* docs: complete env reference; troubleshooting keyed on real error messages
Configuration (docs/5-CONFIGURATION):
- environment-reference.md is now the single complete list, checked
against the code and the content-core, esperanto, surreal-commands and
langsmith libraries: adds the undocumented variables, a "Read by"
column, correct defaults (SURREAL_COMMANDS_RETRY_ENABLED=false,
WAIT_MAX=60, LANGCHAIN_PROJECT=default, SurrealDB defaults), which
legacy provider vars Migrate to Database copies, and a table of
variables nothing reads.
- security.md: PBKDF2 derivation, POST /api/credentials/migrate-encryption
with the back-up-first / no-downgrade warning, password stored in
localStorage, full list of unauthenticated paths, real upload endpoint.
- reverse-proxy.md: drop v1.0 legacy sections and the non-existent
multi-container images; real /api/config output; how API_URL
auto-detection works; the 100 MB Next.js proxy cap.
- ai-providers.md, ollama.md, openai-compatible.md: one shared setup
procedure with current UI labels, provider/modality table from
provider_registry.py, no stale model lists or prices; Ollama
num_ctx and 180 s ESPERANTO_LLM_TIMEOUT; Azure form limits.
- local-tts.md is the shared Speaches page; local-stt.md keeps only
STT specifics (Whisper models, CCORE_AUDIO_SEGMENT_MINUTES).
- advanced.md, index.md, database.md: link to the reference instead of
re-listing variables; fix service names, port changes, backups.
Troubleshooting (docs/6-TROUBLESHOOTING):
- Entries start with the exact message from the code or the en-US
locale. New processing-issues.md covers queued/failed sources (the
content-core failure reasons), uploads, search, podcasts (profile
errors and NOTE hints). ai-chat-issues.md covers timeouts, error
classifier messages, empty responses, Ollama context, encryption
key and decryption errors.
- Removed invented entries ("too many connections", "Model is not a
LanguageModel: None", soft delete, retry vars as a connection fix).
SECURITY_REVIEW.md is marked as a historical January 2026 snapshot of
the credentials UI, with the SSRF and security-warning rows corrected.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: address review on configuration and troubleshooting pages
- No predictable keys or passwords: placeholders plus the openssl /
PowerShell generation commands used by the install docs.
- Every 0.0.0.0 bind and firewall rule (Ollama, OpenAI-compatible
servers, Speaches, LAN access) restricted to the host and Docker
networks or the LAN, with an explicit exposure warning.
- Diagnostic commands no longer print secrets.
- systemd drop-in includes [Service]; Traefik middleware attached to
the router.
- Provider pages link to Connect a provider (#1459) instead of
repeating steps; Vertex and keyless local providers called out;
"Add Selected" (a select-all toggle) no longer described as the add
button; "Manage -> Models" instead of "the Models page".
- Startup database failure described correctly (API down, not the
Database Connection Failed overlay); worker crash causes, Test
timeout/404 meanings, .env overrides when moving servers, frontend
restart from source, privacy claims scoped to self-hosted servers.
- Drop claims about bugs fixed in #1457; restore the ollama.md
GPU acceleration anchor used by quick-start-local.md.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: address second review round on configuration pages
- Anthropic Compatible always needs an API key and a Base URL
(enforced in api/models.py), noted in the provider differences.
- Speaches firewall guidance covers a separate Open Notebook host.
- The password check mirrors get_secret_from_env: a readable,
non-empty _FILE wins, otherwise the variable; never prints values.
- From source, frontend variables go in frontend/.env.local or the
shell: `make frontend` runs `next dev` in frontend/, which doesn't
read the root .env.
- The env listing prints every variable name, without values.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: correct the default API path for the frontend; deduplicate
Without API_URL the browser calls <host>:5055 directly (the /config
route auto-detects it); INTERNAL_API_URL only serves requests that hit
the Next.js /api forwarding. Full explanation stays in the environment
reference; the configuration index links to it.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: upload limit depends on whether API calls go through the frontend proxy
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
6.1 KiB
OpenAI-Compatible Providers
The OpenAI Compatible provider connects Open Notebook to any server that speaks the OpenAI API: LM Studio, vLLM, llama.cpp's server, LocalAI, Text Generation WebUI, Speaches and many hosted gateways. It supports language, embedding, speech-to-text and text-to-speech models.
For Ollama and oMLX, prefer their native providers: Ollama, oMLX.
Setup
- Start your server and note its address, including the API path (usually
/v1). - Follow Connect a provider and pick OpenAI Compatible. In the form:
- Configuration Name, e.g. "LM Studio"
- API Key: optional. Leave it empty if the server doesn't check keys; some servers want any non-empty value
- Base URL: the server's API root, e.g.
http://host.docker.internal:1234/v1
- Test asks the server for its model list (
GET <Base URL>/models). If the server doesn't list a model, type its exact id in the Discover Models search box and click Add "…".
