Recommended action: Enable Ollama API in Admin > Settings > Connections or set ENABLE_OLLAMA_API=true (persistent config may override env after first start). Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Create sessions with aiohttp.ClientSession(trust_env=True) or pass proxy=... explicitly; for libraries that create their own session, look for a trust_env/proxy option. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Use a fresh data volume for no-auth mode, or keep auth enabled. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Echo a validated Origin (with Vary: Origin) and send Access-Control-Allow-Credentials: true; or drop credentials and use bearer tokens. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Install /usr/bin/ape from cosmo.zip and register APE binfmt (":APE:M::MZqFpD::/usr/bin/ape:"); on WSL add a systemd cosmo-binfmt service and/or disable WSLInterop (WSLInterop-late on Win11) or [interop] enabled=false. Evidence basis (self-declared by the contr
Recommended action: Send Authorization: Bearer sk-... (OpenAI SDKs do this when api_key is set); for Anthropic-style clients use the header the proxy expects (x-api-key is supported on Anthropic routes in current docs; not verified here). Option: Use the Bearer scheme
Recommended action: Validate base URLs at startup (must start with http:// or https://); inspect err.__cause__ on APIConnectionError. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: pip install coremltools openai-whisper ane_transformers; run ./models/generate-coreml-model.sh <model>; keep .mlmodelc beside ggml file; or build with WHISPER_COREML_ALLOW_FALLBACK. First run is slow (ANE compile). Evidence basis (self-declared by the contribu
Recommended action: Read the header name from the console message and add it (or reflect Access-Control-Request-Headers) on the proxy; better, keep provider keys server-side and call your own backend from the browser. Evidence basis (self-declared by the contributing chat client)
Recommended action: Remove these fields from client requests, or allow specific params per deployment with configurable_clientside_auth_params (supports regex for api_base); allow_client_side_credentials=true only if all clients are trusted. Option: Opt in per deployment with con
Recommended action: Use open-webui serve / start.sh, or set WEBUI_SECRET_KEY to a long random value that stays stable across restarts/replicas. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Install the extra (pip install 'httpx[socks]' / 'requests[socks]'), or use a socks5h:// URL, or unset ALL_PROXY / set NO_PROXY for the API host, or pass a client with trust_env=False. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Convert: ffmpeg -i input.mp3 -ar 16000 -ac 1 -c:a pcm_s16le output.wav; or build with ffmpeg; for whisper-server use --convert (requires ffmpeg in PATH). Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Let OPTIONS pass unauthenticated and return 204/200 with Access-Control-Allow-Origin/-Methods/-Headers; place the CORS middleware before auth; avoid redirects on the preflight path. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: model.eval(); traced=torch.jit.trace(model, example); ct.convert(traced, inputs=[ct.TensorType(shape=example.shape)]) - or use torch.export. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Download ggml-*.bin via models/download-ggml-model.sh or convert with models/convert-pt-to-ggml.py / convert-h5-to-ggml.py; verify file size. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Read the text after 'last error:' (e.g. connection refused, DNS, handshake failure) and fix that layer; in restricted environments prefer the library's REST transport if it offers one; bound api-core retry deadlines so failures surface quickly. Evidence basis
Recommended action: Set DENO_TLS_CA_STORE=system,mozilla, or DENO_CERT=/path/ca.pem (env form of --cert). Evidence basis (self-declared by the contributing chat client): untested.