Merge pull request #216 from ollama-webui/dev

feat: full backend support (including auth/rbac)

Merge pull request #216 from ollama-webui/dev
feat: full backend support (including auth/rbac)
fbdae0f7 · Timothy Jaeryang Baek · GitHub · f417a27d · 5abd0ad5 · fbdae0f7
Unverified Commit fbdae0f7 authored Dec 27, 2023 by Timothy Jaeryang Baek Committed by GitHub Dec 27, 2023
20 changed files
--- a/.dockerignore
+++ b/.dockerignore
+.DS_Store
+node_modules
+/.svelte-kit
+/package
+.env
+.env.*
+!.env.example
+vite.config.js.timestamp-*
+vite.config.ts.timestamp-*
+__pycache__
+.env
+_old
+uploads
+.ipynb_checkpoints
+**/*.db
+_test
\ No newline at end of file
--- a/README.md
+++ b/README.md
@@ -57,9 +57,9 @@ Also check our sibling project, [OllamaHub](https://ollamahub.com/), where you c
 - ⚙️ **Fine-Tuned Control with Advanced Parameters**: Gain a deeper level of control by adjusting parameters such as temperature and defining your system prompts to tailor the conversation to your specific preferences and needs.
- 🔐 **Auth Header Support**: Effortlessly enhance security by adding Authorization headers to Ollama requests directly from the web UI settings, ensuring access to secured Ollama servers.
+- 🔗 **External Ollama Server Connection**: Seamlessly link to an external Ollama server hosted on a different address by configuring the environment variable.
- 🔗 **External Ollama Server Connection**: Seamlessly link to an external Ollama server hosted on a different address by configuring the environment variable during the Docker build phase. Additionally, you can also set the external server connection URL from the web UI post-build.
+- 🔐 **Role-Based Access Control (RBAC)**: Ensure secure access with restricted permissions; only authorized individuals can access your Ollama, and exclusive model creation/pulling rights are reserved for administrators.
 - 🔒 **Backend Reverse Proxy Support**: Strengthen security by enabling direct communication between Ollama Web UI backend and Ollama, eliminating the need to expose Ollama over LAN.
@@ -82,13 +82,17 @@ docker compose up -d --build
 This command will install both Ollama and Ollama Web UI on your system.
 #### Enable GPU
 Use the additional Docker Compose file designed to enable GPU support by running the following command:
 ```bash
 docker compose -f docker-compose.yml -f docker-compose.gpu.yml up -d --build
 ```
 #### Expose Ollama API outside the container stack
 Deploy the service with an additional Docker Compose file designed for API exposure:
 ```bash
 docker compose -f docker-compose.yml -f docker-compose.api.yml up -d --build
 ```
@@ -105,17 +109,19 @@ After installing Ollama, verify that Ollama is running by accessing the followin
 #### Using Docker 🐳
+**Important:** When using Docker to install Ollama Web UI, make sure to include the `-v ollama-webui:/app/backend/data` in your Docker command. This step is crucial as it ensures your database is properly mounted and prevents any loss of data.
 If Ollama is hosted on your local machine and accessible at [http://127.0.0.1:11434/](http://127.0.0.1:11434/), run the following command:
 ```bash
-docker run -d -p 3000:8080 --add-host=host.docker.internal:host-gateway --name ollama-webui --restart always ghcr.io/ollama-webui/ollama-webui:main
+docker run -d -p 3000:8080 --add-host=host.docker.internal:host-gateway -v ollama-webui:/app/backend/data --name ollama-webui --restart always ghcr.io/ollama-webui/ollama-webui:main
 ```
 Alternatively, if you prefer to build the container yourself, use the following command:
 ```bash
 docker build -t ollama-webui .
-docker run -d -p 3000:8080 --add-host=host.docker.internal:host-gateway --name ollama-webui --restart always ollama-webui
+docker run -d -p 3000:8080 --add-host=host.docker.internal:host-gateway -v ollama-webui:/app/backend/data --name ollama-webui --restart always ollama-webui
 ```
 Your Ollama Web UI should now be hosted at [http://localhost:3000](http://localhost:3000) and accessible over LAN (or Network). Enjoy! 😄
@@ -125,23 +131,25 @@ Your Ollama Web UI should now be hosted at [http://localhost:3000](http://localh
 Change `OLLAMA_API_BASE_URL` environment variable to match the external Ollama Server url:
 ```bash
-docker run -d -p 3000:8080 -e OLLAMA_API_BASE_URL=https://example.com/api --name ollama-webui --restart always ghcr.io/ollama-webui/ollama-webui:main
+docker run -d -p 3000:8080 -e OLLAMA_API_BASE_URL=https://example.com/api -v ollama-webui:/app/backend/data --name ollama-webui --restart always ghcr.io/ollama-webui/ollama-webui:main
 ```
 Alternatively, if you prefer to build the container yourself, use the following command:
 ```bash
 docker build -t ollama-webui .
-docker run -d -p 3000:8080 -e OLLAMA_API_BASE_URL=https://example.com/api --name ollama-webui --restart always ollama-webui
+docker run -d -p 3000:8080 -e OLLAMA_API_BASE_URL=https://example.com/api -v ollama-webui:/app/backend/data --name ollama-webui --restart always ollama-webui
 ```
 ## How to Install Without Docker
 While we strongly recommend using our convenient Docker container installation for optimal support, we understand that some situations may require a non-Docker setup, especially for development purposes. Please note that non-Docker installations are not officially supported, and you might need to troubleshoot on your own.