One configuration has one Base URL. To use different servers for different jobs (LM Studio for chat, Speaches for speech), add one OpenAI Compatible configuration per server. Each model you register remembers which configuration it came from.
Base URL from inside Docker
localhost inside the Open Notebook container is the container itself.
| Your server runs | Base URL |
|---|---|
| On the host, Docker Desktop (macOS/Windows) | http://host.docker.internal:<port>/v1 |
| On the host, Linux | http://host.docker.internal:<port>/v1 after adding extra_hosts: ["host.docker.internal:host-gateway"] to the open_notebook service, or the bridge IP http://172.17.0.1:<port>/v1 |
| In the same compose file | http://<service-name>:<container-port>/v1 |
| On another machine | http://<server-ip>:<port>/v1 |
| Open Notebook from source, server on the same machine | http://localhost:<port>/v1 |
The server must listen on an address the container can reach, often 0.0.0.0 rather than 127.0.0.1. Binding to 0.0.0.0 exposes the server, usually without authentication, on every network interface: allow its port only from this host and its Docker networks (for example with your firewall), never from untrusted networks.
Check from inside the container:
docker compose exec open_notebook curl -s http://host.docker.internal:1234/v1/models
LM Studio
- In LM Studio, load a model and start the local server (default port 1234). Enable "Serve on Local Network" if Open Notebook runs in Docker on Linux or on another machine.
- Base URL:
http://host.docker.internal:1234/v1(Open Notebook in Docker) orhttp://localhost:1234/v1(from source). No API key.
vLLM
vllm serve meta-llama/Llama-3.1-8B-Instruct --port 8001
Base URL http://host.docker.internal:8001/v1. The model id is the Hugging Face path you served. Avoid port 8000 on the host if SurrealDB already uses it.
In the same compose file:
services:
vllm:
image: vllm/vllm-openai:latest
command: --model meta-llama/Llama-3.1-8B-Instruct
volumes:
- ~/.cache/huggingface:/root/.cache/huggingface
deploy:
resources:
reservations:
devices:
- driver: nvidia
count: 1
capabilities: [gpu]
Base URL http://vllm:8000/v1 (the container port; no host port needs to be published).
llama.cpp server
llama-server -m model.gguf --host 0.0.0.0 --port 8080 # restrict port 8080 as described above
Base URL http://host.docker.internal:8080/v1. If embeddings fail with null values on very short chunks, see OPEN_NOTEBOOK_MIN_CHUNK_SIZE in the Environment Reference.
Text Generation WebUI
Start it with --api --listen; its OpenAI-compatible API listens on port 5000. Base URL http://host.docker.internal:5000/v1.
Speech servers
For local text-to-speech and speech-to-text with Speaches, see Local speech with Speaches.
Troubleshooting
| Message from Test | Cause | Fix |
|---|---|---|
| "Cannot connect to server. Check the URL is correct." | Nothing answers at that address, or TLS verification failed | Check the Base URL from inside the container (curl above). For HTTPS with a private CA, set ESPERANTO_SSL_CA_BUNDLE (Advanced → SSL) |
| "Connection timed out. Check if server is accessible." | The /models request got no answer within 10 seconds: firewall dropping packets, wrong IP, or an unresponsive server |
Check reachability from the container and the server's logs |
| "Invalid API key" | The server checks keys and the one saved doesn't match | Edit the configuration and set the key |
| "Server returned status 404" | <Base URL>/models doesn't exist: the API path (usually /v1) is missing, or the server doesn't support listing models |
Check the API path. If the server can't list models, the test can't pass, but you can still add models by id |
During use:
- Model not found: the id you registered doesn't match what the server serves. Compare with
curl <base-url>/modelsand re-add the model with the exact id. - Slow answers fail after three minutes: model calls are limited by
ESPERANTO_LLM_TIMEOUT(180 s). The error reads "The AI provider took too long to respond. Try again, use a faster model, or raise ESPERANTO_LLM_TIMEOUT (180 seconds by default)." Raise it in theopen_notebookenvironment, below 600, and setOPEN_NOTEBOOK_WORKER_MAX_TASKS=1if one GPU serves everything. Details in Advanced → Model call timeout.
Legacy environment variables
OPENAI_COMPATIBLE_BASE_URL / OPENAI_COMPATIBLE_API_KEY and their per-modality variants (_LLM, _EMBEDDING, _STT, _TTS) are a deprecated fallback. Migrate to Database copies only the generic pair. See the Environment Reference.