解决Dify:failed to init dify plugin db题目

拉不拉稀肚拉稀  论坛元老 | 2025-4-8 12:44:56 | 显示全部楼层 | 阅读模式
打印 上一主题 下一主题
楼主

主题 1744|帖子 1744|积分 5234

马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。

您需要 登录 才可以下载或查看，没有账号？立即注册

x
    Dify最新版本1.1.3(langgenius/dify: Dify is an open-source LLM app development platform. Dify's intuitive interface combines AI workflow, RAG pipeline, agent capabilities, model management, observability features and more, letting you quickly go from prototype to production.)，使用docker compose进行当地部署时，在docker container的log中，总会出现如下提示：
“[error] failed to initialize database, got error failed to connect to `host=db user=postgres database=postgres`: hostname resolving error”。对此，dify issues的回答是"This version is not officially supported yet. Please do not use this version if you can not understand it."，并建议你使用0.15.3版本。
    为了解决题目，我向kimi提问，在其中一个回答中给了如下解决方案：
    “你已经使用了 depends_on 来确保 db 和 redis 服务先于 api 服务启动。但 depends_on 只能确保服务启动次序，不能确保服务完全可用。为了确保 PostgreSQL 完全启动后再启动 api 服务，可以使用 wait-for-it.sh 脚本或其他类似的工具。”
    而我使用wait-for-it.sh确实让上述错误消散了。
    首先我分析了dify\docker目录下的docker-compose.yaml文件，发现在dify环境中，各模块的相互依赖关系如下：
api:db,redis
woker:db,redis
plugin_daemon:db
nginx:api,web
    经测试，nginx可以忽略，但是plugin_daemon、api、woker这三个模块必须保证依赖次序关系精确实现。为此我需要将wait-for-it.sh脚本嵌入到这三个模块的docker镜像中，并在该镜像被docker compose加载时，运行wait-for-it.sh，以确保镜像自身运行启动命令前，其前序的模块已经精确加载并运行。api和woker两个模块均依赖langgenius/dify-api:1.1.3，而plugin_daemon则依赖langgenius/dify-plugin-daemon:0.0.6-local。我需要将wait-for-it.sh嵌入到这两个镜像中，并修改dify\docker\docker-compose.yaml文件内容。
我的操纵步骤如下：
1.从 wait-for-it.sh GitHub 堆栈 下载脚本文件wait-for-it.sh。注意下载的wait-for-it.sh要确保其是unix文件格式，也就是行尾不能是CRLF,而应该是LF。一个简单的方法：用vscode打开这个sh文件，在窗口的状态栏中若显示的是"CRLF"，则只需点击这个“CRLF”标识，将其改成LF即可。
2.将这个wait-for-it.sh文件拷贝至git clone的Dify目录下的docker子目录中。我的目录如下：D:\AiTools\dify\docker
3.同时在这个目录中创建一个Dockerfile,内容如下：
  1. FROM langgenius/dify-api:1.1.3
  3. # 将 wait-for-it.sh 脚本复制到镜像中
  4. COPY ./wait-for-it.sh /wait-for-it.sh
  6. # 确保脚本具有可执行权限
  7. RUN chmod +x /wait-for-it.sh
复制代码
4.在dify\docker目录中打开命令行，运行如下命令：
  1. docker buildx build . -t langgenius/dify-api:1.1.4
复制代码
上述命令将生成一个新的langgenius/dify-api:1.1.4镜像。同样，将上述Dockerfile文件的首行修改成如下内容：
  1. FROM langgenius/dify-plugin-daemon:0.0.6-local
  3. # 将 wait-for-it.sh 脚本复制到镜像中
  4. COPY ./wait-for-it.sh /wait-for-it.sh
  6. # 确保脚本具有可执行权限
  7. RUN chmod +x /wait-for-it.sh
复制代码
运行以下命令生成新的langgenius/dify-plugin-daemon:0.0.7-local镜像。
  1. docker buildx build . -t langgenius/dify-plugin-daemon:0.0.7-local
复制代码
5.修改dify\docker\docker-compose.yaml文件内容如下：
  1. # ==================================================================
  2. # WARNING: This file is auto-generated by generate_docker_compose
  3. # Do not modify this file directly. Instead, update the .env.example
  4. # or docker-compose-template.yaml and regenerate this file.
  5. # ==================================================================
  7. x-shared-env: &shared-api-worker-env
  8.   CONSOLE_API_URL: ${CONSOLE_API_URL:-}
  9.   CONSOLE_WEB_URL: ${CONSOLE_WEB_URL:-}
  10.   SERVICE_API_URL: ${SERVICE_API_URL:-}
  11.   APP_API_URL: ${APP_API_URL:-}
  12.   APP_WEB_URL: ${APP_WEB_URL:-}
  13.   FILES_URL: ${FILES_URL:-}
  14.   LOG_LEVEL: ${LOG_LEVEL:-INFO}
  15.   LOG_FILE: ${LOG_FILE:-/app/logs/server.log}
  16.   LOG_FILE_MAX_SIZE: ${LOG_FILE_MAX_SIZE:-20}
  17.   LOG_FILE_BACKUP_COUNT: ${LOG_FILE_BACKUP_COUNT:-5}
  18.   LOG_DATEFORMAT: ${LOG_DATEFORMAT:-%Y-%m-%d %H:%M:%S}
  19.   LOG_TZ: ${LOG_TZ:-UTC}
  20.   DEBUG: ${DEBUG:-false}
  21.   FLASK_DEBUG: ${FLASK_DEBUG:-false}
  22.   SECRET_KEY: ${SECRET_KEY:-sk-9f73s3ljTXVcMT3Blb3ljTqtsKiGHXVcMT3BlbkFJLK7U}
  23.   INIT_PASSWORD: ${INIT_PASSWORD:-}
  24.   DEPLOY_ENV: ${DEPLOY_ENV:-PRODUCTION}
  25.   CHECK_UPDATE_URL: ${CHECK_UPDATE_URL:-https://updates.dify.ai}
  26.   OPENAI_API_BASE: ${OPENAI_API_BASE:-https://api.openai.com/v1}
  27.   MIGRATION_ENABLED: ${MIGRATION_ENABLED:-true}
  28.   FILES_ACCESS_TIMEOUT: ${FILES_ACCESS_TIMEOUT:-300}
  29.   ACCESS_TOKEN_EXPIRE_MINUTES: ${ACCESS_TOKEN_EXPIRE_MINUTES:-60}
  30.   REFRESH_TOKEN_EXPIRE_DAYS: ${REFRESH_TOKEN_EXPIRE_DAYS:-30}
  31.   APP_MAX_ACTIVE_REQUESTS: ${APP_MAX_ACTIVE_REQUESTS:-0}
  32.   APP_MAX_EXECUTION_TIME: ${APP_MAX_EXECUTION_TIME:-1200}
  33.   DIFY_BIND_ADDRESS: ${DIFY_BIND_ADDRESS:-0.0.0.0}
  34.   DIFY_PORT: ${DIFY_PORT:-5001}
  35.   SERVER_WORKER_AMOUNT: ${SERVER_WORKER_AMOUNT:-1}
  36.   SERVER_WORKER_CLASS: ${SERVER_WORKER_CLASS:-gevent}
  37.   SERVER_WORKER_CONNECTIONS: ${SERVER_WORKER_CONNECTIONS:-10}
  38.   CELERY_WORKER_CLASS: ${CELERY_WORKER_CLASS:-}
  39.   GUNICORN_TIMEOUT: ${GUNICORN_TIMEOUT:-360}
  40.   CELERY_WORKER_AMOUNT: ${CELERY_WORKER_AMOUNT:-}
  41.   CELERY_AUTO_SCALE: ${CELERY_AUTO_SCALE:-false}
  42.   CELERY_MAX_WORKERS: ${CELERY_MAX_WORKERS:-}
  43.   CELERY_MIN_WORKERS: ${CELERY_MIN_WORKERS:-}
  44.   API_TOOL_DEFAULT_CONNECT_TIMEOUT: ${API_TOOL_DEFAULT_CONNECT_TIMEOUT:-10}
  45.   API_TOOL_DEFAULT_READ_TIMEOUT: ${API_TOOL_DEFAULT_READ_TIMEOUT:-60}
  46.   DB_USERNAME: ${DB_USERNAME:-postgres}
  47.   DB_PASSWORD: ${DB_PASSWORD:-difyai123456}
  48.   DB_HOST: ${DB_HOST:-db}
  49.   DB_PORT: ${DB_PORT:-5432}
  50.   DB_DATABASE: ${DB_DATABASE:-dify}
  51.   SQLALCHEMY_POOL_SIZE: ${SQLALCHEMY_POOL_SIZE:-30}
  52.   SQLALCHEMY_POOL_RECYCLE: ${SQLALCHEMY_POOL_RECYCLE:-3600}
  53.   SQLALCHEMY_ECHO: ${SQLALCHEMY_ECHO:-false}
  54.   POSTGRES_MAX_CONNECTIONS: ${POSTGRES_MAX_CONNECTIONS:-100}
  55.   POSTGRES_SHARED_BUFFERS: ${POSTGRES_SHARED_BUFFERS:-128MB}
  56.   POSTGRES_WORK_MEM: ${POSTGRES_WORK_MEM:-4MB}
  57.   POSTGRES_MAINTENANCE_WORK_MEM: ${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}
  58.   POSTGRES_EFFECTIVE_CACHE_SIZE: ${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}
  59.   REDIS_HOST: ${REDIS_HOST:-redis}
  60.   REDIS_PORT: ${REDIS_PORT:-6379}
  61.   REDIS_USERNAME: ${REDIS_USERNAME:-}
  62.   REDIS_PASSWORD: ${REDIS_PASSWORD:-difyai123456}
  63.   REDIS_USE_SSL: ${REDIS_USE_SSL:-false}
  64.   REDIS_DB: ${REDIS_DB:-0}
  65.   REDIS_USE_SENTINEL: ${REDIS_USE_SENTINEL:-false}
  66.   REDIS_SENTINELS: ${REDIS_SENTINELS:-}
  67.   REDIS_SENTINEL_SERVICE_NAME: ${REDIS_SENTINEL_SERVICE_NAME:-}
  68.   REDIS_SENTINEL_USERNAME: ${REDIS_SENTINEL_USERNAME:-}
  69.   REDIS_SENTINEL_PASSWORD: ${REDIS_SENTINEL_PASSWORD:-}
  70.   REDIS_SENTINEL_SOCKET_TIMEOUT: ${REDIS_SENTINEL_SOCKET_TIMEOUT:-0.1}
  71.   REDIS_USE_CLUSTERS: ${REDIS_USE_CLUSTERS:-false}
  72.   REDIS_CLUSTERS: ${REDIS_CLUSTERS:-}
  73.   REDIS_CLUSTERS_PASSWORD: ${REDIS_CLUSTERS_PASSWORD:-}
  74.   CELERY_BROKER_URL: ${CELERY_BROKER_URL:-redis://:difyai123456@redis:6379/1}
  75.   BROKER_USE_SSL: ${BROKER_USE_SSL:-false}
  76.   CELERY_USE_SENTINEL: ${CELERY_USE_SENTINEL:-false}
  77.   CELERY_SENTINEL_MASTER_NAME: ${CELERY_SENTINEL_MASTER_NAME:-}
  78.   CELERY_SENTINEL_SOCKET_TIMEOUT: ${CELERY_SENTINEL_SOCKET_TIMEOUT:-0.1}
  79.   WEB_API_CORS_ALLOW_ORIGINS: ${WEB_API_CORS_ALLOW_ORIGINS:-*}
  80.   CONSOLE_CORS_ALLOW_ORIGINS: ${CONSOLE_CORS_ALLOW_ORIGINS:-*}
  81.   STORAGE_TYPE: ${STORAGE_TYPE:-opendal}
  82.   OPENDAL_SCHEME: ${OPENDAL_SCHEME:-fs}
  83.   OPENDAL_FS_ROOT: ${OPENDAL_FS_ROOT:-storage}
  84.   S3_ENDPOINT: ${S3_ENDPOINT:-}
  85.   S3_REGION: ${S3_REGION:-us-east-1}
  86.   S3_BUCKET_NAME: ${S3_BUCKET_NAME:-difyai}
  87.   S3_ACCESS_KEY: ${S3_ACCESS_KEY:-}
  88.   S3_SECRET_KEY: ${S3_SECRET_KEY:-}
  89.   S3_USE_AWS_MANAGED_IAM: ${S3_USE_AWS_MANAGED_IAM:-false}