-**Warning: Backend Dependency for Proper Functionality**
+### Project Components
+The Ollama Web UI consists of two primary components: the frontend and the backend (which serves as a reverse proxy, handling static frontend files, and additional features). Both need to be running concurrently for the development environment.
-In order to ensure the seamless operation of our application, it is crucial to run both the backend and frontend components simultaneously. Serving only the frontend in isolation is not supported and may lead to unpredictable outcomes, rendering the application inoperable. Attempting to raise an issue when solely serving the frontend will not be addressed, as it falls outside the intended usage. To achieve optimal results, please strictly adhere to the specified steps outlined in this documentation. Utilize the frontend solely for building static files, and subsequently run the complete application with the provided backend commands. Failure to follow these instructions may result in unsupported configurations, and we may not be able to provide assistance in such cases. Your cooperation in following the prescribed procedures is essential for a smooth user experience and effective issue resolution.
+**Warning: Backend Dependency for Proper Functionality**
 ### TL;DR 🚀
@@ -166,86 +174,6 @@ sh start.sh
 You should have the Ollama Web UI up and running at http://localhost:8080/. Enjoy! 😄
-### Project Components
-The Ollama Web UI consists of two primary components: the frontend and the backend (which serves as a reverse proxy, handling static frontend files, and additional features). Both need to be running concurrently for the development environment using `npm run dev`. Alternatively, you can set the `PUBLIC_API_BASE_URL` during the build process to have the frontend connect directly to your Ollama instance or build the frontend as static files and serve them with the backend.
-### Prerequisites
-1. **Clone and Enter the Project:**
-   ```sh
-   git clone https://github.com/ollama-webui/ollama-webui.git
-   cd ollama-webui/
-   ```
-2. **Create and Edit `.env`:**
-   ```sh
-   cp -RPp example.env .env
-   ```
-### Building Ollama Web UI Frontend
-1. **Install Node Dependencies:**
-   ```sh
-   npm install
-   ```
-2. **Run in Dev Mode or Build for Deployment:**
-   - Dev Mode (requires the backend to be running simultaneously):
-     ```sh
-     npm run dev
-     ```
-   - Build for Deployment:
-     ```sh
-     # `PUBLIC_API_BASE_URL` overwrites the value in `.env`
-     PUBLIC_API_BASE_URL='https://example.com/api' npm run build
-     ```
-3. **Test the Build with `Caddy` (or your preferred server):**
-   ```sh
-   curl https://webi.sh/caddy | sh
-   PUBLIC_API_BASE_URL='https://localhost/api' npm run build
-   caddy run --envfile .env --config ./Caddyfile.localhost
-   ```
-### Running Ollama Web UI Backend
-If you wish to run the backend for deployment, ensure that the frontend is built so that the backend can serve the frontend files along with the API route.
-#### Setup Instructions
-1. **Install Python Requirements:**
-   ```sh
-   cd ./backend
-   pip install -r requirements.txt
-   ```
-2. **Run Python Backend:**
-   - Dev Mode with Hot Reloading:
-     ```sh
-     sh dev.sh
-     ```
-   - Deployment:
-     ```sh
-     sh start.sh
-     ```
-Now, you should have the Ollama Web UI up and running at [http://localhost:8080/](http://localhost:8080/). Feel free to explore the features and functionalities of Ollama! If you encounter any issues, please refer to the instructions above or reach out to the community for assistance.
 ## Troubleshooting
 See [TROUBLESHOOTING.md](/TROUBLESHOOTING.md) for information on how to troubleshoot and/or join our [Ollama Web UI Discord community](https://discord.gg/5rJgQTnV4s).
@@ -257,7 +185,10 @@ See [TROUBLESHOOTING.md](/TROUBLESHOOTING.md) for information on how to troubles
 Here are some exciting tasks on our roadmap:
 - 📚 **RAG Integration**: Experience first-class retrieval augmented generation support, enabling chat with your documents.
- 🔐 **Access Control**: Securely manage requests to Ollama by utilizing the backend as a reverse proxy gateway, ensuring only authenticated users can send specific requests.
+- 🌐 **Web Browsing Capability**: Experience the convenience of seamlessly integrating web content directly into your chat. Easily browse and share information without leaving the conversation.
+- 🔄 **Function Calling**: Empower your interactions by running code directly within the chat. Execute functions and commands effortlessly, enhancing the functionality of your conversations.
+- ⚙️ **Custom Python Backend Actions**: Empower your Ollama Web UI by creating or downloading custom Python backend actions. Unleash the full potential of your web interface with tailored actions that suit your specific needs, enhancing functionality and versatility.
+- 🧠 **Long-Term Memory**: Witness the power of persistent memory in our agents. Enjoy conversations that feel continuous as agents remember and reference past interactions, creating a more cohesive and personalized user experience.
 - 🧪 **Research-Centric Features**: Empower researchers in the fields of LLM and HCI with a comprehensive web UI for conducting user studies. Stay tuned for ongoing feature enhancements (e.g., surveys, analytics, and participant tracking) to facilitate their research.
 - 📈 **User Study Tools**: Providing specialized tools, like heat maps and behavior tracking modules, to empower researchers in capturing and analyzing user behavior patterns with precision and accuracy.
 - 📚 **Enhanced Documentation**: Elevate your setup and customization experience with improved, comprehensive documentation.
@@ -270,7 +201,11 @@ A big shoutout to our amazing supporters who's helping to make this project poss
 ### Platinum Sponsors 🤍
- [Prof. Lawrence Kim @ SFU](https://www.lhkim.com/)
+- We're looking for Sponsors!
