# GoModel

## 产品介绍

GoModel 是一个轻量级多模型 AI 网关，为 OpenAI、Anthropic、Gemini、DeepSeek、Ollama 等模型提供统一的 OpenAI 兼容接口，并内置用量统计、审计日志、预算、限流、故障转移和管理面板。

本应用使用官方非 root 镜像和内置 SQLite 存储。默认安装只运行 GoModel 单服务，不附带上游开发 Compose 中可选的 Redis、PostgreSQL、MongoDB、Adminer 或 Prometheus。

## 主要功能

- OpenAI 与 Anthropic 兼容 API
- 多模型提供商、虚拟模型和故障转移
- API 密钥、预算、限流和访问范围管理
- 用量、成本和审计记录查询
- 内置管理面板与提供商配置界面

## 访问说明

- 管理面板：`http://服务器地址:安装端口/admin/dashboard`
- API 地址：`http://服务器地址:安装端口/v1`
- 主密钥：安装表单中的随机主密钥

管理面板的页面外壳可直接加载，但所有管理数据和写操作都要求主密钥。首次访问后，在 Providers 页面添加模型提供商及其凭据，再使用 `Authorization: Bearer <主密钥>` 调用 API。请勿把主密钥或模型提供商密钥写入脚本、日志或公开配置。

## 安全边界

容器以官方 UID/GID `65532:65532` 运行，根文件系统只读，删除全部 Linux capabilities，并启用 `no-new-privileges`。SQLite 数据仅写入 `/app/data`；模型清单缓存位于受限的临时文件系统。

本包默认启用审计与用量统计，但关闭请求/响应正文和请求头记录，避免提示词、响应和凭据进入持久化日志。需要正文级调试时，应先评估数据敏感性并限定保留时间。

镜像扫描会报告 `golang.org/x/crypto/openpgp` 的一个 UNKNOWN 级通用模块提示。固定源码显示 GoModel 仅在可选 MongoDB 审计路径通过 PKCS#8/PBKDF2 使用 `x/crypto`，没有导入或链接 OpenPGP 包；默认 SQLite 拓扑也不启用该路径。

## 数据与升级

`APP_DATA_DIR` 默认是版本目录内的 `./data`，挂载到 `/app/data` 并保存 SQLite 数据库、提供商配置、API 密钥元数据、审计日志和用量记录。初始化脚本拒绝目录外路径和符号链接，并将目录设置给 UID/GID `65532:65532`。

卸载不会删除该绑定目录。升级或迁移前应备份整个数据目录和应用 `.env`；主密钥必须保持不变，否则现有客户端将无法认证。

`latest` 跟随上游移动标签；需要可重复部署时请选择商店中提供的固定版本。

## Introduction

GoModel is a lightweight multi-provider AI gateway. It exposes OpenAI- and Anthropic-compatible APIs for providers such as OpenAI, Anthropic, Gemini, DeepSeek, and Ollama, with built-in usage tracking, audit logs, budgets, rate limits, failover, and an administration dashboard.

This package uses the official non-root image with embedded SQLite storage. Optional Redis, PostgreSQL, MongoDB, Adminer, and Prometheus services from the upstream development Compose stack are intentionally excluded.

## Features

- OpenAI- and Anthropic-compatible APIs
- Multiple providers, virtual models, and failover
- Managed API keys, budgets, rate limits, and access scopes
- Usage, cost, and audit reporting
- Built-in dashboard and provider credential management

Open `/admin/dashboard` on the installed port, authenticate management requests with the generated master key, and add provider credentials from the Providers page. Model API requests use the same master key in an `Authorization: Bearer` header unless you create a managed key. Never place the master key or provider credentials in scripts, logs, or public configuration.

The container runs as UID/GID `65532:65532` with a read-only root filesystem, all Linux capabilities dropped, and `no-new-privileges` enabled. Persistent SQLite state is restricted to `/app/data`; the model-list cache is ephemeral. Audit and usage tracking remain enabled, while request/response bodies and request headers are not persisted by default.

The image scan reports one UNKNOWN module-level notice for `golang.org/x/crypto/openpgp`. Fixed-source inspection shows no OpenPGP import or linkage; GoModel reaches `x/crypto` through PKCS#8/PBKDF2 in the optional MongoDB audit path, which is not enabled by this SQLite package.

`APP_DATA_DIR` defaults to `./data` inside the version directory and stores provider configuration, managed-key metadata, audit entries, usage records, and other SQLite state. Uninstall preserves this bind-mounted directory. Back up both it and the application `.env` before upgrades, and keep the master key stable.

Use the fixed version offered by the store for reproducible deployments; `latest` follows the upstream moving tag.

## References

- Website: <https://gomodel.enterpilot.io/>
- Documentation: <https://gomodel.enterpilot.io/docs/getting-started/quickstart>
- Source: <https://github.com/ENTERPILOT/GoModel>
- Official image: <https://hub.docker.com/r/enterpilot/gomodel>