  90.   AZURE_BLOB_ACCOUNT_NAME: ${AZURE_BLOB_ACCOUNT_NAME:-difyai}
  91.   AZURE_BLOB_ACCOUNT_KEY: ${AZURE_BLOB_ACCOUNT_KEY:-difyai}
  92.   AZURE_BLOB_CONTAINER_NAME: ${AZURE_BLOB_CONTAINER_NAME:-difyai-container}
  93.   AZURE_BLOB_ACCOUNT_URL: ${AZURE_BLOB_ACCOUNT_URL:-https://<your_account_name>.blob.core.windows.net}
  94.   GOOGLE_STORAGE_BUCKET_NAME: ${GOOGLE_STORAGE_BUCKET_NAME:-your-bucket-name}
  95.   GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64: ${GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64:-}
  96.   ALIYUN_OSS_BUCKET_NAME: ${ALIYUN_OSS_BUCKET_NAME:-your-bucket-name}
  97.   ALIYUN_OSS_ACCESS_KEY: ${ALIYUN_OSS_ACCESS_KEY:-your-access-key}
  98.   ALIYUN_OSS_SECRET_KEY: ${ALIYUN_OSS_SECRET_KEY:-your-secret-key}
  99.   ALIYUN_OSS_ENDPOINT: ${ALIYUN_OSS_ENDPOINT:-https://oss-ap-southeast-1-internal.aliyuncs.com}
  100.   ALIYUN_OSS_REGION: ${ALIYUN_OSS_REGION:-ap-southeast-1}
  101.   ALIYUN_OSS_AUTH_VERSION: ${ALIYUN_OSS_AUTH_VERSION:-v4}
  102.   ALIYUN_OSS_PATH: ${ALIYUN_OSS_PATH:-your-path}
  103.   TENCENT_COS_BUCKET_NAME: ${TENCENT_COS_BUCKET_NAME:-your-bucket-name}
  104.   TENCENT_COS_SECRET_KEY: ${TENCENT_COS_SECRET_KEY:-your-secret-key}
  105.   TENCENT_COS_SECRET_ID: ${TENCENT_COS_SECRET_ID:-your-secret-id}
  106.   TENCENT_COS_REGION: ${TENCENT_COS_REGION:-your-region}
  107.   TENCENT_COS_SCHEME: ${TENCENT_COS_SCHEME:-your-scheme}
  108.   OCI_ENDPOINT: ${OCI_ENDPOINT:-https://your-object-storage-namespace.compat.objectstorage.us-ashburn-1.oraclecloud.com}
  109.   OCI_BUCKET_NAME: ${OCI_BUCKET_NAME:-your-bucket-name}
  110.   OCI_ACCESS_KEY: ${OCI_ACCESS_KEY:-your-access-key}
  111.   OCI_SECRET_KEY: ${OCI_SECRET_KEY:-your-secret-key}
  112.   OCI_REGION: ${OCI_REGION:-us-ashburn-1}
  113.   HUAWEI_OBS_BUCKET_NAME: ${HUAWEI_OBS_BUCKET_NAME:-your-bucket-name}
  114.   HUAWEI_OBS_SECRET_KEY: ${HUAWEI_OBS_SECRET_KEY:-your-secret-key}
  115.   HUAWEI_OBS_ACCESS_KEY: ${HUAWEI_OBS_ACCESS_KEY:-your-access-key}
  116.   HUAWEI_OBS_SERVER: ${HUAWEI_OBS_SERVER:-your-server-url}
  117.   VOLCENGINE_TOS_BUCKET_NAME: ${VOLCENGINE_TOS_BUCKET_NAME:-your-bucket-name}
  118.   VOLCENGINE_TOS_SECRET_KEY: ${VOLCENGINE_TOS_SECRET_KEY:-your-secret-key}
  119.   VOLCENGINE_TOS_ACCESS_KEY: ${VOLCENGINE_TOS_ACCESS_KEY:-your-access-key}
  120.   VOLCENGINE_TOS_ENDPOINT: ${VOLCENGINE_TOS_ENDPOINT:-your-server-url}
  121.   VOLCENGINE_TOS_REGION: ${VOLCENGINE_TOS_REGION:-your-region}
  122.   BAIDU_OBS_BUCKET_NAME: ${BAIDU_OBS_BUCKET_NAME:-your-bucket-name}
  123.   BAIDU_OBS_SECRET_KEY: ${BAIDU_OBS_SECRET_KEY:-your-secret-key}
  124.   BAIDU_OBS_ACCESS_KEY: ${BAIDU_OBS_ACCESS_KEY:-your-access-key}
  125.   BAIDU_OBS_ENDPOINT: ${BAIDU_OBS_ENDPOINT:-your-server-url}
  126.   SUPABASE_BUCKET_NAME: ${SUPABASE_BUCKET_NAME:-your-bucket-name}
  127.   SUPABASE_API_KEY: ${SUPABASE_API_KEY:-your-access-key}
  128.   SUPABASE_URL: ${SUPABASE_URL:-your-server-url}
  129.   VECTOR_STORE: ${VECTOR_STORE:-weaviate}
  130.   WEAVIATE_ENDPOINT: ${WEAVIATE_ENDPOINT:-http://weaviate:8080}
  131.   WEAVIATE_API_KEY: ${WEAVIATE_API_KEY:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}
  132.   QDRANT_URL: ${QDRANT_URL:-http://qdrant:6333}
  133.   QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456}
  134.   QDRANT_CLIENT_TIMEOUT: ${QDRANT_CLIENT_TIMEOUT:-20}
  135.   QDRANT_GRPC_ENABLED: ${QDRANT_GRPC_ENABLED:-false}
  136.   QDRANT_GRPC_PORT: ${QDRANT_GRPC_PORT:-6334}
  137.   MILVUS_URI: ${MILVUS_URI:-http://host.docker.internal:19530}
  138.   MILVUS_TOKEN: ${MILVUS_TOKEN:-}
  139.   MILVUS_USER: ${MILVUS_USER:-}
  140.   MILVUS_PASSWORD: ${MILVUS_PASSWORD:-}
  141.   MILVUS_ENABLE_HYBRID_SEARCH: ${MILVUS_ENABLE_HYBRID_SEARCH:-False}
  142.   MYSCALE_HOST: ${MYSCALE_HOST:-myscale}
  143.   MYSCALE_PORT: ${MYSCALE_PORT:-8123}
  144.   MYSCALE_USER: ${MYSCALE_USER:-default}
  145.   MYSCALE_PASSWORD: ${MYSCALE_PASSWORD:-}
  146.   MYSCALE_DATABASE: ${MYSCALE_DATABASE:-dify}
  147.   MYSCALE_FTS_PARAMS: ${MYSCALE_FTS_PARAMS:-}
  148.   COUCHBASE_CONNECTION_STRING: ${COUCHBASE_CONNECTION_STRING:-couchbase://couchbase-server}
  149.   COUCHBASE_USER: ${COUCHBASE_USER:-Administrator}
  150.   COUCHBASE_PASSWORD: ${COUCHBASE_PASSWORD:-password}
  151.   COUCHBASE_BUCKET_NAME: ${COUCHBASE_BUCKET_NAME:-Embeddings}
  152.   COUCHBASE_SCOPE_NAME: ${COUCHBASE_SCOPE_NAME:-_default}
  153.   PGVECTOR_HOST: ${PGVECTOR_HOST:-pgvector}
  154.   PGVECTOR_PORT: ${PGVECTOR_PORT:-5432}
  155.   PGVECTOR_USER: ${PGVECTOR_USER:-postgres}
  156.   PGVECTOR_PASSWORD: ${PGVECTOR_PASSWORD:-difyai123456}
  157.   PGVECTOR_DATABASE: ${PGVECTOR_DATABASE:-dify}
  158.   PGVECTOR_MIN_CONNECTION: ${PGVECTOR_MIN_CONNECTION:-1}
  159.   PGVECTOR_MAX_CONNECTION: ${PGVECTOR_MAX_CONNECTION:-5}
  160.   PGVECTOR_PG_BIGM: ${PGVECTOR_PG_BIGM:-false}
  161.   PGVECTOR_PG_BIGM_VERSION: ${PGVECTOR_PG_BIGM_VERSION:-1.2-20240606}
  162.   PGVECTO_RS_HOST: ${PGVECTO_RS_HOST:-pgvecto-rs}
  163.   PGVECTO_RS_PORT: ${PGVECTO_RS_PORT:-5432}
  164.   PGVECTO_RS_USER: ${PGVECTO_RS_USER:-postgres}
  165.   PGVECTO_RS_PASSWORD: ${PGVECTO_RS_PASSWORD:-difyai123456}
  166.   PGVECTO_RS_DATABASE: ${PGVECTO_RS_DATABASE:-dify}
  167.   ANALYTICDB_KEY_ID: ${ANALYTICDB_KEY_ID:-your-ak}
  168.   ANALYTICDB_KEY_SECRET: ${ANALYTICDB_KEY_SECRET:-your-sk}
  169.   ANALYTICDB_REGION_ID: ${ANALYTICDB_REGION_ID:-cn-hangzhou}
  170.   ANALYTICDB_INSTANCE_ID: ${ANALYTICDB_INSTANCE_ID:-gp-ab123456}
  171.   ANALYTICDB_ACCOUNT: ${ANALYTICDB_ACCOUNT:-testaccount}
  172.   ANALYTICDB_PASSWORD: ${ANALYTICDB_PASSWORD:-testpassword}
  173.   ANALYTICDB_NAMESPACE: ${ANALYTICDB_NAMESPACE:-dify}
  174.   ANALYTICDB_NAMESPACE_PASSWORD: ${ANALYTICDB_NAMESPACE_PASSWORD:-difypassword}
  175.   ANALYTICDB_HOST: ${ANALYTICDB_HOST:-gp-test.aliyuncs.com}
  176.   ANALYTICDB_PORT: ${ANALYTICDB_PORT:-5432}
  177.   ANALYTICDB_MIN_CONNECTION: ${ANALYTICDB_MIN_CONNECTION:-1}
  178.   ANALYTICDB_MAX_CONNECTION: ${ANALYTICDB_MAX_CONNECTION:-5}
  179.   TIDB_VECTOR_HOST: ${TIDB_VECTOR_HOST:-tidb}
  180.   TIDB_VECTOR_PORT: ${TIDB_VECTOR_PORT:-4000}
  181.   TIDB_VECTOR_USER: ${TIDB_VECTOR_USER:-}
  182.   TIDB_VECTOR_PASSWORD: ${TIDB_VECTOR_PASSWORD:-}
  183.   TIDB_VECTOR_DATABASE: ${TIDB_VECTOR_DATABASE:-dify}
  184.   TIDB_ON_QDRANT_URL: ${TIDB_ON_QDRANT_URL:-http://127.0.0.1}
  185.   TIDB_ON_QDRANT_API_KEY: ${TIDB_ON_QDRANT_API_KEY:-dify}
  186.   TIDB_ON_QDRANT_CLIENT_TIMEOUT: ${TIDB_ON_QDRANT_CLIENT_TIMEOUT:-20}
  187.   TIDB_ON_QDRANT_GRPC_ENABLED: ${TIDB_ON_QDRANT_GRPC_ENABLED:-false}
  188.   TIDB_ON_QDRANT_GRPC_PORT: ${TIDB_ON_QDRANT_GRPC_PORT:-6334}
  189.   TIDB_PUBLIC_KEY: ${TIDB_PUBLIC_KEY:-dify}
  190.   TIDB_PRIVATE_KEY: ${TIDB_PRIVATE_KEY:-dify}
  191.   TIDB_API_URL: ${TIDB_API_URL:-http://127.0.0.1}
  192.   TIDB_IAM_API_URL: ${TIDB_IAM_API_URL:-http://127.0.0.1}
  193.   TIDB_REGION: ${TIDB_REGION:-regions/aws-us-east-1}
  194.   TIDB_PROJECT_ID: ${TIDB_PROJECT_ID:-dify}
  195.   TIDB_SPEND_LIMIT: ${TIDB_SPEND_LIMIT:-100}
  196.   CHROMA_HOST: ${CHROMA_HOST:-127.0.0.1}
  197.   CHROMA_PORT: ${CHROMA_PORT:-8000}
  198.   CHROMA_TENANT: ${CHROMA_TENANT:-default_tenant}
  199.   CHROMA_DATABASE: ${CHROMA_DATABASE:-default_database}
  200.   CHROMA_AUTH_PROVIDER: ${CHROMA_AUTH_PROVIDER:-chromadb.auth.token_authn.TokenAuthClientProvider}
  201.   CHROMA_AUTH_CREDENTIALS: ${CHROMA_AUTH_CREDENTIALS:-}
