Docker Compose国内镜像一键摆设dify1.2.0(当前最新版)

克隆代码

1. git clone -b 1.2.0 https://github.com/langgenius/dify.git

复制代码

进入docker目录

1. cd docker

复制代码

修改.env部分

1. # 将环境模版文件变量重命名
2. cp .env.example .env
3. # 修改 .env,修改nginx的host和端口,避免端口冲突
4. NGINX_SERVER_NAME=192.168.1.223
5. NGINX_PORT=1880
6. NGINX_SSL_PORT=1443
7. EXPOSE_NGINX_PORT=1880
8. EXPOSE_NGINX_SSL_PORT=1443
10. # s3
11. PLUGIN_S3_USE_AWS_MANAGED_IAM=false
12. PLUGIN_S3_USE_PATH_STYLE=false
15. # 删除模版后缀，可不做修改
16. cp middleware.env.example middleware.env

复制代码

目录布局如下：

1. root@dify:~/dify# ls -lah
2. total 140K
3. drwxr-xr-x 11 root root 4.0K Apr 14 03:49 .
4. drwx------  6 root root 4.0K Mar  6 07:23 ..
5. drwxr-xr-x  2 root root 4.0K Apr 14 03:49 certbot
6. drwxr-xr-x  2 root root 4.0K Apr 14 03:49 couchbase-server
7. -rw-r--r--  1 root root  52K Apr 14 05:46 dify.yaml
8. drwxr-xr-x  2 root root 4.0K Apr 14 03:49 elasticsearch
9. -rw-r--r--  1 root root  35K Apr 14 05:46 .env
10. -rw-r--r--  1 root root 4.9K Apr 14 03:12 middleware.env
11. drwxr-xr-x  4 root root 4.0K Apr 14 03:49 nginx
12. drwxr-xr-x  2 root root 4.0K Apr 14 03:49 pgvector
13. drwxr-xr-x  2 root root 4.0K Apr 14 03:49 ssrf_proxy
14. drwxr-xr-x  2 root root 4.0K Apr 14 03:49 startupscripts
15. drwxr-xr-x  3 root root 4.0K Apr 14 03:49 tidb
16. drwxr-xr-x 12 root root 4.0K Apr 14 03:57 volumes

