.org/ENVIRONMENT_VARIABLES)
- [Troubleshooting](https://docs.librewebui.org/TROUBLESHOOTING)
## Contributing
Contributions are welcome, including:
- Bug fixes
- Tests
- Documentation
- Translations
- Provider integrations
- UI improvements
- Security reviews
```bash
git clone https://github.com/libre-webui/libre-webui.git
cd libre-webui
git checkout dev
npm install
npm run dev
```
Create a branch, make your changes, add tests and documentation where
appropriate, and open a pull request against `dev`.
Please read:
- [Community & Ethical Charter](https://github.com/libre-webui/libre-webui/blob/main/CHARTER.md)
- [Contributor Covenant](https://www.contributor-covenant.org/version/2/1/code_of_conduct/)
- [Security Policy](https://github.com/libre-webui/libre-webui/security/policy)
Report security vulnerabilities privately rather than through public issues.
## License and stewardship
Libre WebUI is licensed under the
[Apache License 2.0](https://github.com/libre-webui/libre-webui/blob/main/LICENSE).
You may use, modify, redistribute, and fork the project under the terms of that
license.
Kroonen AI funds development and provides optional deployment, integration,
security review, training, customization, and support services. Commercial
services do not change the Apache 2.0 license of the core project.
The project’s independence and community commitments are described in the
[Community & Ethical Charter](https://github.com/libre-webui/libre-webui/blob/main/CHARTER.md).
## Project links
- **Website:** [librewebui.org](https://librewebui.org)
- **Documentation:** [docs.librewebui.org](https://docs.librewebui.org)
- **GitHub:** [github.com/libre-webui/libre-webui](https://github.com/libre-webui/libre-webui)
- **Releases:** [GitHub Releases](https://github.com/libre-webui/libre-webui/releases)
- **Docker Hub:** [librewebui/libre-webui](https://hub.docker.com/r/librewebui/libre-webui)
- **Forgejo mirror:** [git.kroonen.ai/libre-webui/libre-webui](https://git.kroonen.ai/libre-webui/libre-webui)
- **Hugging Face:** [huggingface.co/libre-webui](https://huggingface.co/libre-webui)
- **Sponsor:** [GitHub Sponsors](https://github.com/sponsors/libre-webui)
---
<div align="center">
### Build with the models you choose. Keep control of the workspace around them.
<a href="https://github.com/libre-webui/libre-webui">
<img src="https://img.shields.io/github/stars/libre-webui/libre-webui?style=for-the-badge&label=Star%20Libre%20WebUI&color=ff7b52" alt="Star Libre WebUI on GitHub">
</a>
<br><br>
**Apache 2.0** · Copyright © 2025–present Kroonen AI, Inc. and Libre WebUI contributors
</div>
连接信息
猜你喜欢
暂无推荐服务器