diff --git a/apps/open-webui/docker-compose.yml b/apps/open-webui/docker-compose.yml
new file mode 100644
index 0000000..99856f0
--- /dev/null
+++ b/apps/open-webui/docker-compose.yml
@@ -0,0 +1,36 @@
+version: '3.8'
+services:
+  open-webui:
+    image: ghcr.io/open-webui/open-webui:v0.11.4
+    container_name: open-webui
+    volumes:
+      - ${APP_DATA_DIR}/data:/app/backend/data
+    ports:
+      - ${APP_PORT}:8080
+    environment:
+      - OLLAMA_BASE_URL=${OPENWEBUI_OLLAMA_URL}
+      - OPENAI_API_KEY=${OPENWEBUI_OPENAI_KEY}
+    restart: unless-stopped
+    networks:
+      - tipi_main_network
+    labels:
+      traefik.enable: true
+      traefik.http.middlewares.open-webui-web-redirect.redirectscheme.scheme: https
+      traefik.http.services.open-webui.loadbalancer.server.port: 8080
+      traefik.http.routers.open-webui-insecure.rule: Host(`${APP_DOMAIN}`)
+      traefik.http.routers.open-webui-insecure.entrypoints: web
+      traefik.http.routers.open-webui-insecure.service: open-webui
+      traefik.http.routers.open-webui-insecure.middlewares: open-webui-web-redirect
+      traefik.http.routers.open-webui.rule: Host(`${APP_DOMAIN}`)
+      traefik.http.routers.open-webui.entrypoints: websecure
+      traefik.http.routers.open-webui.service: open-webui
+      traefik.http.routers.open-webui.tls.certresolver: myresolver
+      traefik.http.routers.open-webui-local-insecure.rule: Host(`open-webui.${LOCAL_DOMAIN}`)
+      traefik.http.routers.open-webui-local-insecure.entrypoints: web
+      traefik.http.routers.open-webui-local-insecure.service: open-webui
+      traefik.http.routers.open-webui-local-insecure.middlewares: open-webui-web-redirect
+      traefik.http.routers.open-webui-local.rule: Host(`open-webui.${LOCAL_DOMAIN}`)
+      traefik.http.routers.open-webui-local.entrypoints: websecure
+      traefik.http.routers.open-webui-local.service: open-webui
+      traefik.http.routers.open-webui-local.tls: true
+      runtipi.managed: true
\ No newline at end of file