feat(litellm): add gpt-5.6-sol model

litellm/config.yaml

@@ -1,4 +1,10 @@
 model_list:
+  # Default OpenAI Codex model via chatgpt.com/backend-api.
+  - model_name: "gpt-5.6-sol"
+    litellm_params:
+      model: "codex/cx-5.6-sol"
+      custom_llm_provider: "codex"
+
   # DeepSeek via API directa — alias thsllm para no exponer el proveedor en trazas
   - model_name: "thsllm-chat"
     litellm_params:
@@ -10,6 +16,11 @@ model_list:
       model: "deepseek/deepseek-reasoner"
       api_key: "os.environ/DEEPSEEK_API_KEY"
 
+  - model_name: "thsllm-v4-pro"
+    litellm_params:
+      model: "deepseek/deepseek-v4-pro"
+      api_key: "os.environ/DEEPSEEK_API_KEY"
+
   # OpenAI Codex via chatgpt.com/backend-api (auth auto-renovada)
   # Internal model names use "cx-" prefix to avoid clash with litellm.open_ai_chat_completion_models.
   # The provider strips "cx-" and prepends "gpt-" to get the actual Codex API model name.
@@ -18,11 +29,6 @@ model_list:
       model: "codex/cx-5.5"
       custom_llm_provider: "codex"
 
-  - model_name: "gpt-5.4"
-    litellm_params:
-      model: "codex/cx-5.4"
-      custom_llm_provider: "codex"
-
   - model_name: "gpt-5.3-codex"
     litellm_params:
       model: "codex/cx-5.3-codex"

litellm/docker-compose.yml

@@ -1,7 +1,6 @@
 services:
   litellm:
-    image: ghcr.io/berriai/litellm:main-latest
-    pull_policy: always
+    image: ghcr.io/berriai/litellm@sha256:7c311546c25e7bb6e8cafede9fcd3d0d622ac636b5c9418befaa32e85dfb0186
     container_name: litellm
     restart: unless-stopped
     command: ["--config", "/app/config.yaml"]
@@ -22,25 +21,10 @@ services:
       - litellm
       - proxy
     labels:
-      traefik.enable: "true"
-      traefik.docker.network: "proxy"
+      prune.protect: "true"
+      # Traefik routing → /opt/traefik/dynamic/litellm.yml
       # API — sin auth, accesible con LITELLM_MASTER_KEY
-      traefik.http.routers.litellm-api.rule: "Host(`llm.sherlockhomeless.net`) && (PathPrefix(`/v1`) || PathPrefix(`/health`) || PathPrefix(`/key`) || PathPrefix(`/model`))"
-      traefik.http.routers.litellm-api.entrypoints: "websecure"
-      traefik.http.routers.litellm-api.tls: "true"
-      traefik.http.routers.litellm-api.tls.certresolver: "letsencrypt"
-      traefik.http.routers.litellm-api.middlewares: "crowdsec-bouncer@file"
-      traefik.http.routers.litellm-api.service: "litellm"
-      traefik.http.routers.litellm-api.priority: "20"
       # UI — protegida con Authentik
-      traefik.http.routers.litellm-ui.rule: "Host(`llm.sherlockhomeless.net`)"
-      traefik.http.routers.litellm-ui.entrypoints: "websecure"
-      traefik.http.routers.litellm-ui.tls: "true"
-      traefik.http.routers.litellm-ui.tls.certresolver: "letsencrypt"
-      traefik.http.routers.litellm-ui.middlewares: "crowdsec-bouncer@file,ths-authentik@docker"
-      traefik.http.routers.litellm-ui.service: "litellm"
-      traefik.http.routers.litellm-ui.priority: "10"
-      traefik.http.services.litellm.loadbalancer.server.port: "4000"
       homepage.group: "Automatizacion y desarrollo"
       homepage.name: "LiteLLM"
       homepage.href: "https://llm.sherlockhomeless.net"
@@ -50,9 +34,10 @@ services:
 
   litellm-db:
     image: postgres:16
-    pull_policy: always
     container_name: litellm-pg
     restart: unless-stopped
+    labels:
+      prune.protect: "true"
     environment:
       POSTGRES_USER: ${POSTGRES_USER}
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
@@ -60,7 +45,9 @@ services:
     volumes:
       - ${LITELLM_DB_DATA_PATH}:/var/lib/postgresql/data:Z
     networks:
-      - litellm
+      litellm:
+        aliases:
+          - litellm-db
 
 networks:
   litellm: