Add reproducible Piper TTS service

compose.yaml

@@ -314,7 +314,11 @@ services:
       IMAGE_DIR: /data/images
       CHAT_IMAGE_ALLOW_REMOTE_URLS: "false"
       ENABLE_IMAGE_GENERATION: "false"
-      ENABLE_TTS: "false"
+      ENABLE_TTS: "true"
+      TTS_WORKER_URL: http://piper:8085
+      TTS_MODEL: piper
+      TTS_VOICES: alloy
+      TTS_DEFAULT_VOICE: alloy
       ENABLE_STT: "false"
     ports:
       - "${AI_BIND_ADDRESS:-127.0.0.1}:8081:8081"
@@ -335,6 +339,39 @@ services:
     depends_on:
       profile-controller:
         condition: service_healthy
+      piper:
+        condition: service_healthy
+
+  piper:
+    build:
+      context: platform/docker/piper
+      args:
+        PIPER_TTS_VERSION: ${PIPER_TTS_VERSION:-1.6.0}
+    image: mike-ai/piper:local
+    container_name: mike-ai-piper
+    restart: unless-stopped
+    read_only: true
+    tmpfs:
+      - /tmp:size=256m,mode=1777
+    volumes:
+      - piper-data:/data
+    environment:
+      PIPER_DATA_DIR: /data
+      PIPER_VOICE: ${PIPER_VOICE:-de_DE-thorsten-high}
+      PIPER_VOICE_ALIAS: alloy
+      PIPER_HOST: 0.0.0.0
+      PIPER_PORT: "8085"
+      PIPER_MAX_TEXT_CHARS: "8000"
+    networks: [frontend]
+    security_opt: ["no-new-privileges:true"]
+    cap_drop: [ALL]
+    cap_add: [CHOWN, SETUID, SETGID]
+    healthcheck:
+      test: [CMD, curl, -fsS, "http://127.0.0.1:8085/status"]
+      interval: 10s
+      timeout: 5s
+      retries: 30
+      start_period: 120s
 
   open-webui:
     image: ${OPENWEBUI_IMAGE:-ghcr.io/open-webui/open-webui:v0.9.5}
@@ -351,6 +388,11 @@ services:
       OLLAMA_BASE_URL: ""
       OPENAI_API_BASE_URLS: http://router:8081/v1
       OPENAI_API_KEYS: "${ROUTER_API_KEY:?ROUTER_API_KEY is required}"
+      AUDIO_TTS_ENGINE: openai
+      AUDIO_TTS_OPENAI_API_BASE_URL: http://router:8081/v1
+      AUDIO_TTS_OPENAI_API_KEY: "${ROUTER_API_KEY:?ROUTER_API_KEY is required}"
+      AUDIO_TTS_MODEL: piper
+      AUDIO_TTS_VOICE: alloy
       ENABLE_SIGNUP: ${OPENWEBUI_ENABLE_SIGNUP:-false}
       ENABLE_FOLLOW_UP_GENERATION: ${OPENWEBUI_ENABLE_FOLLOW_UP_GENERATION:-false}
       # Seed native MCP connections on a fresh Open WebUI database. Secrets
@@ -387,5 +429,6 @@ networks:
 
 volumes:
   open-webui-data:
+  piper-data:
   router-state:
   router-images: