[Request] 提供一个ZITADEL 身份验证服务本地部署参考

[SpeedupMaster]

🥰 需求描述

ZITADEL 身份验证服务本地部署

🧐 解决方案

docker compose

services:
  network-service:
    image: alpine
    container_name: lobe-network
    ports:
      - '9000:9000'  # MinIO API
      - '9001:9001'  # MinIO Console
      - '8080:8080' # Zitadel Console
      - '3210:3210' # LobeChat
    command: tail -f /dev/null
    networks:
      - lobe-network

  postgresql:
    image: pgvector/pgvector:pg16
    container_name: lobe-postgres
    ports:
      - "5432:5432"
    volumes:
      - './data:/var/lib/postgresql/data'
    environment:
      - 'POSTGRES_DB=lobechat'
      - 'POSTGRES_PASSWORD=uWNZugjBqixf8dxC'
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U postgres']
      interval: 5s
      timeout: 5s
      retries: 5
    restart: always
    networks:
      - lobe-network

  minio:
    image: minio/minio
    container_name: lobe-minio
    network_mode: 'service:network-service'
    volumes:
      - './s3_data:/etc/minio/data'
    environment:
      - 'MINIO_ROOT_USER=YOUR_MINIO_USER'
      - 'MINIO_ROOT_PASSWORD=YOUR_MINIO_PASSWORD'
      - 'MINIO_API_CORS_ALLOW_ORIGIN=http://localhost:3210'
    restart: always
    command: >
      server /etc/minio/data --address ":9000" --console-address ":9001"

  zitadel:
    restart: 'always'
    image: 'ghcr.io/zitadel/zitadel:latest'
    container_name: lobe-zitadel
    network_mode: 'service:network-service'
    command: 'start-from-init --masterkey "MasterkeyNeedsToHave32Characters" --tlsMode disabled'
    environment:
      - 'ZITADEL_DATABASE_POSTGRES_HOST=postgresql'
      - 'ZITADEL_DATABASE_POSTGRES_PORT=5432'
      - 'ZITADEL_DATABASE_POSTGRES_DATABASE=zitadel'
      - 'ZITADEL_DATABASE_POSTGRES_USER_USERNAME=zitadel'
      - 'ZITADEL_DATABASE_POSTGRES_USER_PASSWORD=zitadel'
      - 'ZITADEL_DATABASE_POSTGRES_USER_SSL_MODE=disable'
      - 'ZITADEL_DATABASE_POSTGRES_ADMIN_USERNAME=postgres'
      - 'ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD=uWNZugjBqixf8dxC'
      - 'ZITADEL_DATABASE_POSTGRES_ADMIN_SSL_MODE=disable'
      - 'ZITADEL_EXTERNALSECURE=false'
    depends_on:
      postgresql:
        condition: service_healthy

  lobe:
    image: lobehub/lobe-chat-database
    container_name: lobe-database
    network_mode: 'service:network-service'
    depends_on:
      postgresql:
        condition: service_healthy
      network-service:
        condition: service_started
      minio:
        condition: service_started
      zitadel:
        condition: service_started
    env_file:
      - .env
    restart: always

volumes:
  data:
    driver: local
  s3_data:
    driver: local

networks:
  lobe-network:
    driver: bridge

.env

# LobeChat 域名
APP_URL=http://localhost:3210

# Postgres 相关，也即 DB 必须的环境变量
# 用于加密敏感信息的密钥，可以使用 openssl rand -base64 32 生成
KEY_VAULTS_SECRET=Kix2wcUONd4CX51E/ZPAd36BqM4wzJgKjPtz2sGztqQ=
# Postgres 数据库连接字符串
DATABASE_URL=postgresql://postgres:uWNZugjBqixf8dxC@postgresql:5432/lobechat

# NEXT_AUTH 相关
AUTH_URL=http://localhost:3210/api/auth
NEXT_AUTH_SECRET=NX2kaPE923dt6BL2U8e9oSre5RfoT7hg
NEXT_AUTH_SSO_PROVIDERS=zitadel
AUTH_ZITADEL_ID=285945938244075523
AUTH_ZITADEL_SECRET=hkbtzHLaCEIeHeFThym14UcydpmQiEB5JtAX08HSqSoJxhAlVVkyovTuNUZ5TNrT
AUTH_ZITADEL_ISSUER=http://localhost:8080