  202.   ORACLE_USER: ${ORACLE_USER:-dify}
  203.   ORACLE_PASSWORD: ${ORACLE_PASSWORD:-dify}
  204.   ORACLE_DSN: ${ORACLE_DSN:-oracle:1521/FREEPDB1}
  205.   ORACLE_CONFIG_DIR: ${ORACLE_CONFIG_DIR:-/app/api/storage/wallet}
  206.   ORACLE_WALLET_LOCATION: ${ORACLE_WALLET_LOCATION:-/app/api/storage/wallet}
  207.   ORACLE_WALLET_PASSWORD: ${ORACLE_WALLET_PASSWORD:-dify}
  208.   ORACLE_IS_AUTONOMOUS: ${ORACLE_IS_AUTONOMOUS:-false}
  209.   RELYT_HOST: ${RELYT_HOST:-db}
  210.   RELYT_PORT: ${RELYT_PORT:-5432}
  211.   RELYT_USER: ${RELYT_USER:-postgres}
  212.   RELYT_PASSWORD: ${RELYT_PASSWORD:-difyai123456}
  213.   RELYT_DATABASE: ${RELYT_DATABASE:-postgres}
  214.   OPENSEARCH_HOST: ${OPENSEARCH_HOST:-opensearch}
  215.   OPENSEARCH_PORT: ${OPENSEARCH_PORT:-9200}
  216.   OPENSEARCH_USER: ${OPENSEARCH_USER:-admin}
  217.   OPENSEARCH_PASSWORD: ${OPENSEARCH_PASSWORD:-admin}
  218.   OPENSEARCH_SECURE: ${OPENSEARCH_SECURE:-true}
  219.   TENCENT_VECTOR_DB_URL: ${TENCENT_VECTOR_DB_URL:-http://127.0.0.1}
  220.   TENCENT_VECTOR_DB_API_KEY: ${TENCENT_VECTOR_DB_API_KEY:-dify}
  221.   TENCENT_VECTOR_DB_TIMEOUT: ${TENCENT_VECTOR_DB_TIMEOUT:-30}
  222.   TENCENT_VECTOR_DB_USERNAME: ${TENCENT_VECTOR_DB_USERNAME:-dify}
  223.   TENCENT_VECTOR_DB_DATABASE: ${TENCENT_VECTOR_DB_DATABASE:-dify}
  224.   TENCENT_VECTOR_DB_SHARD: ${TENCENT_VECTOR_DB_SHARD:-1}
  225.   TENCENT_VECTOR_DB_REPLICAS: ${TENCENT_VECTOR_DB_REPLICAS:-2}
  226.   ELASTICSEARCH_HOST: ${ELASTICSEARCH_HOST:-0.0.0.0}
  227.   ELASTICSEARCH_PORT: ${ELASTICSEARCH_PORT:-9200}
  228.   ELASTICSEARCH_USERNAME: ${ELASTICSEARCH_USERNAME:-elastic}
  229.   ELASTICSEARCH_PASSWORD: ${ELASTICSEARCH_PASSWORD:-elastic}
  230.   KIBANA_PORT: ${KIBANA_PORT:-5601}
  231.   BAIDU_VECTOR_DB_ENDPOINT: ${BAIDU_VECTOR_DB_ENDPOINT:-http://127.0.0.1:5287}
  232.   BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS: ${BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS:-30000}
  233.   BAIDU_VECTOR_DB_ACCOUNT: ${BAIDU_VECTOR_DB_ACCOUNT:-root}
  234.   BAIDU_VECTOR_DB_API_KEY: ${BAIDU_VECTOR_DB_API_KEY:-dify}
  235.   BAIDU_VECTOR_DB_DATABASE: ${BAIDU_VECTOR_DB_DATABASE:-dify}
  236.   BAIDU_VECTOR_DB_SHARD: ${BAIDU_VECTOR_DB_SHARD:-1}
  237.   BAIDU_VECTOR_DB_REPLICAS: ${BAIDU_VECTOR_DB_REPLICAS:-3}
  238.   VIKINGDB_ACCESS_KEY: ${VIKINGDB_ACCESS_KEY:-your-ak}
  239.   VIKINGDB_SECRET_KEY: ${VIKINGDB_SECRET_KEY:-your-sk}
  240.   VIKINGDB_REGION: ${VIKINGDB_REGION:-cn-shanghai}
  241.   VIKINGDB_HOST: ${VIKINGDB_HOST:-api-vikingdb.xxx.volces.com}
  242.   VIKINGDB_SCHEMA: ${VIKINGDB_SCHEMA:-http}
  243.   VIKINGDB_CONNECTION_TIMEOUT: ${VIKINGDB_CONNECTION_TIMEOUT:-30}
  244.   VIKINGDB_SOCKET_TIMEOUT: ${VIKINGDB_SOCKET_TIMEOUT:-30}
  245.   LINDORM_URL: ${LINDORM_URL:-http://lindorm:30070}
  246.   LINDORM_USERNAME: ${LINDORM_USERNAME:-lindorm}
  247.   LINDORM_PASSWORD: ${LINDORM_PASSWORD:-lindorm}
  248.   OCEANBASE_VECTOR_HOST: ${OCEANBASE_VECTOR_HOST:-oceanbase}
  249.   OCEANBASE_VECTOR_PORT: ${OCEANBASE_VECTOR_PORT:-2881}
  250.   OCEANBASE_VECTOR_USER: ${OCEANBASE_VECTOR_USER:-root@test}
  251.   OCEANBASE_VECTOR_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
  252.   OCEANBASE_VECTOR_DATABASE: ${OCEANBASE_VECTOR_DATABASE:-test}
  253.   OCEANBASE_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
  254.   OCEANBASE_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
  255.   OCEANBASE_ENABLE_HYBRID_SEARCH: ${OCEANBASE_ENABLE_HYBRID_SEARCH:-false}
  256.   OPENGAUSS_HOST: ${OPENGAUSS_HOST:-opengauss}
  257.   OPENGAUSS_PORT: ${OPENGAUSS_PORT:-6600}
  258.   OPENGAUSS_USER: ${OPENGAUSS_USER:-postgres}
  259.   OPENGAUSS_PASSWORD: ${OPENGAUSS_PASSWORD:-Dify@123}
  260.   OPENGAUSS_DATABASE: ${OPENGAUSS_DATABASE:-dify}
  261.   OPENGAUSS_MIN_CONNECTION: ${OPENGAUSS_MIN_CONNECTION:-1}
  262.   OPENGAUSS_MAX_CONNECTION: ${OPENGAUSS_MAX_CONNECTION:-5}
  263.   OPENGAUSS_ENABLE_PQ: ${OPENGAUSS_ENABLE_PQ:-false}
  264.   UPSTASH_VECTOR_URL: ${UPSTASH_VECTOR_URL:-https://xxx-vector.upstash.io}
  265.   UPSTASH_VECTOR_TOKEN: ${UPSTASH_VECTOR_TOKEN:-dify}
  266.   TABLESTORE_ENDPOINT: ${TABLESTORE_ENDPOINT:-https://instance-name.cn-hangzhou.ots.aliyuncs.com}
  267.   TABLESTORE_INSTANCE_NAME: ${TABLESTORE_INSTANCE_NAME:-instance-name}
  268.   TABLESTORE_ACCESS_KEY_ID: ${TABLESTORE_ACCESS_KEY_ID:-xxx}
  269.   TABLESTORE_ACCESS_KEY_SECRET: ${TABLESTORE_ACCESS_KEY_SECRET:-xxx}
  270.   UPLOAD_FILE_SIZE_LIMIT: ${UPLOAD_FILE_SIZE_LIMIT:-15}
  271.   UPLOAD_FILE_BATCH_LIMIT: ${UPLOAD_FILE_BATCH_LIMIT:-5}
  272.   ETL_TYPE: ${ETL_TYPE:-dify}
  273.   UNSTRUCTURED_API_URL: ${UNSTRUCTURED_API_URL:-}
  274.   UNSTRUCTURED_API_KEY: ${UNSTRUCTURED_API_KEY:-}
  275.   SCARF_NO_ANALYTICS: ${SCARF_NO_ANALYTICS:-true}
  276.   PROMPT_GENERATION_MAX_TOKENS: ${PROMPT_GENERATION_MAX_TOKENS:-512}
  277.   CODE_GENERATION_MAX_TOKENS: ${CODE_GENERATION_MAX_TOKENS:-1024}
  278.   MULTIMODAL_SEND_FORMAT: ${MULTIMODAL_SEND_FORMAT:-base64}
  279.   UPLOAD_IMAGE_FILE_SIZE_LIMIT: ${UPLOAD_IMAGE_FILE_SIZE_LIMIT:-10}
  280.   UPLOAD_VIDEO_FILE_SIZE_LIMIT: ${UPLOAD_VIDEO_FILE_SIZE_LIMIT:-100}
  281.   UPLOAD_AUDIO_FILE_SIZE_LIMIT: ${UPLOAD_AUDIO_FILE_SIZE_LIMIT:-50}
  282.   SENTRY_DSN: ${SENTRY_DSN:-}
  283.   API_SENTRY_DSN: ${API_SENTRY_DSN:-}
  284.   API_SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
  285.   API_SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}
  286.   WEB_SENTRY_DSN: ${WEB_SENTRY_DSN:-}
  287.   NOTION_INTEGRATION_TYPE: ${NOTION_INTEGRATION_TYPE:-public}
  288.   NOTION_CLIENT_SECRET: ${NOTION_CLIENT_SECRET:-}
  289.   NOTION_CLIENT_ID: ${NOTION_CLIENT_ID:-}
  290.   NOTION_INTERNAL_SECRET: ${NOTION_INTERNAL_SECRET:-}
  291.   MAIL_TYPE: ${MAIL_TYPE:-resend}
  292.   MAIL_DEFAULT_SEND_FROM: ${MAIL_DEFAULT_SEND_FROM:-}
  293.   RESEND_API_URL: ${RESEND_API_URL:-https://api.resend.com}
  294.   RESEND_API_KEY: ${RESEND_API_KEY:-your-resend-api-key}
  295.   SMTP_SERVER: ${SMTP_SERVER:-}
  296.   SMTP_PORT: ${SMTP_PORT:-465}
  297.   SMTP_USERNAME: ${SMTP_USERNAME:-}
  298.   SMTP_PASSWORD: ${SMTP_PASSWORD:-}
  299.   SMTP_USE_TLS: ${SMTP_USE_TLS:-true}
  300.   SMTP_OPPORTUNISTIC_TLS: ${SMTP_OPPORTUNISTIC_TLS:-false}
  301.   INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-4000}
  302.   INVITE_EXPIRY_HOURS: ${INVITE_EXPIRY_HOURS:-72}
  303.   RESET_PASSWORD_TOKEN_EXPIRY_MINUTES: ${RESET_PASSWORD_TOKEN_EXPIRY_MINUTES:-5}
  304.   CODE_EXECUTION_ENDPOINT: ${CODE_EXECUTION_ENDPOINT:-http://sandbox:8194}
  305.   CODE_EXECUTION_API_KEY: ${CODE_EXECUTION_API_KEY:-dify-sandbox}
  306.   CODE_MAX_NUMBER: ${CODE_MAX_NUMBER:-9223372036854775807}
  307.   CODE_MIN_NUMBER: ${CODE_MIN_NUMBER:--9223372036854775808}
  308.   CODE_MAX_DEPTH: ${CODE_MAX_DEPTH:-5}
  309.   CODE_MAX_PRECISION: ${CODE_MAX_PRECISION:-20}
  310.   CODE_MAX_STRING_LENGTH: ${CODE_MAX_STRING_LENGTH:-80000}
  311.   CODE_MAX_STRING_ARRAY_LENGTH: ${CODE_MAX_STRING_ARRAY_LENGTH:-30}
  312.   CODE_MAX_OBJECT_ARRAY_LENGTH: ${CODE_MAX_OBJECT_ARRAY_LENGTH:-30}
  313.   CODE_MAX_NUMBER_ARRAY_LENGTH: ${CODE_MAX_NUMBER_ARRAY_LENGTH:-1000}
  314.   CODE_EXECUTION_CONNECT_TIMEOUT: ${CODE_EXECUTION_CONNECT_TIMEOUT:-10}
  315.   CODE_EXECUTION_READ_TIMEOUT: ${CODE_EXECUTION_READ_TIMEOUT:-60}
  316.   CODE_EXECUTION_WRITE_TIMEOUT: ${CODE_EXECUTION_WRITE_TIMEOUT:-10}
  317.   TEMPLATE_TRANSFORM_MAX_LENGTH: ${TEMPLATE_TRANSFORM_MAX_LENGTH:-80000}