+### Acknowledgments
+Special thanks to [Prof. Lawrence Kim @ SFU](https://www.lhkim.com/) and [Prof. Nick Vincent @ SFU](https://www.nickmvincent.com/) for their invaluable support and guidance in shaping this project into a research endeavor. Grateful for your mentorship throughout the journey! 🙌
 ## License 📜

--- a/TROUBLESHOOTING.md
+++ b/TROUBLESHOOTING.md
 # Ollama Web UI Troubleshooting Guide
-## Connection Errors
+## Ollama WebUI: Server Connection Error
-Make sure you have the **latest version of Ollama** installed before proceeding with the installation. You can find the latest version of Ollama at [https://ollama.ai/](https://ollama.ai/).
-If you encounter difficulties connecting to the Ollama server, please follow these steps to diagnose and resolve the issue:
-**1. Verify Ollama Server Configuration**
+If you're running ollama-webui and have chosen to install webui and ollama separately, you might encounter connection issues. This is often due to the docker container being unable to reach the Ollama server at 127.0.0.1:11434(host.docker.internal:11434). To resolve this, you can use the `--network=host` flag in the docker command. When done so port would be changed from 3000 to 8080, and the link would be: http://localhost:8080.
-Ensure that the Ollama server is properly configured to accept incoming connections from all origins. To do this, make sure the server is launched with the `OLLAMA_ORIGINS=*` environment variable, as shown in the following command:
+Here's an example of the command you should run:
 ```bash
-OLLAMA_HOST=0.0.0.0 OLLAMA_ORIGINS=* ollama serve
+docker run -d --network=host -e OLLAMA_API_BASE_URL=http://127.0.0.1:11434/api --name ollama-webui --restart always ghcr.io/ollama-webui/ollama-webui:main
 ```
-This configuration allows Ollama to accept connections from any source.
+## Connection Errors
+Make sure you have the **latest version of Ollama** installed before proceeding with the installation. You can find the latest version of Ollama at [https://ollama.ai/](https://ollama.ai/).
+If you encounter difficulties connecting to the Ollama server, please follow these steps to diagnose and resolve the issue:
-**2. Check Ollama URL Format**
+**1. Check Ollama URL Format**
 Ensure that the Ollama URL is correctly formatted in the application settings. Follow these steps:
@@ -28,33 +28,3 @@ Ensure that the Ollama URL is correctly formatted in the application settings. F
 It is crucial to include the `/api` at the end of the URL to ensure that the Ollama Web UI can communicate with the server.
 By following these troubleshooting steps, you should be able to identify and resolve connection issues with your Ollama server configuration. If you require further assistance or have additional questions, please don't hesitate to reach out or refer to our documentation for comprehensive guidance.
-## Running ollama-webui as a container on Apple Silicon Mac
-If you are running Docker on a M{1..3} based Mac and have taken the steps to run an x86 container, add "--platform linux/amd64" to the docker run command to prevent a warning.
-Example:
-```bash
-docker run -d -p 3000:8080 -e OLLAMA_API_BASE_URL=http://example.com:11434/api --name ollama-webui --restart always ghcr.io/ollama-webui/ollama-webui:main
-```
-Becomes
-```
-docker run --platform linux/amd64 -d -p 3000:8080 -e OLLAMA_API_BASE_URL=http://example.com:11434/api --name ollama-webui --restart always ghcr.io/ollama-webui/ollama-webui:main
-```
-## Running ollama-webui as a container on WSL Ubuntu
-If you're running ollama-webui via docker on WSL Ubuntu and have chosen to install webui and ollama separately, you might encounter connection issues. This is often due to the docker container being unable to reach the Ollama server at 127.0.0.1:11434. To resolve this, you can use the `--network=host` flag in the docker command. When done so port would be changed from 3000 to 8080, and the link would be: http://localhost:8080.
-Here's an example of the command you should run:
-```bash
-docker run -d --network=host -e OLLAMA_API_BASE_URL=http://127.0.0.1:11434/api --name ollama-webui --restart always ghcr.io/ollama-webui/ollama-webui:main
-```
-## References
-[Change Docker Desktop Settings on Mac](https://docs.docker.com/desktop/settings/mac/) Search for "x86" in that page.