# MinIO S3 配置
S3_ACCESS_KEY_ID=        
S3_SECRET_ACCESS_KEY=
S3_ENDPOINT=http://localhost:9000
S3_BUCKET=lobe 
S3_PUBLIC_DOMAIN=http://localhost:9000
S3_ENABLE_PATH_STYLE=1

zitadel初始管理员账户密码为：

username: zitadel-admin@zitadel.localhost
password: Password1!

zitadel的配置参考：ref

📝 补充信息

No response

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

你把.env发我看下


用的Neon Postgres吗，其他看着好像没问题

[yincangshiwei]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

你把.env发我看下


用的Neon Postgres吗，其他看着好像没问题

数据库会影响？我用的postgres:15-alpine，pgvector/pgvector:pg16的装不了，网络不通。

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

Bot detected the issue body's language is not English, translate it automatically.

Send me the .env to take a look


Are you using Neon Postgres? Others seem to be fine.

Will the database be affected? I use postgres:15-alpine, but pgvector/pgvector:pg16 cannot be installed because the network is blocked.

[SpeedupMaster]

pgvector/pgvector:pg16

如果用docker部署的数据库，这两个可以不用设置

# 指定 Postgres database driver 为 node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine好像不带pgvector 插件，pgvector 插件为 Postgres 提供了向量搜索的能力，是 LobeChat 实现 RAG 的重要构件之一。 不过应该不影响登录吧

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

pgvector/pgvector:pg16

If you use a database deployed with docker, you don’t need to set these two.

#Specify Postgres database driver as node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine does not seem to have the pgvector plug-in. The pgvector plug-in provides Postgres with vector search capabilities and is one of the important components for LobeChat to implement RAG. But it shouldn’t affect login.

[yincangshiwei]

pgvector/pgvector:pg16

如果用docker部署的数据库，这两个可以不用设置

# 指定 Postgres database driver 为 node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine好像不带pgvector 插件，pgvector 插件为 Postgres 提供了向量搜索的能力，是 LobeChat 实现 RAG 的重要构件之一。 不过应该不影响登录吧

是这个NEXT_PUBLIC_SERVICE_MODE=server问题，我去掉了可以登录，但文件服务那里会显示说我是客户端数据库模式，不支持文件管理。加上了NEXT_PUBLIC_SERVICE_MODE=server，zitadel就无法登录。

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

pgvector/pgvector:pg16

If you use a database deployed with docker, you don’t need to set these two.

# Specify Postgres database driver as node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine does not seem to have the pgvector plug-in. The pgvector plug-in provides Postgres with vector search capabilities and is one of the important components for LobeChat to implement RAG. But it shouldn’t affect login.

The problem is NEXT_PUBLIC_SERVICE_MODE=server. I removed it and I can log in, but the file service will show that I am in client database mode and do not support file management. With NEXT_PUBLIC_SERVICE_MODE=server added, zitadel cannot log in.

[SpeedupMaster]

pgvector/pgvector:pg16

如果用docker部署的数据库，这两个可以不用设置

# 指定 Postgres database driver 为 node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine好像不带pgvector 插件，pgvector 插件为 Postgres 提供了向量搜索的能力，是 LobeChat 实现 RAG 的重要构件之一。 不过应该不影响登录吧

是这个NEXT_PUBLIC_SERVICE_MODE=server问题，我去掉了可以登录，但文件服务那里会显示说我是客户端数据库模式，不支持文件管理。加上了NEXT_PUBLIC_SERVICE_MODE=server，zitadel就无法登录。

pgvector/pgvector:pg16 用这个数据库试试了，最开始用不带pgvector的是可以登录的，后面升级后好像会报错

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

pgvector/pgvector:pg16

If you use a database deployed with docker, you don’t need to set these two.

# Specify Postgres database driver as node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine does not seem to have the pgvector plug-in. The pgvector plug-in provides Postgres with vector search capabilities and is one of the important components for LobeChat to implement RAG. But it shouldn’t affect login.

This is a problem with NEXT_PUBLIC_SERVICE_MODE=server. I removed it and I can log in, but the file service will show that I am in client database mode and do not support file management. With NEXT_PUBLIC_SERVICE_MODE=server added, zitadel cannot log in.

pgvector/pgvector:pg16 I tried using this database. At first, I could log in without pgvector. However, after upgrading later, I seem to get an error.