  318.   WORKFLOW_MAX_EXECUTION_STEPS: ${WORKFLOW_MAX_EXECUTION_STEPS:-500}
  319.   WORKFLOW_MAX_EXECUTION_TIME: ${WORKFLOW_MAX_EXECUTION_TIME:-1200}
  320.   WORKFLOW_CALL_MAX_DEPTH: ${WORKFLOW_CALL_MAX_DEPTH:-5}
  321.   MAX_VARIABLE_SIZE: ${MAX_VARIABLE_SIZE:-204800}
  322.   WORKFLOW_PARALLEL_DEPTH_LIMIT: ${WORKFLOW_PARALLEL_DEPTH_LIMIT:-3}
  323.   WORKFLOW_FILE_UPLOAD_LIMIT: ${WORKFLOW_FILE_UPLOAD_LIMIT:-10}
  324.   HTTP_REQUEST_NODE_MAX_BINARY_SIZE: ${HTTP_REQUEST_NODE_MAX_BINARY_SIZE:-10485760}
  325.   HTTP_REQUEST_NODE_MAX_TEXT_SIZE: ${HTTP_REQUEST_NODE_MAX_TEXT_SIZE:-1048576}
  326.   HTTP_REQUEST_NODE_SSL_VERIFY: ${HTTP_REQUEST_NODE_SSL_VERIFY:-True}
  327.   SSRF_PROXY_HTTP_URL: ${SSRF_PROXY_HTTP_URL:-http://ssrf_proxy:3128}
  328.   SSRF_PROXY_HTTPS_URL: ${SSRF_PROXY_HTTPS_URL:-http://ssrf_proxy:3128}
  329.   LOOP_NODE_MAX_COUNT: ${LOOP_NODE_MAX_COUNT:-100}
  330.   MAX_TOOLS_NUM: ${MAX_TOOLS_NUM:-10}
  331.   MAX_PARALLEL_LIMIT: ${MAX_PARALLEL_LIMIT:-10}
  332.   MAX_ITERATIONS_NUM: ${MAX_ITERATIONS_NUM:-5}
  333.   TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
  334.   PGUSER: ${PGUSER:-${DB_USERNAME}}
  335.   POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-${DB_PASSWORD}}
  336.   POSTGRES_DB: ${POSTGRES_DB:-${DB_DATABASE}}
  337.   PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
  338.   SANDBOX_API_KEY: ${SANDBOX_API_KEY:-dify-sandbox}
  339.   SANDBOX_GIN_MODE: ${SANDBOX_GIN_MODE:-release}
  340.   SANDBOX_WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15}
  341.   SANDBOX_ENABLE_NETWORK: ${SANDBOX_ENABLE_NETWORK:-true}
  342.   SANDBOX_HTTP_PROXY: ${SANDBOX_HTTP_PROXY:-http://ssrf_proxy:3128}
  343.   SANDBOX_HTTPS_PROXY: ${SANDBOX_HTTPS_PROXY:-http://ssrf_proxy:3128}
  344.   SANDBOX_PORT: ${SANDBOX_PORT:-8194}
  345.   WEAVIATE_PERSISTENCE_DATA_PATH: ${WEAVIATE_PERSISTENCE_DATA_PATH:-/var/lib/weaviate}
  346.   WEAVIATE_QUERY_DEFAULTS_LIMIT: ${WEAVIATE_QUERY_DEFAULTS_LIMIT:-25}
  347.   WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: ${WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED:-true}
  348.   WEAVIATE_DEFAULT_VECTORIZER_MODULE: ${WEAVIATE_DEFAULT_VECTORIZER_MODULE:-none}
  349.   WEAVIATE_CLUSTER_HOSTNAME: ${WEAVIATE_CLUSTER_HOSTNAME:-node1}
  350.   WEAVIATE_AUTHENTICATION_APIKEY_ENABLED: ${WEAVIATE_AUTHENTICATION_APIKEY_ENABLED:-true}
  351.   WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS: ${WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}
  352.   WEAVIATE_AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
  353.   WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
  354.   WEAVIATE_AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
  355.   CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456}
  356.   CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
  357.   CHROMA_IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
  358.   ORACLE_PWD: ${ORACLE_PWD:-Dify123456}
  359.   ORACLE_CHARACTERSET: ${ORACLE_CHARACTERSET:-AL32UTF8}
  360.   ETCD_AUTO_COMPACTION_MODE: ${ETCD_AUTO_COMPACTION_MODE:-revision}
  361.   ETCD_AUTO_COMPACTION_RETENTION: ${ETCD_AUTO_COMPACTION_RETENTION:-1000}
  362.   ETCD_QUOTA_BACKEND_BYTES: ${ETCD_QUOTA_BACKEND_BYTES:-4294967296}
  363.   ETCD_SNAPSHOT_COUNT: ${ETCD_SNAPSHOT_COUNT:-50000}
  364.   MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-minioadmin}
  365.   MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-minioadmin}
  366.   ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}
  367.   MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}
  368.   MILVUS_AUTHORIZATION_ENABLED: ${MILVUS_AUTHORIZATION_ENABLED:-true}
  369.   PGVECTOR_PGUSER: ${PGVECTOR_PGUSER:-postgres}
  370.   PGVECTOR_POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}
  371.   PGVECTOR_POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}
  372.   PGVECTOR_PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}
  373.   OPENSEARCH_DISCOVERY_TYPE: ${OPENSEARCH_DISCOVERY_TYPE:-single-node}
  374.   OPENSEARCH_BOOTSTRAP_MEMORY_LOCK: ${OPENSEARCH_BOOTSTRAP_MEMORY_LOCK:-true}
  375.   OPENSEARCH_JAVA_OPTS_MIN: ${OPENSEARCH_JAVA_OPTS_MIN:-512m}
  376.   OPENSEARCH_JAVA_OPTS_MAX: ${OPENSEARCH_JAVA_OPTS_MAX:-1024m}
  377.   OPENSEARCH_INITIAL_ADMIN_PASSWORD: ${OPENSEARCH_INITIAL_ADMIN_PASSWORD:-Qazwsxedc!@#123}
  378.   OPENSEARCH_MEMLOCK_SOFT: ${OPENSEARCH_MEMLOCK_SOFT:--1}
  379.   OPENSEARCH_MEMLOCK_HARD: ${OPENSEARCH_MEMLOCK_HARD:--1}
  380.   OPENSEARCH_NOFILE_SOFT: ${OPENSEARCH_NOFILE_SOFT:-65536}
  381.   OPENSEARCH_NOFILE_HARD: ${OPENSEARCH_NOFILE_HARD:-65536}
  382.   NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
  383.   NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false}
  384.   NGINX_PORT: ${NGINX_PORT:-80}
  385.   NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443}
  386.   NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
  387.   NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
  388.   NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3}
  389.   NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
  390.   NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-15M}
  391.   NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
  392.   NGINX_PROXY_READ_TIMEOUT: ${NGINX_PROXY_READ_TIMEOUT:-3600s}
  393.   NGINX_PROXY_SEND_TIMEOUT: ${NGINX_PROXY_SEND_TIMEOUT:-3600s}
  394.   NGINX_ENABLE_CERTBOT_CHALLENGE: ${NGINX_ENABLE_CERTBOT_CHALLENGE:-false}
  395.   CERTBOT_EMAIL: ${CERTBOT_EMAIL:-your_email@example.com}
  396.   CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-your_domain.com}
  397.   CERTBOT_OPTIONS: ${CERTBOT_OPTIONS:-}
  398.   SSRF_HTTP_PORT: ${SSRF_HTTP_PORT:-3128}
  399.   SSRF_COREDUMP_DIR: ${SSRF_COREDUMP_DIR:-/var/spool/squid}
  400.   SSRF_REVERSE_PROXY_PORT: ${SSRF_REVERSE_PROXY_PORT:-8194}
  401.   SSRF_SANDBOX_HOST: ${SSRF_SANDBOX_HOST:-sandbox}
  402.   SSRF_DEFAULT_TIME_OUT: ${SSRF_DEFAULT_TIME_OUT:-5}
  403.   SSRF_DEFAULT_CONNECT_TIME_OUT: ${SSRF_DEFAULT_CONNECT_TIME_OUT:-5}
  404.   SSRF_DEFAULT_READ_TIME_OUT: ${SSRF_DEFAULT_READ_TIME_OUT:-5}
  405.   SSRF_DEFAULT_WRITE_TIME_OUT: ${SSRF_DEFAULT_WRITE_TIME_OUT:-5}
  406.   EXPOSE_NGINX_PORT: ${EXPOSE_NGINX_PORT:-80}
  407.   EXPOSE_NGINX_SSL_PORT: ${EXPOSE_NGINX_SSL_PORT:-443}
  408.   POSITION_TOOL_PINS: ${POSITION_TOOL_PINS:-}
  409.   POSITION_TOOL_INCLUDES: ${POSITION_TOOL_INCLUDES:-}
  410.   POSITION_TOOL_EXCLUDES: ${POSITION_TOOL_EXCLUDES:-}
  411.   POSITION_PROVIDER_PINS: ${POSITION_PROVIDER_PINS:-}
  412.   POSITION_PROVIDER_INCLUDES: ${POSITION_PROVIDER_INCLUDES:-}
  413.   POSITION_PROVIDER_EXCLUDES: ${POSITION_PROVIDER_EXCLUDES:-}
  414.   CSP_WHITELIST: ${CSP_WHITELIST:-}
  415.   CREATE_TIDB_SERVICE_JOB_ENABLED: ${CREATE_TIDB_SERVICE_JOB_ENABLED:-false}
  416.   MAX_SUBMIT_COUNT: ${MAX_SUBMIT_COUNT:-100}
  417.   TOP_K_MAX_VALUE: ${TOP_K_MAX_VALUE:-10}
  418.   DB_PLUGIN_DATABASE: ${DB_PLUGIN_DATABASE:-dify_plugin}
  419.   EXPOSE_PLUGIN_DAEMON_PORT: ${EXPOSE_PLUGIN_DAEMON_PORT:-5002}
  420.   PLUGIN_DAEMON_PORT: ${PLUGIN_DAEMON_PORT:-5002}
  421.   PLUGIN_DAEMON_KEY: ${PLUGIN_DAEMON_KEY:-lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi}
  422.   PLUGIN_DAEMON_URL: ${PLUGIN_DAEMON_URL:-http://plugin_daemon:5002}
  423.   PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
  424.   PLUGIN_PPROF_ENABLED: ${PLUGIN_PPROF_ENABLED:-false}
  425.   PLUGIN_DEBUGGING_HOST: ${PLUGIN_DEBUGGING_HOST:-0.0.0.0}
  426.   PLUGIN_DEBUGGING_PORT: ${PLUGIN_DEBUGGING_PORT:-5003}
  427.   EXPOSE_PLUGIN_DEBUGGING_HOST: ${EXPOSE_PLUGIN_DEBUGGING_HOST:-localhost}
  428.   EXPOSE_PLUGIN_DEBUGGING_PORT: ${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}
  429.   PLUGIN_DIFY_INNER_API_KEY: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
  430.   PLUGIN_DIFY_INNER_API_URL: ${PLUGIN_DIFY_INNER_API_URL:-http://api:5001}
  431.   ENDPOINT_URL_TEMPLATE: ${ENDPOINT_URL_TEMPLATE:-http://localhost/e/{hook_id}}
  432.   MARKETPLACE_ENABLED: ${MARKETPLACE_ENABLED:-true}
  433.   MARKETPLACE_API_URL: ${MARKETPLACE_API_URL:-https://marketplace.dify.ai}
  434.   FORCE_VERIFYING_SIGNATURE: ${FORCE_VERIFYING_SIGNATURE:-true}
  435.   PLUGIN_PYTHON_ENV_INIT_TIMEOUT: ${PLUGIN_PYTHON_ENV_INIT_TIMEOUT:-120}
  436.   PLUGIN_MAX_EXECUTION_TIMEOUT: ${PLUGIN_MAX_EXECUTION_TIMEOUT:-600}
  437.   PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
  439. services:
  440.   # API service
  441.   api:
  442.     image: langgenius/dify-api:1.1.4
  443.     restart: always
  444.     environment:
  445.       # Use the shared environment variables.
  446.       <<: *shared-api-worker-env
  447.       # Startup mode, 'api' starts the API server.
  448.       MODE: api
  449.       SENTRY_DSN: ${API_SENTRY_DSN:-}
  450.       SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
  451.       SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}
  452.       PLUGIN_REMOTE_INSTALL_HOST: ${EXPOSE_PLUGIN_DEBUGGING_HOST:-localhost}
  453.       PLUGIN_REMOTE_INSTALL_PORT: ${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}
  454.       PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
  455.       INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
  456.     depends_on:
  457.       - db
  458.       - redis
  459.     volumes:
  460.       # Mount the storage directory to the container, for storing user files.
  461.       - ./volumes/app/storage:/app/api/storage
  462.     networks:
  463.       - ssrf_proxy_network
  464.       - default
  465.     command: >
  466.       /wait-for-it.sh db:5432 -t 30 -- echo "DB is up" &&
  467.       /wait-for-it.sh redis:6379 -t 30 -- echo "Redis is up"
  469.   # worker service
  470.   # The Celery worker for processing the queue.
  471.   worker:
  472.     image: langgenius/dify-api:1.1.4
  473.     restart: always
  474.     environment:
  475.       # Use the shared environment variables.
  476.       <<: *shared-api-worker-env
  477.       # Startup mode, 'worker' starts the Celery worker for processing the queue.
  478.       MODE: worker
  479.       SENTRY_DSN: ${API_SENTRY_DSN:-}
  480.       SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
  481.       SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}
  482.       PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
  483.       INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
  484.     depends_on:
  485.       - db
  486.       - redis
  487.     volumes:
  488.       # Mount the storage directory to the container, for storing user files.
  489.       - ./volumes/app/storage:/app/api/storage
  490.     networks:
  491.       - ssrf_proxy_network
  492.       - default
  493.     command: >
  494.       /wait-for-it.sh db:5432 -t 30 -- echo "DB is up" &&
  495.       /wait-for-it.sh redis:6379 -t 30 -- echo "Redis is up"
  497.   # Frontend web application.
  498.   web:
  499.     image: langgenius/dify-web:1.1.3
  500.     restart: always
  501.     environment:
  502.       CONSOLE_API_URL: ${CONSOLE_API_URL:-}
  503.       APP_API_URL: ${APP_API_URL:-}
  504.       SENTRY_DSN: ${WEB_SENTRY_DSN:-}
  505.       NEXT_TELEMETRY_DISABLED: ${NEXT_TELEMETRY_DISABLED:-0}
  506.       TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
  507.       CSP_WHITELIST: ${CSP_WHITELIST:-}
  508.       MARKETPLACE_API_URL: ${MARKETPLACE_API_URL:-https://marketplace.dify.ai}
  509.       MARKETPLACE_URL: ${MARKETPLACE_URL:-https://marketplace.dify.ai}
  510.       TOP_K_MAX_VALUE: ${TOP_K_MAX_VALUE:-}
  511.       INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-}
  512.       PM2_INSTANCES: ${PM2_INSTANCES:-2}
  513.       LOOP_NODE_MAX_COUNT: ${LOOP_NODE_MAX_COUNT:-100}
  514.       MAX_TOOLS_NUM: ${MAX_TOOLS_NUM:-10}
  515.       MAX_PARALLEL_LIMIT: ${MAX_PARALLEL_LIMIT:-10}
  516.       MAX_ITERATIONS_NUM: ${MAX_ITERATIONS_NUM:-5}
  518.   # The postgres database.
  519.   db:
  520.     image: postgres:15-alpine
  521.     restart: always
  522.     environment:
  523.       PGUSER: ${PGUSER:-postgres}
  524.       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-difyai123456}
  525.       POSTGRES_DB: ${POSTGRES_DB:-dify}
  526.       PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
  527.     command: >
  528.       postgres -c 'max_connections=${POSTGRES_MAX_CONNECTIONS:-100}'
  529.                -c 'shared_buffers=${POSTGRES_SHARED_BUFFERS:-128MB}'
  530.                -c 'work_mem=${POSTGRES_WORK_MEM:-4MB}'
  531.                -c 'maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}'
  532.                -c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}'
  533.     volumes:
  534.       - ./volumes/db/data:/var/lib/postgresql/data
  535.     healthcheck:
  536.       test: [ 'CMD', 'pg_isready' ]
  537.       interval: 1s
  538.       timeout: 3s
  539.       retries: 30
  541.   # The redis cache.
  542.   redis:
  543.     image: redis:6-alpine
  544.     restart: always
  545.     environment:
  546.       REDISCLI_AUTH: ${REDIS_PASSWORD:-difyai123456}
  547.     volumes:
  548.       # Mount the redis data directory to the container.
  549.       - ./volumes/redis/data:/data
  550.     # Set the redis password when startup redis server.
  551.     command: redis-server --requirepass ${REDIS_PASSWORD:-difyai123456}
  552.     healthcheck:
  553.       test: [ 'CMD', 'redis-cli', 'ping' ]
  554.    
  556.   # The DifySandbox
  557.   sandbox:
  558.     image: langgenius/dify-sandbox:0.2.11
  559.     restart: always
  560.     environment:
  561.       # The DifySandbox configurations
  562.       # Make sure you are changing this key for your deployment with a strong key.
  563.       # You can generate a strong key using `openssl rand -base64 42`.
  564.       API_KEY: ${SANDBOX_API_KEY:-dify-sandbox}
  565.       GIN_MODE: ${SANDBOX_GIN_MODE:-release}
  566.       WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15}
  567.       ENABLE_NETWORK: ${SANDBOX_ENABLE_NETWORK:-true}
  568.       HTTP_PROXY: ${SANDBOX_HTTP_PROXY:-http://ssrf_proxy:3128}
  569.       HTTPS_PROXY: ${SANDBOX_HTTPS_PROXY:-http://ssrf_proxy:3128}
  570.       SANDBOX_PORT: ${SANDBOX_PORT:-8194}
  571.     volumes:
  572.       - ./volumes/sandbox/dependencies:/dependencies
  573.       - ./volumes/sandbox/conf:/conf
  574.     healthcheck:
  575.       test: [ 'CMD', 'curl', '-f', 'http://localhost:8194/health' ]
  576.     networks:
  577.       - ssrf_proxy_network
  579.   # plugin daemon
  580.   plugin_daemon:
  581.     image: langgenius/dify-plugin-daemon:0.0.7-local
  582.     restart: always
  583.     environment:
  584.       # Use the shared environment variables.
  585.       <<: *shared-api-worker-env
  586.       DB_DATABASE: ${DB_PLUGIN_DATABASE:-dify_plugin}
  587.       SERVER_PORT: ${PLUGIN_DAEMON_PORT:-5002}
  588.       SERVER_KEY: ${PLUGIN_DAEMON_KEY:-lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi}