复制代码

dify.yaml国内镜像文件如下

1. # ==================================================================
2. # WARNING: This file is auto-generated by generate_docker_compose
3. # Do not modify this file directly. Instead, update the .env.example
4. # or docker-compose-template.yaml and regenerate this file.
5. # ==================================================================
7. x-shared-env: &shared-api-worker-env
8.   CONSOLE_API_URL: ${CONSOLE_API_URL:-}
9.   CONSOLE_WEB_URL: ${CONSOLE_WEB_URL:-}
10.   SERVICE_API_URL: ${SERVICE_API_URL:-}
11.   APP_API_URL: ${APP_API_URL:-}
12.   APP_WEB_URL: ${APP_WEB_URL:-}
13.   FILES_URL: ${FILES_URL:-}
14.   LOG_LEVEL: ${LOG_LEVEL:-INFO}
15.   LOG_FILE: ${LOG_FILE:-/app/logs/server.log}
16.   LOG_FILE_MAX_SIZE: ${LOG_FILE_MAX_SIZE:-20}
17.   LOG_FILE_BACKUP_COUNT: ${LOG_FILE_BACKUP_COUNT:-5}
18.   LOG_DATEFORMAT: ${LOG_DATEFORMAT:-%Y-%m-%d %H:%M:%S}
19.   LOG_TZ: ${LOG_TZ:-UTC}
20.   DEBUG: ${DEBUG:-false}
21.   FLASK_DEBUG: ${FLASK_DEBUG:-false}
22.   SECRET_KEY: ${SECRET_KEY:-sk-9f73s3ljTXVcMT3Blb3ljTqtsKiGHXVcMT3BlbkFJLK7U}
23.   INIT_PASSWORD: ${INIT_PASSWORD:-}
24.   DEPLOY_ENV: ${DEPLOY_ENV:-PRODUCTION}
25.   CHECK_UPDATE_URL: ${CHECK_UPDATE_URL:-https://updates.dify.ai}
26.   OPENAI_API_BASE: ${OPENAI_API_BASE:-https://api.openai.com/v1}
27.   MIGRATION_ENABLED: ${MIGRATION_ENABLED:-true}
28.   FILES_ACCESS_TIMEOUT: ${FILES_ACCESS_TIMEOUT:-300}
29.   ACCESS_TOKEN_EXPIRE_MINUTES: ${ACCESS_TOKEN_EXPIRE_MINUTES:-60}
30.   REFRESH_TOKEN_EXPIRE_DAYS: ${REFRESH_TOKEN_EXPIRE_DAYS:-30}
31.   APP_MAX_ACTIVE_REQUESTS: ${APP_MAX_ACTIVE_REQUESTS:-0}
32.   APP_MAX_EXECUTION_TIME: ${APP_MAX_EXECUTION_TIME:-1200}
33.   DIFY_BIND_ADDRESS: ${DIFY_BIND_ADDRESS:-0.0.0.0}
34.   DIFY_PORT: ${DIFY_PORT:-5001}
35.   SERVER_WORKER_AMOUNT: ${SERVER_WORKER_AMOUNT:-1}
36.   SERVER_WORKER_CLASS: ${SERVER_WORKER_CLASS:-gevent}
37.   SERVER_WORKER_CONNECTIONS: ${SERVER_WORKER_CONNECTIONS:-10}
38.   CELERY_WORKER_CLASS: ${CELERY_WORKER_CLASS:-}
39.   GUNICORN_TIMEOUT: ${GUNICORN_TIMEOUT:-360}
40.   CELERY_WORKER_AMOUNT: ${CELERY_WORKER_AMOUNT:-}
41.   CELERY_AUTO_SCALE: ${CELERY_AUTO_SCALE:-false}
42.   CELERY_MAX_WORKERS: ${CELERY_MAX_WORKERS:-}
43.   CELERY_MIN_WORKERS: ${CELERY_MIN_WORKERS:-}
44.   API_TOOL_DEFAULT_CONNECT_TIMEOUT: ${API_TOOL_DEFAULT_CONNECT_TIMEOUT:-10}
45.   API_TOOL_DEFAULT_READ_TIMEOUT: ${API_TOOL_DEFAULT_READ_TIMEOUT:-60}
46.   DB_USERNAME: ${DB_USERNAME:-postgres}
47.   DB_PASSWORD: ${DB_PASSWORD:-difyai123456}
48.   DB_HOST: ${DB_HOST:-db}
49.   DB_PORT: ${DB_PORT:-5432}
50.   DB_DATABASE: ${DB_DATABASE:-dify}
51.   SQLALCHEMY_POOL_SIZE: ${SQLALCHEMY_POOL_SIZE:-30}
52.   SQLALCHEMY_POOL_RECYCLE: ${SQLALCHEMY_POOL_RECYCLE:-3600}
53.   SQLALCHEMY_ECHO: ${SQLALCHEMY_ECHO:-false}
54.   POSTGRES_MAX_CONNECTIONS: ${POSTGRES_MAX_CONNECTIONS:-100}
55.   POSTGRES_SHARED_BUFFERS: ${POSTGRES_SHARED_BUFFERS:-128MB}
56.   POSTGRES_WORK_MEM: ${POSTGRES_WORK_MEM:-4MB}
57.   POSTGRES_MAINTENANCE_WORK_MEM: ${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}
58.   POSTGRES_EFFECTIVE_CACHE_SIZE: ${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}
59.   REDIS_HOST: ${REDIS_HOST:-redis}
60.   REDIS_PORT: ${REDIS_PORT:-6379}
61.   REDIS_USERNAME: ${REDIS_USERNAME:-}
62.   REDIS_PASSWORD: ${REDIS_PASSWORD:-difyai123456}
63.   REDIS_USE_SSL: ${REDIS_USE_SSL:-false}
64.   REDIS_DB: ${REDIS_DB:-0}
65.   REDIS_USE_SENTINEL: ${REDIS_USE_SENTINEL:-false}
66.   REDIS_SENTINELS: ${REDIS_SENTINELS:-}
67.   REDIS_SENTINEL_SERVICE_NAME: ${REDIS_SENTINEL_SERVICE_NAME:-}
68.   REDIS_SENTINEL_USERNAME: ${REDIS_SENTINEL_USERNAME:-}
69.   REDIS_SENTINEL_PASSWORD: ${REDIS_SENTINEL_PASSWORD:-}
70.   REDIS_SENTINEL_SOCKET_TIMEOUT: ${REDIS_SENTINEL_SOCKET_TIMEOUT:-0.1}
71.   REDIS_USE_CLUSTERS: ${REDIS_USE_CLUSTERS:-false}
72.   REDIS_CLUSTERS: ${REDIS_CLUSTERS:-}
73.   REDIS_CLUSTERS_PASSWORD: ${REDIS_CLUSTERS_PASSWORD:-}
74.   CELERY_BROKER_URL: ${CELERY_BROKER_URL:-redis://:difyai123456@redis:6379/1}
75.   BROKER_USE_SSL: ${BROKER_USE_SSL:-false}
76.   CELERY_USE_SENTINEL: ${CELERY_USE_SENTINEL:-false}
77.   CELERY_SENTINEL_MASTER_NAME: ${CELERY_SENTINEL_MASTER_NAME:-}
78.   CELERY_SENTINEL_SOCKET_TIMEOUT: ${CELERY_SENTINEL_SOCKET_TIMEOUT:-0.1}
79.   WEB_API_CORS_ALLOW_ORIGINS: ${WEB_API_CORS_ALLOW_ORIGINS:-*}
80.   CONSOLE_CORS_ALLOW_ORIGINS: ${CONSOLE_CORS_ALLOW_ORIGINS:-*}
81.   STORAGE_TYPE: ${STORAGE_TYPE:-opendal}
82.   OPENDAL_SCHEME: ${OPENDAL_SCHEME:-fs}
83.   OPENDAL_FS_ROOT: ${OPENDAL_FS_ROOT:-storage}
84.   S3_ENDPOINT: ${S3_ENDPOINT:-}
85.   S3_REGION: ${S3_REGION:-us-east-1}
86.   S3_BUCKET_NAME: ${S3_BUCKET_NAME:-difyai}
87.   S3_ACCESS_KEY: ${S3_ACCESS_KEY:-}
88.   S3_SECRET_KEY: ${S3_SECRET_KEY:-}
89.   S3_USE_AWS_MANAGED_IAM: ${S3_USE_AWS_MANAGED_IAM:-false}
90.   AZURE_BLOB_ACCOUNT_NAME: ${AZURE_BLOB_ACCOUNT_NAME:-difyai}
91.   AZURE_BLOB_ACCOUNT_KEY: ${AZURE_BLOB_ACCOUNT_KEY:-difyai}
92.   AZURE_BLOB_CONTAINER_NAME: ${AZURE_BLOB_CONTAINER_NAME:-difyai-container}
93.   AZURE_BLOB_ACCOUNT_URL: ${AZURE_BLOB_ACCOUNT_URL:-https://<your_account_name>.blob.core.windows.net}
94.   GOOGLE_STORAGE_BUCKET_NAME: ${GOOGLE_STORAGE_BUCKET_NAME:-your-bucket-name}
95.   GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64: ${GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64:-}
96.   ALIYUN_OSS_BUCKET_NAME: ${ALIYUN_OSS_BUCKET_NAME:-your-bucket-name}
97.   ALIYUN_OSS_ACCESS_KEY: ${ALIYUN_OSS_ACCESS_KEY:-your-access-key}
98.   ALIYUN_OSS_SECRET_KEY: ${ALIYUN_OSS_SECRET_KEY:-your-secret-key}
99.   ALIYUN_OSS_ENDPOINT: ${ALIYUN_OSS_ENDPOINT:-https://oss-ap-southeast-1-internal.aliyuncs.com}