[yincangshiwei]

pgvector/pgvector:pg16

如果用docker部署的数据库，这两个可以不用设置

# 指定 Postgres database driver 为 node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine好像不带pgvector 插件，pgvector 插件为 Postgres 提供了向量搜索的能力，是 LobeChat 实现 RAG 的重要构件之一。 不过应该不影响登录吧

是这个NEXT_PUBLIC_SERVICE_MODE=server问题，我去掉了可以登录，但文件服务那里会显示说我是客户端数据库模式，不支持文件管理。加上了NEXT_PUBLIC_SERVICE_MODE=server，zitadel就无法登录。

pgvector/pgvector:pg16 用这个数据库试试了，最开始用不带pgvector的是可以登录的，后面升级后好像会报错

我用了pgvector/pgvector:pg16，也是不行。只有不开NEXT_PUBLIC_SERVICE_MODE=server的时候可以登录，但无法使用文件服务。开了就无法登录。

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

pgvector/pgvector:pg16

If you use a database deployed with docker, you don’t need to set these two.

# Specify Postgres database driver as node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine does not seem to have the pgvector plug-in. The pgvector plug-in provides Postgres with vector search capabilities and is one of the important components for LobeChat to implement RAG. But it shouldn’t affect login.

This is a problem with NEXT_PUBLIC_SERVICE_MODE=server. I removed it and I can log in, but the file service will show that I am in client database mode and do not support file management. With NEXT_PUBLIC_SERVICE_MODE=server added, zitadel cannot log in.

pgvector/pgvector:pg16 I tried using this database. At first, I could log in without pgvector. However, after upgrading later, I seem to get an error.

I used pgvector/pgvector:pg16, but it didn't work either. You can log in only when NEXT_PUBLIC_SERVICE_MODE=server is turned off, but you cannot use file services. Can't log in if it's turned on.

[yincangshiwei]

pgvector/pgvector:pg16

如果用docker部署的数据库，这两个可以不用设置

# 指定 Postgres database driver 为 node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine好像不带pgvector 插件，pgvector 插件为 Postgres 提供了向量搜索的能力，是 LobeChat 实现 RAG 的重要构件之一。 不过应该不影响登录吧

是这个NEXT_PUBLIC_SERVICE_MODE=server问题，我去掉了可以登录，但文件服务那里会显示说我是客户端数据库模式，不支持文件管理。加上了NEXT_PUBLIC_SERVICE_MODE=server，zitadel就无法登录。

pgvector/pgvector:pg16 用这个数据库试试了，最开始用不带pgvector的是可以登录的，后面升级后好像会报错

我用了pgvector/pgvector:pg16，也是不行。只有不开NEXT_PUBLIC_SERVICE_MODE=server的时候可以登录，但无法使用文件服务。开了就无法登录。

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

pgvector/pgvector:pg16

If you use a database deployed with docker, you don’t need to set these two.

# Specify Postgres database driver as node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine does not seem to have the pgvector plug-in. The pgvector plug-in provides Postgres with vector search capabilities and is one of the important components for LobeChat to implement RAG. But it shouldn’t affect login.

This is a problem with NEXT_PUBLIC_SERVICE_MODE=server. I removed it and I can log in, but the file service will show that I am in client database mode and do not support file management. With NEXT_PUBLIC_SERVICE_MODE=server added, zitadel cannot log in.

pgvector/pgvector:pg16 I tried using this database. At first, I could log in without pgvector. However, after upgrading later, I seem to get an error.

I used pgvector/pgvector:pg16, but it didn't work either. You can log in only when NEXT_PUBLIC_SERVICE_MODE=server is turned off, but you cannot use file services. Can't log in if it's turned on.

[SpeedupMaster]

pgvector/pgvector:pg16

如果用docker部署的数据库，这两个可以不用设置

# 指定 Postgres database driver 为 node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine好像不带pgvector 插件，pgvector 插件为 Postgres 提供了向量搜索的能力，是 LobeChat 实现 RAG 的重要构件之一。 不过应该不影响登录吧

是这个NEXT_PUBLIC_SERVICE_MODE=server问题，我去掉了可以登录，但文件服务那里会显示说我是客户端数据库模式，不支持文件管理。加上了NEXT_PUBLIC_SERVICE_MODE=server，zitadel就无法登录。

pgvector/pgvector:pg16 用这个数据库试试了，最开始用不带pgvector的是可以登录的，后面升级后好像会报错

我用了pgvector/pgvector:pg16，也是不行。只有不开NEXT_PUBLIC_SERVICE_MODE=server的时候可以登录，但无法使用文件服务。开了就无法登录。

lobehub/lobe-chat-database:latest lobechat是最新的吗？

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

pgvector/pgvector:pg16

If you use a database deployed with docker, you don’t need to set these two.