-[Run x86 (Intel) and ARM based images on Apple Silicon (M1) Macs?](https://forums.docker.com/t/run-x86-intel-and-arm-based-images-on-apple-silicon-m1-macs/117123)
--- a/backend/.dockerignore
+++ b/backend/.dockerignore
+__pycache__
+.env
+_old
+uploads
+.ipynb_checkpoints
+*.db
+_test
\ No newline at end of file
--- a/backend/.gitignore
+++ b/backend/.gitignore
 __pycache__
 .env
 _old
 uploads
\ No newline at end of file
+.ipynb_checkpoints
+*.db
+_test
\ No newline at end of file
--- a/backend/apps/ollama/main.py
+++ b/backend/apps/ollama/main.py
@@ -25,7 +25,7 @@ TARGET_SERVER_URL = OLLAMA_API_BASE_URL
 def proxy(path):
    # Combine the base URL of the target server with the requested path
    target_url = f"{TARGET_SERVER_URL}/{path}"
-    print(path)
+    print(target_url)
    # Get data from the original request
    data = request.get_data()
@@ -61,6 +61,11 @@ def proxy(path):
    r = None
+    headers.pop("Host", None)
+    headers.pop("Authorization", None)
+    headers.pop("Origin", None)
+    headers.pop("Referer", None)
    try:
        # Make a request to the target server
        r = requests.request(
@@ -86,8 +91,10 @@ def proxy(path):
        return response
    except Exception as e:
+        print(e)
        error_detail = "Ollama WebUI: Server Connection Error"
        if r != None:
+            print(r.text)
            res = r.json()
            if "error" in res:
                error_detail = f"Ollama: {res['error']}"

--- a/backend/apps/web/internal/db.py
+++ b/backend/apps/web/internal/db.py
+from peewee import *
+DB = SqliteDatabase("./data/ollama.db")
+DB.connect()
--- a/backend/apps/web/main.py
+++ b/backend/apps/web/main.py
 from fastapi import FastAPI, Request, Depends, HTTPException
 from fastapi.middleware.cors import CORSMiddleware
-from apps.web.routers import auths, users, utils
+from apps.web.routers import auths, users, chats, modelfiles, utils
 from config import WEBUI_VERSION, WEBUI_AUTH
 app = FastAPI()
@@ -19,6 +19,10 @@ app.add_middleware(
 app.include_router(auths.router, prefix="/auths", tags=["auths"])
 app.include_router(users.router, prefix="/users", tags=["users"])
+app.include_router(chats.router, prefix="/chats", tags=["chats"])
+app.include_router(modelfiles.router, prefix="/modelfiles", tags=["modelfiles"])
 app.include_router(utils.router, prefix="/utils", tags=["utils"])

--- a/backend/apps/web/models/auths.py
+++ b/backend/apps/web/models/auths.py
@@ -2,6 +2,7 @@ from pydantic import BaseModel
 from typing import List, Union, Optional
 import time
 import uuid
+from peewee import *
 from apps.web.models.users import UserModel, Users
@@ -12,15 +13,23 @@ from utils.utils import (
    create_token,
 )
-import config
+from apps.web.internal.db import DB
-DB = config.DB
 ####################
 # DB MODEL
 ####################
+class Auth(Model):
+    id = CharField(unique=True)
+    email = CharField()
+    password = CharField()
+    active = BooleanField()
+    class Meta:
+        database = DB
 class AuthModel(BaseModel):
    id: str
    email: str
@@ -64,7 +73,7 @@ class SignupForm(BaseModel):
 class AuthsTable:
    def __init__(self, db):
        self.db = db
-        self.table = db.auths
+        self.db.create_tables([Auth])
    def insert_new_auth(
        self, email: str, password: str, name: str, role: str = "pending"
@@ -76,27 +85,28 @@ class AuthsTable:
        auth = AuthModel(
            **{"id": id, "email": email, "password": password, "active": True}
        )
-        result = self.table.insert_one(auth.model_dump())
+        result = Auth.create(**auth.model_dump())
        user = Users.insert_new_user(id, name, email, role)
-        print(result, user)
        if result and user:
            return user
        else:
            return None
    def authenticate_user(self, email: str, password: str) -> Optional[UserModel]:
-        print("authenticate_user")
+        print("authenticate_user", email)
+        try:
-        auth = self.table.find_one({"email": email, "active": True})
+            auth = Auth.get(Auth.email == email, Auth.active == True)
+            if auth:
-        if auth:
+                if verify_password(password, auth.password):
-            if verify_password(password, auth["password"]):
+                    user = Users.get_user_by_id(auth.id)
-                user = self.db.users.find_one({"id": auth["id"]})
+                    return user
-                return UserModel(**user)
+                else:
+                    return None
            else:
                return None
-        else:
+        except:
            return None

--- a/backend/apps/web/models/chats.py
+++ b/backend/apps/web/models/chats.py
+from pydantic import BaseModel
+from typing import List, Union, Optional
+from peewee import *
+from playhouse.shortcuts import model_to_dict
+import json
+import uuid
+import time
+from apps.web.internal.db import DB
+####################
+# Chat DB Schema
+####################
+class Chat(Model):
+    id = CharField(unique=True)
+    user_id = CharField()
+    title = CharField()
+    chat = TextField()  # Save Chat JSON as Text
+    timestamp = DateField()
+    class Meta:
+        database = DB
+class ChatModel(BaseModel):
+    id: str
+    user_id: str
+    title: str
+    chat: str
+    timestamp: int  # timestamp in epoch
+####################
+# Forms
+####################
+class ChatForm(BaseModel):
+    chat: dict
+class ChatTitleForm(BaseModel):
+    title: str
+class ChatResponse(BaseModel):
+    id: str
+    user_id: str
+    title: str
+    chat: dict
+    timestamp: int  # timestamp in epoch
+class ChatTitleIdResponse(BaseModel):
+    id: str
+    title: str
+class ChatTable:
+    def __init__(self, db):
+        self.db = db
+        db.create_tables([Chat])
+    def insert_new_chat(self, user_id: str, form_data: ChatForm) -> Optional[ChatModel]:
+        id = str(uuid.uuid4())
+        chat = ChatModel(
+            **{
+                "id": id,
+                "user_id": user_id,
+                "title": form_data.chat["title"]
+                if "title" in form_data.chat
+                else "New Chat",
+                "chat": json.dumps(form_data.chat),
+                "timestamp": int(time.time()),
+            }
+        )
+        result = Chat.create(**chat.model_dump())
+        return chat if result else None
+    def update_chat_by_id(self, id: str, chat: dict) -> Optional[ChatModel]:
+        try:
+            query = Chat.update(
+                chat=json.dumps(chat),
+                title=chat["title"] if "title" in chat else "New Chat",
+                timestamp=int(time.time()),
+            ).where(Chat.id == id)
+            query.execute()
+            chat = Chat.get(Chat.id == id)
+            return ChatModel(**model_to_dict(chat))
+        except:
+            return None
+    def update_chat_by_id(self, id: str, chat: dict) -> Optional[ChatModel]:
+        try:
+            query = Chat.update(
+                chat=json.dumps(chat),
+                title=chat["title"] if "title" in chat else "New Chat",
+                timestamp=int(time.time()),
+            ).where(Chat.id == id)
+            query.execute()
+            chat = Chat.get(Chat.id == id)
+            return ChatModel(**model_to_dict(chat))
+        except:
+            return None
+    def get_chat_lists_by_user_id(
+        self, user_id: str, skip: int = 0, limit: int = 50
+    ) -> List[ChatModel]:
+        return [
+            ChatModel(**model_to_dict(chat))
+            for chat in Chat.select()
+            .where(Chat.user_id == user_id)
+            .order_by(Chat.timestamp.desc())
+            # .limit(limit)
+            # .offset(skip)
+        ]
+    def get_all_chats_by_user_id(self, user_id: str) -> List[ChatModel]:
+        return [
+            ChatModel(**model_to_dict(chat))
+            for chat in Chat.select()
+            .where(Chat.user_id == user_id)
+            .order_by(Chat.timestamp.desc())
+        ]
+    def get_chat_by_id_and_user_id(self, id: str, user_id: str) -> Optional[ChatModel]:
+        try:
+            chat = Chat.get(Chat.id == id, Chat.user_id == user_id)
+            return ChatModel(**model_to_dict(chat))
+        except:
+            return None
+    def get_chats(self, skip: int = 0, limit: int = 50) -> List[ChatModel]:
+        return [
+            ChatModel(**model_to_dict(chat))
+            for chat in Chat.select().limit(limit).offset(skip)
+        ]
+    def delete_chat_by_id_and_user_id(self, id: str, user_id: str) -> bool:
+        try:
+            query = Chat.delete().where((Chat.id == id) & (Chat.user_id == user_id))
+            query.execute()  # Remove the rows, return number of rows removed.
+            return True
+        except:
+            return False
+Chats = ChatTable(DB)
--- a/backend/apps/web/models/modelfiles.py
+++ b/backend/apps/web/models/modelfiles.py
+from pydantic import BaseModel
+from peewee import *
+from playhouse.shortcuts import model_to_dict
+from typing import List, Union, Optional
+import time
+from utils.utils import decode_token
+from utils.misc import get_gravatar_url
+from apps.web.internal.db import DB
+import json
+####################
+# User DB Schema
+####################
+class Modelfile(Model):
+    tag_name = CharField(unique=True)
+    user_id = CharField()
+    modelfile = TextField()
+    timestamp = DateField()
+    class Meta:
+        database = DB
+class ModelfileModel(BaseModel):
+    tag_name: str
+    user_id: str
+    modelfile: str
+    timestamp: int  # timestamp in epoch
+####################
+# Forms
+####################
+class ModelfileForm(BaseModel):
+    modelfile: dict
+class ModelfileTagNameForm(BaseModel):
+    tag_name: str
+class ModelfileUpdateForm(ModelfileForm, ModelfileTagNameForm):
+    pass
+class ModelfileResponse(BaseModel):
+    tag_name: str
+    user_id: str
+    modelfile: dict
+    timestamp: int  # timestamp in epoch
+class ModelfilesTable:
+    def __init__(self, db):
+        self.db = db
+        self.db.create_tables([Modelfile])
+    def insert_new_modelfile(
+        self, user_id: str, form_data: ModelfileForm
+    ) -> Optional[ModelfileModel]:
+        if "tagName" in form_data.modelfile:
+            modelfile = ModelfileModel(
+                **{
+                    "user_id": user_id,
+                    "tag_name": form_data.modelfile["tagName"],
+                    "modelfile": json.dumps(form_data.modelfile),
+                    "timestamp": int(time.time()),
+                }
+            )
+            try:
+                result = Modelfile.create(**modelfile.model_dump())
+                if result:
+                    return modelfile
+                else:
+                    return None
+            except:
+                return None
+        else:
+            return None
+    def get_modelfile_by_tag_name(self, tag_name: str) -> Optional[ModelfileModel]:
+        try:
+            modelfile = Modelfile.get(Modelfile.tag_name == tag_name)
+            return ModelfileModel(**model_to_dict(modelfile))
+        except:
+            return None
+    def get_modelfiles(self, skip: int = 0, limit: int = 50) -> List[ModelfileResponse]:
+        return [
+            ModelfileResponse(
+                **{
+                    **model_to_dict(modelfile),
+                    "modelfile": json.loads(modelfile.modelfile),
+                }
+            )
+            for modelfile in Modelfile.select()
+            # .limit(limit).offset(skip)
+        ]
+    def update_modelfile_by_tag_name(
+        self, tag_name: str, modelfile: dict
+    ) -> Optional[ModelfileModel]:
+        try:
+            query = Modelfile.update(
+                modelfile=json.dumps(modelfile),
+                timestamp=int(time.time()),
+            ).where(Modelfile.tag_name == tag_name)
+            query.execute()
+            modelfile = Modelfile.get(Modelfile.tag_name == tag_name)
+            return ModelfileModel(**model_to_dict(modelfile))
+        except:
+            return None
+    def delete_modelfile_by_tag_name(self, tag_name: str) -> bool:
+        try:
+            query = Modelfile.delete().where((Modelfile.tag_name == tag_name))
+            query.execute()  # Remove the rows, return number of rows removed.