  589.       MAX_PLUGIN_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
  590.       PPROF_ENABLED: ${PLUGIN_PPROF_ENABLED:-false}
  591.       DIFY_INNER_API_URL: ${PLUGIN_DIFY_INNER_API_URL:-http://api:5001}
  592.       DIFY_INNER_API_KEY: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
  593.       PLUGIN_REMOTE_INSTALLING_HOST: ${PLUGIN_DEBUGGING_HOST:-0.0.0.0}
  594.       PLUGIN_REMOTE_INSTALLING_PORT: ${PLUGIN_DEBUGGING_PORT:-5003}
  595.       PLUGIN_WORKING_PATH: ${PLUGIN_WORKING_PATH:-/app/storage/cwd}
  596.       FORCE_VERIFYING_SIGNATURE: ${FORCE_VERIFYING_SIGNATURE:-true}
  597.       PYTHON_ENV_INIT_TIMEOUT: ${PLUGIN_PYTHON_ENV_INIT_TIMEOUT:-120}
  598.       PLUGIN_MAX_EXECUTION_TIMEOUT: ${PLUGIN_MAX_EXECUTION_TIMEOUT:-600}
  599.       PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
  600.     ports:
  601.       - "${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}:${PLUGIN_DEBUGGING_PORT:-5003}"
  602.     volumes:
  603.       - ./volumes/plugin_daemon:/app/storage
  604.     depends_on:
  605.       - db
  606.     command: >
  607.        /wait-for-it.sh db:5432 -t 30 -- /bin/bash -c "/app/entrypoint.sh"
  609.   # ssrf_proxy server
  610.   # for more information, please refer to
  611.   # https://docs.dify.ai/learn-more/faq/install-faq#id-18.-why-is-ssrf_proxy-needed
  612.   ssrf_proxy:
  613.     image: ubuntu/squid:latest
  614.     restart: always
  615.     volumes:
  616.       - ./ssrf_proxy/squid.conf.template:/etc/squid/squid.conf.template
  617.       - ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh
  618.     entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]
  619.     environment:
  620.       # pls clearly modify the squid env vars to fit your network environment.
  621.       HTTP_PORT: ${SSRF_HTTP_PORT:-3128}
  622.       COREDUMP_DIR: ${SSRF_COREDUMP_DIR:-/var/spool/squid}
  623.       REVERSE_PROXY_PORT: ${SSRF_REVERSE_PROXY_PORT:-8194}
  624.       SANDBOX_HOST: ${SSRF_SANDBOX_HOST:-sandbox}
  625.       SANDBOX_PORT: ${SANDBOX_PORT:-8194}
  626.     networks:
  627.       - ssrf_proxy_network
  628.       - default
  630.   # Certbot service
  631.   # use `docker-compose --profile certbot up` to start the certbot service.
  632.   certbot:
  633.     image: certbot/certbot
  634.     profiles:
  635.       - certbot
  636.     volumes:
  637.       - ./volumes/certbot/conf:/etc/letsencrypt
  638.       - ./volumes/certbot/www:/var/www/html
  639.       - ./volumes/certbot/logs:/var/log/letsencrypt
  640.       - ./volumes/certbot/conf/live:/etc/letsencrypt/live
  641.       - ./certbot/update-cert.template.txt:/update-cert.template.txt
  642.       - ./certbot/docker-entrypoint.sh:/docker-entrypoint.sh
  643.     environment:
  644.       - CERTBOT_EMAIL=${CERTBOT_EMAIL}
  645.       - CERTBOT_DOMAIN=${CERTBOT_DOMAIN}
  646.       - CERTBOT_OPTIONS=${CERTBOT_OPTIONS:-}
  647.     entrypoint: [ '/docker-entrypoint.sh' ]
  648.     command: [ 'tail', '-f', '/dev/null' ]
  650.   # The nginx reverse proxy.
  651.   # used for reverse proxying the API service and Web service.
  652.   nginx:
  653.     image: nginx:latest
  654.     restart: always
  655.     volumes:
  656.       - ./nginx/nginx.conf.template:/etc/nginx/nginx.conf.template
  657.       - ./nginx/proxy.conf.template:/etc/nginx/proxy.conf.template
  658.       - ./nginx/https.conf.template:/etc/nginx/https.conf.template
  659.       - ./nginx/conf.d:/etc/nginx/conf.d
  660.       - ./nginx/docker-entrypoint.sh:/docker-entrypoint-mount.sh
  661.       - ./nginx/ssl:/etc/ssl # cert dir (legacy)
  662.       - ./volumes/certbot/conf/live:/etc/letsencrypt/live # cert dir (with certbot container)
  663.       - ./volumes/certbot/conf:/etc/letsencrypt
  664.       - ./volumes/certbot/www:/var/www/html
  665.     entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]
  666.     environment:
  667.       NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
  668.       NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false}
  669.       NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443}
  670.       NGINX_PORT: ${NGINX_PORT:-80}
  671.       # You're required to add your own SSL certificates/keys to the `./nginx/ssl` directory
  672.       # and modify the env vars below in .env if HTTPS_ENABLED is true.
  673.       NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
  674.       NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
  675.       NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3}
  676.       NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
  677.       NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-15M}
  678.       NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
  679.       NGINX_PROXY_READ_TIMEOUT: ${NGINX_PROXY_READ_TIMEOUT:-3600s}
  680.       NGINX_PROXY_SEND_TIMEOUT: ${NGINX_PROXY_SEND_TIMEOUT:-3600s}
  681.       NGINX_ENABLE_CERTBOT_CHALLENGE: ${NGINX_ENABLE_CERTBOT_CHALLENGE:-false}
  682.       CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-}
  683.     depends_on:
  684.       - api
  685.       - web
  686.     ports:
  687.       - '${EXPOSE_NGINX_PORT:-80}:${NGINX_PORT:-80}'
  688.       - '${EXPOSE_NGINX_SSL_PORT:-443}:${NGINX_SSL_PORT:-443}'
  691.   # The Weaviate vector store.
  692.   weaviate:
  693.     image: semitechnologies/weaviate:1.19.0
  694.     profiles:
  695.       - ''
  696.       - weaviate
  697.     restart: always
  698.     volumes:
  699.       # Mount the Weaviate data directory to the con tainer.
  700.       - ./volumes/weaviate:/var/lib/weaviate
  701.     environment:
  702.       # The Weaviate configurations
  703.       # You can refer to the [Weaviate](https://weaviate.io/developers/weaviate/config-refs/env-vars) documentation for more information.
  704.       PERSISTENCE_DATA_PATH: ${WEAVIATE_PERSISTENCE_DATA_PATH:-/var/lib/weaviate}
  705.       QUERY_DEFAULTS_LIMIT: ${WEAVIATE_QUERY_DEFAULTS_LIMIT:-25}
  706.       AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: ${WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED:-false}
  707.       DEFAULT_VECTORIZER_MODULE: ${WEAVIATE_DEFAULT_VECTORIZER_MODULE:-none}
  708.       CLUSTER_HOSTNAME: ${WEAVIATE_CLUSTER_HOSTNAME:-node1}
  709.       AUTHENTICATION_APIKEY_ENABLED: ${WEAVIATE_AUTHENTICATION_APIKEY_ENABLED:-true}
  710.       AUTHENTICATION_APIKEY_ALLOWED_KEYS: ${WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}
  711.       AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
  712.       AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
  713.       AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
  715.   # Qdrant vector store.
  716.   # (if used, you need to set VECTOR_STORE to qdrant in the api & worker service.)
  717.   qdrant:
  718.     image: langgenius/qdrant:v1.7.3
  719.     profiles:
  720.       - qdrant
  721.     restart: always
  722.     volumes:
  723.       - ./volumes/qdrant:/qdrant/storage
  724.     environment:
  725.       QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456}
  727.   # The Couchbase vector store.
  728.   couchbase-server:
  729.     build: ./couchbase-server
  730.     profiles:
  731.       - couchbase
  732.     restart: always
  733.     environment:
  734.       - CLUSTER_NAME=dify_search
  735.       - COUCHBASE_ADMINISTRATOR_USERNAME=${COUCHBASE_USER:-Administrator}