# Specify Postgres database driver as node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine does not seem to have the pgvector plug-in. The pgvector plug-in provides Postgres with vector search capabilities and is one of the important components for LobeChat to implement RAG. But it shouldn’t affect login.

This is a problem with NEXT_PUBLIC_SERVICE_MODE=server. I removed it and I can log in, but the file service will show that I am in client database mode and do not support file management. With NEXT_PUBLIC_SERVICE_MODE=server added, zitadel cannot log in.

pgvector/pgvector:pg16 I tried using this database. At first, I could log in without pgvector. However, after upgrading later, I seem to get an error.

I used pgvector/pgvector:pg16, but it didn’t work either. You can log in only when NEXT_PUBLIC_SERVICE_MODE=server is turned off, but you cannot use file services. Can't log in if it's turned on.

lobehub/lobe-chat-database:latest Is lobechat the latest?

[yincangshiwei]

pgvector/pgvector:pg16

如果用docker部署的数据库，这两个可以不用设置

# 指定 Postgres database driver 为 node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine好像不带pgvector 插件，pgvector 插件为 Postgres 提供了向量搜索的能力，是 LobeChat 实现 RAG 的重要构件之一。 不过应该不影响登录吧

是这个NEXT_PUBLIC_SERVICE_MODE=server问题，我去掉了可以登录，但文件服务那里会显示说我是客户端数据库模式，不支持文件管理。加上了NEXT_PUBLIC_SERVICE_MODE=server，zitadel就无法登录。

pgvector/pgvector:pg16 用这个数据库试试了，最开始用不带pgvector的是可以登录的，后面升级后好像会报错

我用了pgvector/pgvector:pg16，也是不行。只有不开NEXT_PUBLIC_SERVICE_MODE=server的时候可以登录，但无法使用文件服务。开了就无法登录。

lobehub/lobe-chat-database:latest lobechat是最新的吗？

我没用lobe-chat-database，我是直接拉取lobe，所以lobe，数据库和s3都是独立分开3个服务。我发现lobe所使用的数据库地址没有创建table，是个空库。

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

pgvector/pgvector:pg16

If you use a database deployed with docker, you don’t need to set these two.

# Specify Postgres database driver as node
DATABASE_DRIVER=node
NEXT_PUBLIC_SERVICE_MODE=server

postgres:15-alpine does not seem to have the pgvector plug-in. The pgvector plug-in provides Postgres with vector search capabilities and is one of the important components for LobeChat to implement RAG. But it shouldn’t affect login.

This is a problem with NEXT_PUBLIC_SERVICE_MODE=server. I removed it and I can log in, but the file service will show that I am in client database mode and do not support file management. With NEXT_PUBLIC_SERVICE_MODE=server added, zitadel cannot log in.

pgvector/pgvector:pg16 I tried using this database. It was possible to log in without pgvector at first, but it seems that an error will be reported after the upgrade.

I used pgvector/pgvector:pg16, but it didn't work either. You can log in only when NEXT_PUBLIC_SERVICE_MODE=server is turned off, but you cannot use file services. Can't log in if it's turned on.

lobehub/lobe-chat-database:latest lobechat Is it the latest?

I didn't use lobe-chat-database, I pulled lobe directly, so lobe, database and s3 are three independent services. I found that the database address used by lobe did not create a table and was an empty database.

[SpeedupMaster]

lobe-chat-database

lobe-chat-database才是数据库版本镜像

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

lobe-chat-database

lobe-chat-database is the database version mirror

[yincangshiwei]

lobe-chat-database

lobe-chat-database才是数据库版本镜像

啊，分两个版本？那 lobe-chat-database是否有源码提供？

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

lobe-chat-database

lobe-chat-database is the database version mirror

Ah, two versions? Is the source code provided for lobe-chat-database?

[SpeedupMaster]

lobe-chat-database

lobe-chat-database才是数据库版本镜像

啊，分两个版本？那 lobe-chat-database是否有源码提供？

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

lobe-chat-database

lobe-chat-database is the database version mirror

Ah, two versions? Is the source code provided for lobe-chat-database?

[yincangshiwei]

lobe-chat-database

lobe-chat-database才是数据库版本镜像

啊，分两个版本？那 lobe-chat-database是否有源码提供？

还真没留意这个，那应该是这个问题了，谢谢了！

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

lobe-chat-database

lobe-chat-database is the database version mirror

Ah, two versions? Is the source code provided for lobe-chat-database?


I really didn’t pay attention to this, so this should be the problem, thank you!