LobeChat Database 自部署

gistfile1.txt

# Docs
## LobeChat 
## https://lobehub.com/zh/docs/self-hosting/server-database/docker
## https://lobehub.com/zh/docs/self-hosting/advanced/online-search

## docker command

```
root@japan:~# touch lobe-chat.env
root@japan:~# nano lobe-chat.env


FEATURE_FLAGS='-welcome_suggest'
ENABLE_AUTH_PROTECTION=1
APP_URL=https://japan.tailscale_name.ts.net
DATABASE_URL=postgres://postgres:密码密码_密码对应@pgvector:4321/postgres
KEY_VAULTS_SECRET=
NEXT_AUTH_SECRET=
NEXT_AUTH_SSO_PROVIDERS=cloudflare-zero-trust
AUTH_CLOUDFLARE_ZERO_TRUST_ID=
AUTH_CLOUDFLARE_ZERO_TRUST_SECRET=
AUTH_CLOUDFLARE_ZERO_TRUST_ISSUER=
NEXTAUTH_URL=https://japan.tailscale_name.ts.net/api/auth
S3_ACCESS_KEY_ID=
S3_SECRET_ACCESS_KEY=
S3_ENDPOINT=
S3_PUBLIC_DOMAIN=h
OPENAI_API_KEY= 推荐使用第三方 如 ohmygpt
OPENAI_PROXY_URL=https://apic1.ohmycdn.com/v1
ACCESS_CODE=
OPENAI_MODEL_LIST=gpt-4,gpt-4o-mini
ANTHROPIC_API_KEY=
ANTHROPIC_PROXY_URL=https://api.anthropic.com
AZURE_API_KEY=
AZURE_API_VERSION=2024-08-01-preview
AZURE_ENDPOINT=https://name.openai.azure.com
AZURE_MODEL_LIST=gpt-4,gpt-4o-mini
DEEPSEEK_API_KEY=
XAI_API_KEY=xai-
GOOGLE_API_KEY=
GOOGLE_PROXY_URL=
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=W
AWS_REGION=us-east-1
SEARCH_PROVIDERS=exa
SEARXNG_URL=http://localhost:24321/
EXA_API_KEY=
CRAWLER_IMPLS="browserless,firecrawl,exa"
FIRECRAWL_URL=https://api.firecrawl.dev/v1
FIRECRAWL_API_KEY=
BROWSERLESS_URL=https://chrome.browserless.io
BROWSERLESS_TOKEN=
BROWSERLESS_BLOCK_ADS=1
BROWSERLESS_STEALTH_MODE=1
```
## 先 db 后 lobechat
```
## Postgres pgvector 数据库实例
docker network create pg
# First, create a named volume 持久化存储位置
docker volume create postgres_vector
# Then modify your run command to use the volume 
docker run --name pgvector \
  --network pg \
  -e POSTGRES_PASSWORD=密码密码_密码对应 \
  -p 4321:4321 \
  -v postgres_vector:/var/lib/postgresql/data \
  -d pgvector/pgvector:pg18


docker run -it -d -p 3210:3210 --network pg --env-file lobe-chat.env --name lobe-chat-database lobehub/lobe-chat-database

不太建议自建 SearXNG 还是用 exa + firecrawl
```
## Tailscale tailnet serve / funnel 使用  

Docs: https://tailscale.com/kb/1242/tailscale-serve

```
#tailscale funnel background process
tailscale funnel --bg 34321
#disable the proxy
tailscale funnel --https=443 off
```

For macOS users Proxy via mihomo core, using - PROCESS-NAME** or - PROCESS-PATH** Routing Rules for Routing Browser in macOS:

......
find-process-mode: strict  \\or always 
......
rules:
  - PROCESS-NAME,tailscale,DIRECT  #add .exe for Windows \\Exit Nodes disable
  - PROCESS-NAME,tailscaled,DIRECT #add .exe for Windows \\Exit Nodes disable
  - PROCESS-NAME,parsecd,DIRECT     #add .exe for Windows \\ RDP control 
  - PROCESS-NAME,Raycast,🔰 国外流量 #Raycast
  - PROCESS-NAME,Google Chrome,🇯🇵 Japan #Chrome
  - 'PROCESS-NAME-REGEX,(?i)^Google Chrome,🇯🇵 Japan' #Chrome
  - PROCESS-PATH,/Applications/Google Chrome.app/Contents/MacOS/Google Chrome,🇯🇵 Japan #Chrome
  - 'PROCESS-NAME-REGEX,(?i)^(Safari|com\.apple\.WebKit\.(Networking|WebContent))$,🔰 国外流量' #Safari
  - 'PROCESS-PATH-REGEX,(?i)^/System/Library/Frameworks/WebKit\.framework/Versions/.*/XPCServices/com\.apple\.WebKit\.(Networking|WebContent)\.xpc/Contents/MacOS/com\.apple\.WebKit\.(Networking|WebContent)$,🔰 国外流量' #WebKit helpers
  - 'PROCESS-PATH-REGEX,(?i)^/Applications/Firefox\.app/Contents/MacOS/firefox$,🔰 国外流量' #Firefox
  - 'PROCESS-PATH-REGEX,(?i)^/Applications/Firefox\.app/Contents/MacOS/plugin-container$,🔰 国外流量' #Firefox plugin-container
  - 'PROCESS-PATH-REGEX,(?i)^/Applications/Antigravity\.app/Contents/MacOS/Electron$,🔰 国外流量' #Antigravity Electron

DO NOT FORGET ADD ' and ' for REGEX rules as " and " not working for REGEX

reference Chinese translate for GPT-5.2-Pro extended thinking by GLM 4.7 non thinking

mihomo TUN/System Proxy matching PROCESS rules

mihomo sniffer workload mapping