noisedestroyers/localgenai
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Open OpenHands UI to all interfaces

Browse Source 
Was bound to 127.0.0.1:3030 — overcautious on a Tailscale-only box
where Phoenix/Beszel/OpenWebUI are all reached the same way. Updated
the homepage tile description and added a security note in the README
for the case where the host ever leaves the tailnet.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
noisedestroyers
2026-05-08 12:04:35 -04:00
parent 178d7d3c0f
commit 5d3fce22a1
4 changed files with 23 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
pyinfra/framework/README.md
View File

@@ -169,25 +169,23 @@ based on how you like to drive the agent:
Bring-up: `cd /srv/docker/openwebui && docker compose up -d`.
- **OpenHands** (`/srv/docker/openhands`, http://framework:3030,
loopback-only) — autonomous agent in a Docker sandbox. Spawns a
per-conversation `agent-server` container that can write code, run
tests, browse the web. Pre-configured for Ollama at
`openai/qwen3-coder:30b` over the OpenAI-compatible endpoint;
ships traces to Phoenix.
- **OpenHands** (`/srv/docker/openhands`, http://framework:3030) —
autonomous agent in a Docker sandbox. Spawns a per-conversation
`agent-server` container that can write code, run tests, browse the
web. Pre-configured for Ollama at `openai/qwen3-coder:30b` over the
OpenAI-compatible endpoint; ships traces to Phoenix.
Bring-up:
```sh
cd /srv/docker/openhands && docker compose up -d
# Tunnel the loopback-bound UI from your laptop:
ssh -L 3030:127.0.0.1:3030 noise@framework
open http://localhost:3030
```
Bring-up: `cd /srv/docker/openhands && docker compose up -d`. First
run pulls the agent-server image (~2 GB) lazily on first conversation,
not at startup, so the orchestrator comes up fast but your first
message takes 30–60 s. Pre-0.44 state path was `~/.openhands-state`;
not relevant on a fresh install.
First run pulls the agent-server image (~2 GB) lazily on first
conversation, not at startup, so the orchestrator comes up fast but
your first message takes 30–60 s. Pre-0.44 state path was
`~/.openhands-state`; not relevant on a fresh install.
> **Security note:** the orchestrator container has docker-socket
> access and spawns code-running sandboxes. Fine to expose on a
> Tailscale-only box; **change the compose port mapping back to
> `127.0.0.1:3030:3000` and tunnel in** if this host ever sees LAN
> or internet traffic.
Tool-call quality with local models is much better when Ollama's
context is bumped — the compose at `/srv/docker/ollama` already sets