+            return True
+        except:
+            return False
+Modelfiles = ModelfilesTable(DB)
--- a/backend/apps/web/models/users.py
+++ b/backend/apps/web/models/users.py
 from pydantic import BaseModel
+from peewee import *
+from playhouse.shortcuts import model_to_dict
 from typing import List, Union, Optional
-from pymongo import ReturnDocument
 import time
 from utils.utils import decode_token
 from utils.misc import get_gravatar_url
-from config import DB
+from apps.web.internal.db import DB
 ####################
 # User DB Schema
 ####################
+class User(Model):
+    id = CharField(unique=True)
+    name = CharField()
+    email = CharField()
+    role = CharField()
+    profile_image_url = CharField()
+    timestamp = DateField()
+    class Meta:
+        database = DB
 class UserModel(BaseModel):
    id: str
    name: str
    email: str
    role: str = "pending"
    profile_image_url: str = "/user.png"
-    created_at: int  # timestamp in epoch
+    timestamp: int  # timestamp in epoch
 ####################
@@ -35,7 +48,7 @@ class UserRoleUpdateForm(BaseModel):
 class UsersTable:
    def __init__(self, db):
        self.db = db
-        self.table = db.users
+        self.db.create_tables([User])
    def insert_new_user(
        self, id: str, name: str, email: str, role: str = "pending"
@@ -47,22 +60,27 @@ class UsersTable:
                "email": email,
                "role": role,
                "profile_image_url": get_gravatar_url(email),
-                "created_at": int(time.time()),
+                "timestamp": int(time.time()),
            }
        )
-        result = self.table.insert_one(user.model_dump())
+        result = User.create(**user.model_dump())
        if result:
            return user
        else:
            return None
-    def get_user_by_email(self, email: str) -> Optional[UserModel]:
+    def get_user_by_id(self, id: str) -> Optional[UserModel]:
-        user = self.table.find_one({"email": email}, {"_id": False})
+        try:
+            user = User.get(User.id == id)
+            return UserModel(**model_to_dict(user))
+        except:
+            return None
-        if user:
+    def get_user_by_email(self, email: str) -> Optional[UserModel]:
-            return UserModel(**user)
+        try:
-        else:
+            user = User.get(User.email == email)
+            return UserModel(**model_to_dict(user))
+        except:
            return None
    def get_user_by_token(self, token: str) -> Optional[UserModel]:
@@ -75,23 +93,22 @@ class UsersTable:
    def get_users(self, skip: int = 0, limit: int = 50) -> List[UserModel]:
        return [
-            UserModel(**user)
+            UserModel(**model_to_dict(user))
-            for user in list(
+            for user in User.select().limit(limit).offset(skip)
-                self.table.find({}, {"_id": False}).skip(skip).limit(limit)
-            )
        ]
    def get_num_users(self) -> Optional[int]:
-        return self.table.count_documents({})
+        return User.select().count()
-    def update_user_by_id(self, id: str, updated: dict) -> Optional[UserModel]:
-        user = self.table.find_one_and_update(
-            {"id": id}, {"$set": updated}, return_document=ReturnDocument.AFTER
-        )
-        return UserModel(**user)
    def update_user_role_by_id(self, id: str, role: str) -> Optional[UserModel]:
-        return self.update_user_by_id(id, {"role": role})
+        try:
+            query = User.update(role=role).where(User.id == id)
+            query.execute()
+            user = User.get(User.id == id)
+            return UserModel(**model_to_dict(user))
+        except:
+            return None
 Users = UsersTable(DB)
--- a/backend/apps/web/routers/auths.py
+++ b/backend/apps/web/routers/auths.py
@@ -104,8 +104,8 @@ async def signup(form_data: SignupForm):
                    "profile_image_url": user.profile_image_url,
                }
            else:
-                raise HTTPException(500, detail=ERROR_MESSAGES.DEFAULT(err))
+                raise HTTPException(500, detail=ERROR_MESSAGES.CREATE_USER_ERROR)
        except Exception as err:
            raise HTTPException(500, detail=ERROR_MESSAGES.DEFAULT(err))
    else:
-        raise HTTPException(400, detail=ERROR_MESSAGES.DEFAULT())
+        raise HTTPException(400, detail=ERROR_MESSAGES.EMAIL_TAKEN)
--- a/backend/apps/web/routers/chats.py
+++ b/backend/apps/web/routers/chats.py
+from fastapi import Response
+from fastapi import Depends, FastAPI, HTTPException, status
+from datetime import datetime, timedelta
+from typing import List, Union, Optional
+from fastapi import APIRouter
+from pydantic import BaseModel
+import json
+from apps.web.models.users import Users
+from apps.web.models.chats import (
+    ChatModel,
+    ChatResponse,
+    ChatTitleForm,
+    ChatForm,
+    ChatTitleIdResponse,
+    Chats,
+)
+from utils.utils import (
+    bearer_scheme,
+)
+from constants import ERROR_MESSAGES
+router = APIRouter()
+############################
+# GetChats
+############################
+@router.get("/", response_model=List[ChatTitleIdResponse])
+async def get_user_chats(skip: int = 0, limit: int = 50, cred=Depends(bearer_scheme)):
+    token = cred.credentials
+    user = Users.get_user_by_token(token)
+    if user:
+        return Chats.get_chat_lists_by_user_id(user.id, skip, limit)
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.INVALID_TOKEN,
+        )
