akadmin/Funk-lab
1
0
Fork 0
mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-08 11:04:43 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(litellm): exposer port 4000 au cluster k8s

Browse source 
LiteLLM écoutait sur 127.0.0.1 uniquement — les pods k8s (10.42.x.x)
ne pouvaient pas atteindre 192.168.10.1:4000, Open WebUI affichait
"Aucun modèle disponible". Binding changé en 0.0.0.0 + nftables ouvert
pour 192.168.10.0/24 et 10.42.0.0/16.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
alkatrazz 2026-05-29 16:15:37 +02:00
parent e1446c687a
commit ad49b129a1
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
ansible/roles/gateway/templates/nftables.conf.j2
View file

@ -44,8 +44,8 @@ table inet filter {
# Hermes dashboard (poste admin uniquement)
tcp dport 9119 ip saddr {{ hermes_dashboard_allowed_ip }} accept
# LiteLLM (localhost uniquement — pas d'accès réseau direct)
# Port 4000 non exposé ici intentionnellement
# LiteLLM proxy (pods k8s 10.42/16 + nœuds cluster)
tcp dport 4000 ip saddr { 192.168.10.0/24, 10.42.0.0/16 } accept
log prefix "nft-drop: " drop
}

2
ansible/roles/litellm/defaults/main.yml
View file

@ -3,7 +3,7 @@ litellm_user: litellm
litellm_venv: /opt/litellm/venv
litellm_config_dir: /etc/litellm
litellm_host: "127.0.0.1" # loopback — Hermes est sur la même machine
litellm_host: "0.0.0.0" # toutes interfaces — pods k8s accèdent via 192.168.10.1:4000
litellm_port: 4000
litellm_master_key: "lm-studio"