  736.       - COUCHBASE_ADMINISTRATOR_PASSWORD=${COUCHBASE_PASSWORD:-password}
  737.       - COUCHBASE_BUCKET=${COUCHBASE_BUCKET_NAME:-Embeddings}
  738.       - COUCHBASE_BUCKET_RAMSIZE=512
  739.       - COUCHBASE_RAM_SIZE=2048
  740.       - COUCHBASE_EVENTING_RAM_SIZE=512
  741.       - COUCHBASE_INDEX_RAM_SIZE=512
  742.       - COUCHBASE_FTS_RAM_SIZE=1024
  743.     hostname: couchbase-server
  744.     container_name: couchbase-server
  745.     working_dir: /opt/couchbase
  746.     stdin_open: true
  747.     tty: true
  748.     entrypoint: [ "" ]
  749.     command: sh -c "/opt/couchbase/init/init-cbserver.sh"
  750.     volumes:
  751.       - ./volumes/couchbase/data:/opt/couchbase/var/lib/couchbase/data
  752.     healthcheck:
  753.       # ensure bucket was created before proceeding
  754.       test: [ "CMD-SHELL", "curl -s -f -u Administrator:password http://localhost:8091/pools/default/buckets | grep -q '\\[{' || exit 1" ]
  755.       interval: 10s
  756.       retries: 10
  757.       start_period: 30s
  758.       timeout: 10s
  760.   # The pgvector vector database.
  761.   pgvector:
  762.     image: pgvector/pgvector:pg16
  763.     profiles:
  764.       - pgvector
  765.     restart: always
  766.     environment:
  767.       PGUSER: ${PGVECTOR_PGUSER:-postgres}
  768.       # The password for the default postgres user.
  769.       POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}
  770.       # The name of the default postgres database.
  771.       POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}
  772.       # postgres data directory
  773.       PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}
  774.       # pg_bigm module for full text search
  775.       PG_BIGM: ${PGVECTOR_PG_BIGM:-false}
  776.       PG_BIGM_VERSION: ${PGVECTOR_PG_BIGM_VERSION:-1.2-20240606}
  777.     volumes:
  778.       - ./volumes/pgvector/data:/var/lib/postgresql/data
  779.       - ./pgvector/docker-entrypoint.sh:/docker-entrypoint.sh
  780.     entrypoint: [ '/docker-entrypoint.sh' ]
  781.     healthcheck:
  782.       test: [ 'CMD', 'pg_isready' ]
  783.       interval: 1s
  784.       timeout: 3s
  785.       retries: 30
  787.   # pgvecto-rs vector store
  788.   pgvecto-rs:
  789.     image: tensorchord/pgvecto-rs:pg16-v0.3.0
  790.     profiles:
  791.       - pgvecto-rs
  792.     restart: always
  793.     environment:
  794.       PGUSER: ${PGVECTOR_PGUSER:-postgres}
  795.       # The password for the default postgres user.
  796.       POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}
  797.       # The name of the default postgres database.
  798.       POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}
  799.       # postgres data directory
  800.       PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}
  801.     volumes:
  802.       - ./volumes/pgvecto_rs/data:/var/lib/postgresql/data
  803.     healthcheck:
  804.       test: [ 'CMD', 'pg_isready' ]
  805.       interval: 1s
  806.       timeout: 3s
  807.       retries: 30
  809.   # Chroma vector database
  810.   chroma:
  811.     image: ghcr.io/chroma-core/chroma:0.5.20
  812.     profiles:
  813.       - chroma
  814.     restart: always
  815.     volumes:
  816.       - ./volumes/chroma:/chroma/chroma
  817.     environment:
  818.       CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456}
  819.       CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
  820.       IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
  822.   # OceanBase vector database
  823.   oceanbase:
  824.     image: oceanbase/oceanbase-ce:4.3.5.1-101000042025031818
  825.     container_name: oceanbase
  826.     profiles:
  827.       - oceanbase
  828.     restart: always
  829.     volumes:
  830.       - ./volumes/oceanbase/data:/root/ob
  831.       - ./volumes/oceanbase/conf:/root/.obd/cluster
  832.       - ./volumes/oceanbase/init.d:/root/boot/init.d
  833.     environment:
  834.       OB_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
  835.       OB_SYS_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
  836.       OB_TENANT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
  837.       OB_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
  838.       MODE: MINI
  839.     ports:
  840.       - "${OCEANBASE_VECTOR_PORT:-2881}:2881"
  842.   # Oracle vector database
  843.   oracle:
  844.     image: container-registry.oracle.com/database/free:latest
  845.     profiles:
  846.       - oracle
  847.     restart: always
  848.     volumes:
  849.       - source: oradata
  850.         type: volume
  851.         target: /opt/oracle/oradata
  852.       - ./startupscripts:/opt/oracle/scripts/startup
  853.     environment:
  854.       ORACLE_PWD: ${ORACLE_PWD:-Dify123456}
  855.       ORACLE_CHARACTERSET: ${ORACLE_CHARACTERSET:-AL32UTF8}
  857.   # Milvus vector database services
  858.   etcd:
  859.     container_name: milvus-etcd
  860.     image: quay.io/coreos/etcd:v3.5.5
  861.     profiles:
  862.       - milvus
  863.     environment:
  864.       ETCD_AUTO_COMPACTION_MODE: ${ETCD_AUTO_COMPACTION_MODE:-revision}
  865.       ETCD_AUTO_COMPACTION_RETENTION: ${ETCD_AUTO_COMPACTION_RETENTION:-1000}
  866.       ETCD_QUOTA_BACKEND_BYTES: ${ETCD_QUOTA_BACKEND_BYTES:-4294967296}
  867.       ETCD_SNAPSHOT_COUNT: ${ETCD_SNAPSHOT_COUNT:-50000}
  868.     volumes:
  869.       - ./volumes/milvus/etcd:/etcd
  870.     command: etcd -advertise-client-urls=http://127.0.0.1:2379 -listen-client-urls http://0.0.0.0:2379 --data-dir /etcd
  871.     healthcheck:
  872.       test: [ 'CMD', 'etcdctl', 'endpoint', 'health' ]
  873.       interval: 30s
  874.       timeout: 20s
  875.       retries: 3
  876.     networks:
  877.       - milvus
  879.   minio:
  880.     container_name: milvus-minio
  881.     image: minio/minio:RELEASE.2023-03-20T20-16-18Z
  882.     profiles:
  883.       - milvus
  884.     environment:
  885.       MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-minioadmin}
  886.       MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-minioadmin}
  887.     volumes:
  888.       - ./volumes/milvus/minio:/minio_data
  889.     command: minio server /minio_data --console-address ":9001"
  890.     healthcheck:
  891.       test: [ 'CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live' ]
  892.       interval: 30s
  893.       timeout: 20s
  894.       retries: 3
  895.     networks:
  896.       - milvus
  898.   milvus-standalone:
  899.     container_name: milvus-standalone
  900.     image: milvusdb/milvus:v2.5.0-beta
  901.     profiles:
  902.       - milvus
  903.     command: [ 'milvus', 'run', 'standalone' ]
  904.     environment:
  905.       ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}
  906.       MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}
  907.       common.security.authorizationEnabled: ${MILVUS_AUTHORIZATION_ENABLED:-true}
  908.     volumes:
  909.       - ./volumes/milvus/milvus:/var/lib/milvus
  910.     healthcheck:
  911.       test: [ 'CMD', 'curl', '-f', 'http://localhost:9091/healthz' ]
  912.       interval: 30s
  913.       start_period: 90s
  914.       timeout: 20s
  915.       retries: 3
  916.     depends_on:
  917.       - etcd
  918.       - minio
  919.     ports:
  920.       - 19530:19530
  921.       - 9091:9091
  922.     networks:
  923.       - milvus
  925.   # Opensearch vector database
  926.   opensearch:
  927.     container_name: opensearch
  928.     image: opensearchproject/opensearch:latest
  929.     profiles:
  930.       - opensearch
  931.     environment:
  932.       discovery.type: ${OPENSEARCH_DISCOVERY_TYPE:-single-node}
  933.       bootstrap.memory_lock: ${OPENSEARCH_BOOTSTRAP_MEMORY_LOCK:-true}
  934.       OPENSEARCH_JAVA_OPTS: -Xms${OPENSEARCH_JAVA_OPTS_MIN:-512m} -Xmx${OPENSEARCH_JAVA_OPTS_MAX:-1024m}
  935.       OPENSEARCH_INITIAL_ADMIN_PASSWORD: ${OPENSEARCH_INITIAL_ADMIN_PASSWORD:-Qazwsxedc!@#123}
  936.     ulimits:
  937.       memlock:
  938.         soft: ${OPENSEARCH_MEMLOCK_SOFT:--1}
  939.         hard: ${OPENSEARCH_MEMLOCK_HARD:--1}
  940.       nofile:
  941.         soft: ${OPENSEARCH_NOFILE_SOFT:-65536}
  942.         hard: ${OPENSEARCH_NOFILE_HARD:-65536}
  943.     volumes:
  944.       - ./volumes/opensearch/data:/usr/share/opensearch/data
  945.     networks:
  946.       - opensearch-net
  948.   opensearch-dashboards:
  949.     container_name: opensearch-dashboards
  950.     image: opensearchproject/opensearch-dashboards:latest
  951.     profiles:
  952.       - opensearch
  953.     environment:
  954.       OPENSEARCH_HOSTS: '["https://opensearch:9200"]'
  955.     volumes:
  956.       - ./volumes/opensearch/opensearch_dashboards.yml:/usr/share/opensearch-dashboards/config/opensearch_dashboards.yml
  957.     networks:
  958.       - opensearch-net
  959.     depends_on:
  960.       - opensearch
  962.   # opengauss vector database.
  963.   opengauss:
  964.     image: opengauss/opengauss:7.0.0-RC1
  965.     profiles:
  966.       - opengauss
  967.     privileged: true
  968.     restart: always
  969.     environment:
  970.       GS_USERNAME: ${OPENGAUSS_USER:-postgres}
  971.       GS_PASSWORD: ${OPENGAUSS_PASSWORD:-Dify@123}
  972.       GS_PORT: ${OPENGAUSS_PORT:-6600}
  973.       GS_DB: ${OPENGAUSS_DATABASE:-dify}
  974.     volumes:
  975.       - ./volumes/opengauss/data:/var/lib/opengauss/data
  976.     healthcheck:
  977.       test: ["CMD-SHELL", "netstat -lntp | grep tcp6 > /dev/null 2>&1"]
  978.       interval: 10s
  979.       timeout: 10s
  980.       retries: 10
  981.     ports:
  982.       - ${OPENGAUSS_PORT:-6600}:${OPENGAUSS_PORT:-6600}
  984.   # MyScale vector database
  985.   myscale:
  986.     container_name: myscale
  987.     image: myscale/myscaledb:1.6.4
  988.     profiles:
  989.       - myscale
  990.     restart: always
  991.     tty: true
  992.     volumes:
  993.       - ./volumes/myscale/data:/var/lib/clickhouse
  994.       - ./volumes/myscale/log:/var/log/clickhouse-server
  995.       - ./volumes/myscale/config/users.d/custom_users_config.xml:/etc/clickhouse-server/users.d/custom_users_config.xml
  996.     ports:
  997.       - ${MYSCALE_PORT:-8123}:${MYSCALE_PORT:-8123}
  999.   # https://www.elastic.co/guide/en/elasticsearch/reference/current/settings.html
  1000.   # https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html#docker-prod-prerequisites
  1001.   elasticsearch:
  1002.     image: docker.elastic.co/elasticsearch/elasticsearch:8.14.3
  1003.     container_name: elasticsearch
  1004.     profiles:
  1005.       - elasticsearch
  1006.       - elasticsearch-ja
  1007.     restart: always
  1008.     volumes:
  1009.       - ./elasticsearch/docker-entrypoint.sh:/docker-entrypoint-mount.sh
  1010.       - dify_es01_data:/usr/share/elasticsearch/data
  1011.     environment:
  1012.       ELASTIC_PASSWORD: ${ELASTICSEARCH_PASSWORD:-elastic}
  1013.       VECTOR_STORE: ${VECTOR_STORE:-}
  1014.       cluster.name: dify-es-cluster
  1015.       node.name: dify-es0
  1016.       discovery.type: single-node
  1017.       xpack.license.self_generated.type: basic
  1018.       xpack.security.enabled: 'true'
  1019.       xpack.security.enrollment.enabled: 'false'
  1020.       xpack.security.http.ssl.enabled: 'false'
  1021.     ports:
  1022.       - ${ELASTICSEARCH_PORT:-9200}:9200
  1023.     deploy:
  1024.       resources:
  1025.         limits:
  1026.           memory: 2g
  1027.     entrypoint: [ 'sh', '-c', "sh /docker-entrypoint-mount.sh" ]
  1028.     healthcheck:
  1029.       test: [ 'CMD', 'curl', '-s', 'http://localhost:9200/_cluster/health?pretty' ]
  1030.       interval: 30s
  1031.       timeout: 10s
  1032.       retries: 50
  1034.   # https://www.elastic.co/guide/en/kibana/current/docker.html
  1035.   # https://www.elastic.co/guide/en/kibana/current/settings.html
  1036.   kibana:
  1037.     image: docker.elastic.co/kibana/kibana:8.14.3
  1038.     container_name: kibana
  1039.     profiles:
  1040.       - elasticsearch
  1041.     depends_on:
  1042.       - elasticsearch
  1043.     restart: always
  1044.     environment:
  1045.       XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: d1a66dfd-c4d3-4a0a-8290-2abcb83ab3aa
  1046.       NO_PROXY: localhost,127.0.0.1,elasticsearch,kibana
  1047.       XPACK_SECURITY_ENABLED: 'true'
  1048.       XPACK_SECURITY_ENROLLMENT_ENABLED: 'false'
  1049.       XPACK_SECURITY_HTTP_SSL_ENABLED: 'false'
  1050.       XPACK_FLEET_ISAIRGAPPED: 'true'
  1051.       I18N_LOCALE: zh-CN
  1052.       SERVER_PORT: '5601'
  1053.       ELASTICSEARCH_HOSTS: http://elasticsearch:9200
  1054.     ports:
  1055.       - ${KIBANA_PORT:-5601}:5601
  1056.     healthcheck:
  1057.       test: [ 'CMD-SHELL', 'curl -s http://localhost:5601 >/dev/null || exit 1' ]
  1058.       interval: 30s
  1059.       timeout: 10s
  1060.       retries: 3
  1062.   # unstructured .
  1063.   # (if used, you need to set ETL_TYPE to Unstructured in the api & worker service.)
  1064.   unstructured:
  1065.     image: downloads.unstructured.io/unstructured-io/unstructured-api:latest
  1066.     profiles:
  1067.       - unstructured
  1068.     restart: always
  1069.     volumes:
  1070.       - ./volumes/unstructured:/app/data
  1072. networks:
  1073.   # create a network between sandbox, api and ssrf_proxy, and can not access outside.
  1074.   ssrf_proxy_network:
  1075.     driver: bridge
  1076.     internal: true
  1077.   milvus:
  1078.     driver: bridge
  1079.   opensearch-net:
  1080.     driver: bridge
  1081.     internal: true
  1083. volumes:
  1084.   oradata:
  1085.   dify_es01_data:
复制代码
实际上，我只是对api、woker、plugin_daemon三个模块的启动参数做了修改，将image更换成上述生成的新镜像，并增加command部分，用wait-for-it.sh确保各模块的前序模块已经加载后，再运行自身的启动命令。其中plugin_daemon部分的command命令比力特殊：
  1. /wait-for-it.sh db:5432 -t 30 -- /bin/bash -c "/app/entrypoint.sh"
复制代码
wait-for-it.sh后的/bin/bash -c "/app/entrypoint.sh"是利用如下使命获得的：
  1. docker inspect <plugin_daemon_container_name> --format '{{.Config.Cmd}}'
复制代码
注意<plugin_daemon_container_name>要更换成plugin_daemon的容器名（可以用容器ID），而不是镜像名。
5.在dify\docker目录中，运行如下命令：
  1. docker compose up -d
复制代码
6.在docker destkop的containers页面中，点击"docker"就可以看到dify启动的log。点击docker下一层的plugin_daemon-1，可以看到db的初始化情况。
至此，failed to initialize database错误消散。
上述方法是在我的windows11、docker desktop环境下实现，其他环境未做测试。


免责声明：如果侵犯了您的权益，请联系站长，我们会及时删除侵权内容，谢谢合作！更多信息从访问主页：qidao123.com:ToB企服之家，中国第一个企服评测及商务社交产业平台。
继续阅读请点击广告
回复

使用道具 举报

0 个回复

倒序浏览
返回列表

快速回复

高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 or 立即注册

本版积分规则

拉不拉稀肚拉稀

论坛元老
这个人很懒什么都没写!

楼主热帖

标签云

国产数据库 集成商 AI 运维 CIO 存储 服务器
微信订阅号
微信服务号
微信客服
小程序
H5
关于我们 商务合作 网站地图
©Copyright 2022-2024 杭州祥升科技有限公司 版权所有 浙ICP备20004199号
快速回复 返回顶部 返回列表