+############################
+# GetAllChats
+############################
+@router.get("/all", response_model=List[ChatResponse])
+async def get_all_user_chats(cred=Depends(bearer_scheme)):
+    token = cred.credentials
+    user = Users.get_user_by_token(token)
+    if user:
+        return [
+            ChatResponse(**{**chat.model_dump(), "chat": json.loads(chat.chat)})
+            for chat in Chats.get_all_chats_by_user_id(user.id)
+        ]
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.INVALID_TOKEN,
+        )
+############################
+# CreateNewChat
+############################
+@router.post("/new", response_model=Optional[ChatResponse])
+async def create_new_chat(form_data: ChatForm, cred=Depends(bearer_scheme)):
+    token = cred.credentials
+    user = Users.get_user_by_token(token)
+    if user:
+        chat = Chats.insert_new_chat(user.id, form_data)
+        return ChatResponse(**{**chat.model_dump(), "chat": json.loads(chat.chat)})
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.INVALID_TOKEN,
+        )
+############################
+# GetChatById
+############################
+@router.get("/{id}", response_model=Optional[ChatResponse])
+async def get_chat_by_id(id: str, cred=Depends(bearer_scheme)):
+    token = cred.credentials
+    user = Users.get_user_by_token(token)
+    if user:
+        chat = Chats.get_chat_by_id_and_user_id(id, user.id)
+        if chat:
+            return ChatResponse(**{**chat.model_dump(), "chat": json.loads(chat.chat)})
+        else:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail=ERROR_MESSAGES.NOT_FOUND,
+            )
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.INVALID_TOKEN,
+        )
+############################
+# UpdateChatById
+############################
+@router.post("/{id}", response_model=Optional[ChatResponse])
+async def update_chat_by_id(id: str, form_data: ChatForm, cred=Depends(bearer_scheme)):
+    token = cred.credentials
+    user = Users.get_user_by_token(token)
+    if user:
+        chat = Chats.get_chat_by_id_and_user_id(id, user.id)
+        if chat:
+            updated_chat = {**json.loads(chat.chat), **form_data.chat}
+            chat = Chats.update_chat_by_id(id, updated_chat)
+            return ChatResponse(**{**chat.model_dump(), "chat": json.loads(chat.chat)})
+        else:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail=ERROR_MESSAGES.ACCESS_PROHIBITED,
+            )
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.INVALID_TOKEN,
+        )
+############################
+# DeleteChatById
+############################
+@router.delete("/{id}", response_model=bool)
+async def delete_chat_by_id(id: str, cred=Depends(bearer_scheme)):
+    token = cred.credentials
+    user = Users.get_user_by_token(token)
+    if user:
+        result = Chats.delete_chat_by_id_and_user_id(id, user.id)
+        return result
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.INVALID_TOKEN,
+        )
--- a/backend/apps/web/routers/modelfiles.py
+++ b/backend/apps/web/routers/modelfiles.py
+from fastapi import Response
+from fastapi import Depends, FastAPI, HTTPException, status
+from datetime import datetime, timedelta
+from typing import List, Union, Optional
+from fastapi import APIRouter
+from pydantic import BaseModel
+import json
+from apps.web.models.users import Users
+from apps.web.models.modelfiles import (
+    Modelfiles,
+    ModelfileForm,
+    ModelfileTagNameForm,
+    ModelfileUpdateForm,
+    ModelfileResponse,
+)
+from utils.utils import (
+    bearer_scheme,
+)
+from constants import ERROR_MESSAGES
+router = APIRouter()
+############################
+# GetModelfiles
+############################
+@router.get("/", response_model=List[ModelfileResponse])
+async def get_modelfiles(skip: int = 0, limit: int = 50, cred=Depends(bearer_scheme)):
+    token = cred.credentials
+    user = Users.get_user_by_token(token)
+    if user:
+        return Modelfiles.get_modelfiles(skip, limit)
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.INVALID_TOKEN,
+        )
+############################
+# CreateNewModelfile
+############################
+@router.post("/create", response_model=Optional[ModelfileResponse])
+async def create_new_modelfile(form_data: ModelfileForm, cred=Depends(bearer_scheme)):
+    token = cred.credentials
+    user = Users.get_user_by_token(token)
+    if user:
+        # Admin Only
+        if user.role == "admin":
+            modelfile = Modelfiles.insert_new_modelfile(user.id, form_data)
+            if modelfile:
+                return ModelfileResponse(
+                    **{
+                        **modelfile.model_dump(),
+                        "modelfile": json.loads(modelfile.modelfile),
+                    }
+                )
+            else:
+                raise HTTPException(
+                    status_code=status.HTTP_401_UNAUTHORIZED,
+                    detail=ERROR_MESSAGES.DEFAULT(),
+                )
+        else:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail=ERROR_MESSAGES.ACCESS_PROHIBITED,
+            )
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.INVALID_TOKEN,
+        )
+############################
+# GetModelfileByTagName
+############################
+@router.post("/", response_model=Optional[ModelfileResponse])
+async def get_modelfile_by_tag_name(
+    form_data: ModelfileTagNameForm, cred=Depends(bearer_scheme)
+):
+    token = cred.credentials
+    user = Users.get_user_by_token(token)
+    if user:
+        modelfile = Modelfiles.get_modelfile_by_tag_name(form_data.tag_name)
+        if modelfile:
+            return ModelfileResponse(
+                **{
+                    **modelfile.model_dump(),
+                    "modelfile": json.loads(modelfile.modelfile),
+                }
+            )
+        else:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail=ERROR_MESSAGES.NOT_FOUND,
+            )
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.INVALID_TOKEN,
+        )
+############################
+# UpdateModelfileByTagName
+############################
+@router.post("/update", response_model=Optional[ModelfileResponse])
+async def update_modelfile_by_tag_name(
+    form_data: ModelfileUpdateForm, cred=Depends(bearer_scheme)
+):
+    token = cred.credentials
+    user = Users.get_user_by_token(token)
+    if user:
+        if user.role == "admin":
+            modelfile = Modelfiles.get_modelfile_by_tag_name(form_data.tag_name)
+            if modelfile:
+                updated_modelfile = {
+                    **json.loads(modelfile.modelfile),
+                    **form_data.modelfile,
+                }
+                modelfile = Modelfiles.update_modelfile_by_tag_name(
+                    form_data.tag_name, updated_modelfile
+                )
+                return ModelfileResponse(
+                    **{
+                        **modelfile.model_dump(),
+                        "modelfile": json.loads(modelfile.modelfile),
+                    }
+                )
+            else:
+                raise HTTPException(
+                    status_code=status.HTTP_401_UNAUTHORIZED,
+                    detail=ERROR_MESSAGES.ACCESS_PROHIBITED,
+                )
+        else:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail=ERROR_MESSAGES.ACCESS_PROHIBITED,
+            )
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.INVALID_TOKEN,
+        )
+############################
+# DeleteModelfileByTagName
+############################
+@router.delete("/delete", response_model=bool)
+async def delete_modelfile_by_tag_name(
+    form_data: ModelfileTagNameForm, cred=Depends(bearer_scheme)
+):
+    token = cred.credentials
+    user = Users.get_user_by_token(token)
+    if user:
+        if user.role == "admin":
+            result = Modelfiles.delete_modelfile_by_tag_name(form_data.tag_name)
+            return result
+        else:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail=ERROR_MESSAGES.ACCESS_PROHIBITED,
+            )
+    else:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail=ERROR_MESSAGES.INVALID_TOKEN,
+        )
--- a/backend/config.py
+++ b/backend/config.py
 from dotenv import load_dotenv, find_dotenv
-from pymongo import MongoClient
 from constants import ERROR_MESSAGES
 from secrets import token_bytes
 from base64 import b64encode
 import os
 load_dotenv(find_dotenv("../.env"))
@@ -30,30 +31,13 @@ if ENV == "prod":
 # WEBUI_VERSION
 ####################################
-WEBUI_VERSION = os.environ.get("WEBUI_VERSION", "v1.0.0-alpha.40")
+WEBUI_VERSION = os.environ.get("WEBUI_VERSION", "v1.0.0-alpha.42")
-####################################
-# WEBUI_AUTH
-####################################
-WEBUI_AUTH = True if os.environ.get("WEBUI_AUTH", "FALSE") == "TRUE" else False
 ####################################
-# WEBUI_DB (Deprecated, Should be removed)
+# WEBUI_AUTH (Required for security)
 ####################################
+WEBUI_AUTH = True
-WEBUI_DB_URL = os.environ.get("WEBUI_DB_URL", "mongodb://root:root@localhost:27017/")
-if WEBUI_AUTH and WEBUI_DB_URL == "":
-    raise ValueError(ERROR_MESSAGES.ENV_VAR_NOT_FOUND)
-DB_CLIENT = MongoClient(f"{WEBUI_DB_URL}?authSource=admin")
-DB = DB_CLIENT["ollama-webui"]
 ####################################
 # WEBUI_JWT_SECRET_KEY

--- a/backend/constants.py
+++ b/backend/constants.py
@@ -11,6 +11,11 @@ class ERROR_MESSAGES(str, Enum):
    DEFAULT = lambda err="": f"Something went wrong :/\n{err if err else ''}"
    ENV_VAR_NOT_FOUND = "Required environment variable not found. Terminating now."
+    CREATE_USER_ERROR = "Oops! Something went wrong while creating your account. Please try again later. If the issue persists, contact support for assistance."
+    EMAIL_TAKEN = "Uh-oh! This email is already registered. Sign in with your existing account or choose another email to start anew."
+    USERNAME_TAKEN = (
+        "Uh-oh! This username is already registered. Please choose another username."
+    )
    INVALID_TOKEN = (
        "Your session has expired or the token is invalid. Please sign in again."
    )
@@ -20,5 +25,6 @@ class ERROR_MESSAGES(str, Enum):
    ACTION_PROHIBITED = (
        "The requested action has been restricted as a security measure."
    )
+    NOT_FOUND = "We could not find what you're looking for :/"
    USER_NOT_FOUND = "We could not find what you're looking for :/"
    MALICIOUS = "Unusual activities detected, please try again in a few minutes."
--- a/backend/data/readme.txt
+++ b/backend/data/readme.txt
+dir for backend files (db, documents, etc.)
\ No newline at end of file
--- a/backend/dev.sh
+++ b/backend/dev.sh
-uvicorn main:app --port 8080 --reload
+uvicorn main:app --port 8080 --host 0.0.0.0 --reload
\ No newline at end of file
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -13,8 +13,8 @@ uuid
 requests
 aiohttp
-pymongo
+peewee
 bcrypt
 PyJWT
 pyjwt[crypto]
\ No newline at end of file