Nutzen Sie ChatGPT & Co. — ohne Ihre Daten preiszugeben

# docker-compose.yml — Beispiel für einen eigenständigen Deploy mit den
# veröffentlichten Images. Vollständige Datei: docker-compose.yml
services:
  postgres:
    image: postgres:16
    restart: unless-stopped
    environment:
      POSTGRES_DB: ${POSTGRES_DB:-aiproxy}
      POSTGRES_USER: ${POSTGRES_USER:-aiproxy}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-aiproxy}
#    ports:
#      - "${POSTGRES_PORT:-5432}:5432"
    volumes:
      - postgres-data:/var/lib/postgresql/data

  aiproxy:
    image: dockitmed/ai-proxy-proxy:latest
    restart: unless-stopped
    depends_on:
      - postgres
    environment:
      DATABASE_URL: postgresql+psycopg://${POSTGRES_USER:-aiproxy}:${POSTGRES_PASSWORD:-aiproxy}@postgres:5432/${POSTGRES_DB:-aiproxy}
      ADMIN_AUTH_SECRET: ${ADMIN_AUTH_SECRET:-change-this-secret}
      ADMIN_BOOTSTRAP_USERNAME: ${ADMIN_BOOTSTRAP_USERNAME:-admin}
      ADMIN_BOOTSTRAP_PASSWORD: ${ADMIN_BOOTSTRAP_PASSWORD:-ChangeMe123!}
      ALLOW_SELF_REGISTRATION: ${ALLOW_SELF_REGISTRATION:-false}
      SELF_REGISTRATION_DEFAULT_ROLE: ${SELF_REGISTRATION_DEFAULT_ROLE:-viewer}
      SELF_REGISTRATION_RATE_LIMIT: ${SELF_REGISTRATION_RATE_LIMIT:-5}
      SELF_REGISTRATION_RATE_LIMIT_WINDOW_MINUTES: ${SELF_REGISTRATION_RATE_LIMIT_WINDOW_MINUTES:-15}
      PUBLIC_ADMIN_URL: ${PUBLIC_ADMIN_URL:-http://localhost:8080}
      SMTP_HOST: ${SMTP_HOST:-}
      SMTP_PORT: ${SMTP_PORT:-587}
      SMTP_USERNAME: ${SMTP_USERNAME:-}
      SMTP_PASSWORD: ${SMTP_PASSWORD:-}
      SMTP_FROM_EMAIL: ${SMTP_FROM_EMAIL:-no-reply@aiproxy.local}
      SMTP_USE_TLS: ${SMTP_USE_TLS:-true}
      MITMPROXY_LOG_LEVEL: ${MITMPROXY_LOG_LEVEL:-WARNING}
      # Prevent Docker Desktop from routing outbound LLM API traffic back through
      # the Windows system proxy (which points to this container on port 8001).
      # Without this, Docker Desktop's system-proxy integration creates a loop:
      # mitmproxy → api.anthropic.com → PAC → PROXY localhost:8001 → mitmproxy.
      NO_PROXY: "api.openai.com,api.anthropic.com,generativelanguage.googleapis.com,api.mistral.ai,api.cohere.ai,api.x.ai,api.perplexity.ai,api.deepseek.com,api.together.xyz,api.groq.com,api.fireworks.ai,api.aleph-alpha.com"
      no_proxy: "api.openai.com,api.anthropic.com,generativelanguage.googleapis.com,api.mistral.ai,api.cohere.ai,api.x.ai,api.perplexity.ai,api.deepseek.com,api.together.xyz,api.groq.com,api.fireworks.ai,api.aleph-alpha.com"
    ports:
      - "${PROXY_PORT:-8000}:8000"
      - "${FORWARD_PROXY_PORT:-8001}:8001"
    volumes:
      - proxy-certs:/app/certs

  aiproxyadmin:
    image: dockitmed/ai-proxy-admin:latest
    restart: unless-stopped
    depends_on:
      - aiproxy
    environment:
      PROXY_API_BASE_URL: http://aiproxy:8000
    ports:
      - "${ADMIN_PORT:-8080}:8080"

  aiproxychat:
    image: dockitmed/ai-proxy-chat:latest
    restart: unless-stopped
    depends_on:
      - aiproxy
    environment:
      PROXY_API_BASE_URL: http://aiproxy:8000
    ports:
      - "${CHAT_PORT:-8082}:8080"

volumes:
  postgres-data:
  proxy-certs:

# ENV.example.txt — nach dem Herunterladen in ".env" umbenennen, Werte anpassen
POSTGRES_DB=aiproxy
POSTGRES_USER=aiproxy
POSTGRES_PASSWORD=aiproxy
POSTGRES_PORT=5432

PROXY_PORT=8000
FORWARD_PROXY_PORT=8001
ADMIN_PORT=8080
CHAT_PORT=8082
MITMPROXY_LOG_LEVEL=WARNING

ADMIN_AUTH_SECRET=change-this-secret
ADMIN_BOOTSTRAP_USERNAME=admin
ADMIN_BOOTSTRAP_PASSWORD=ChangeMe123!

# Self-registration (e.g. for cloud/demo deployments)
ALLOW_SELF_REGISTRATION=false
SELF_REGISTRATION_DEFAULT_ROLE=viewer
SELF_REGISTRATION_RATE_LIMIT=5
SELF_REGISTRATION_RATE_LIMIT_WINDOW_MINUTES=15
PUBLIC_ADMIN_URL=http://localhost:8080

# SMTP settings for self-registration email verification.
# If SMTP_HOST is left empty, verification links are logged instead of emailed (dev/demo fallback).
SMTP_HOST=
SMTP_PORT=587
SMTP_USERNAME=
SMTP_PASSWORD=
SMTP_FROM_EMAIL=no-reply@aiproxy.local
SMTP_USE_TLS=true