100.   ALIYUN_OSS_REGION: ${ALIYUN_OSS_REGION:-ap-southeast-1}
101.   ALIYUN_OSS_AUTH_VERSION: ${ALIYUN_OSS_AUTH_VERSION:-v4}
102.   ALIYUN_OSS_PATH: ${ALIYUN_OSS_PATH:-your-path}
103.   TENCENT_COS_BUCKET_NAME: ${TENCENT_COS_BUCKET_NAME:-your-bucket-name}
104.   TENCENT_COS_SECRET_KEY: ${TENCENT_COS_SECRET_KEY:-your-secret-key}
105.   TENCENT_COS_SECRET_ID: ${TENCENT_COS_SECRET_ID:-your-secret-id}
106.   TENCENT_COS_REGION: ${TENCENT_COS_REGION:-your-region}
107.   TENCENT_COS_SCHEME: ${TENCENT_COS_SCHEME:-your-scheme}
108.   OCI_ENDPOINT: ${OCI_ENDPOINT:-https://your-object-storage-namespace.compat.objectstorage.us-ashburn-1.oraclecloud.com}
109.   OCI_BUCKET_NAME: ${OCI_BUCKET_NAME:-your-bucket-name}
110.   OCI_ACCESS_KEY: ${OCI_ACCESS_KEY:-your-access-key}
111.   OCI_SECRET_KEY: ${OCI_SECRET_KEY:-your-secret-key}
112.   OCI_REGION: ${OCI_REGION:-us-ashburn-1}
113.   HUAWEI_OBS_BUCKET_NAME: ${HUAWEI_OBS_BUCKET_NAME:-your-bucket-name}
114.   HUAWEI_OBS_SECRET_KEY: ${HUAWEI_OBS_SECRET_KEY:-your-secret-key}
115.   HUAWEI_OBS_ACCESS_KEY: ${HUAWEI_OBS_ACCESS_KEY:-your-access-key}
116.   HUAWEI_OBS_SERVER: ${HUAWEI_OBS_SERVER:-your-server-url}
117.   VOLCENGINE_TOS_BUCKET_NAME: ${VOLCENGINE_TOS_BUCKET_NAME:-your-bucket-name}
118.   VOLCENGINE_TOS_SECRET_KEY: ${VOLCENGINE_TOS_SECRET_KEY:-your-secret-key}
119.   VOLCENGINE_TOS_ACCESS_KEY: ${VOLCENGINE_TOS_ACCESS_KEY:-your-access-key}
120.   VOLCENGINE_TOS_ENDPOINT: ${VOLCENGINE_TOS_ENDPOINT:-your-server-url}
121.   VOLCENGINE_TOS_REGION: ${VOLCENGINE_TOS_REGION:-your-region}
122.   BAIDU_OBS_BUCKET_NAME: ${BAIDU_OBS_BUCKET_NAME:-your-bucket-name}
123.   BAIDU_OBS_SECRET_KEY: ${BAIDU_OBS_SECRET_KEY:-your-secret-key}
124.   BAIDU_OBS_ACCESS_KEY: ${BAIDU_OBS_ACCESS_KEY:-your-access-key}
125.   BAIDU_OBS_ENDPOINT: ${BAIDU_OBS_ENDPOINT:-your-server-url}
126.   SUPABASE_BUCKET_NAME: ${SUPABASE_BUCKET_NAME:-your-bucket-name}
127.   SUPABASE_API_KEY: ${SUPABASE_API_KEY:-your-access-key}
128.   SUPABASE_URL: ${SUPABASE_URL:-your-server-url}
129.   VECTOR_STORE: ${VECTOR_STORE:-weaviate}
130.   WEAVIATE_ENDPOINT: ${WEAVIATE_ENDPOINT:-http://weaviate:8080}
131.   WEAVIATE_API_KEY: ${WEAVIATE_API_KEY:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}
132.   QDRANT_URL: ${QDRANT_URL:-http://qdrant:6333}
133.   QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456}
134.   QDRANT_CLIENT_TIMEOUT: ${QDRANT_CLIENT_TIMEOUT:-20}
135.   QDRANT_GRPC_ENABLED: ${QDRANT_GRPC_ENABLED:-false}
136.   QDRANT_GRPC_PORT: ${QDRANT_GRPC_PORT:-6334}
137.   MILVUS_URI: ${MILVUS_URI:-http://host.docker.internal:19530}
138.   MILVUS_TOKEN: ${MILVUS_TOKEN:-}
139.   MILVUS_USER: ${MILVUS_USER:-}
140.   MILVUS_PASSWORD: ${MILVUS_PASSWORD:-}
141.   MILVUS_ENABLE_HYBRID_SEARCH: ${MILVUS_ENABLE_HYBRID_SEARCH:-False}
142.   MYSCALE_HOST: ${MYSCALE_HOST:-myscale}
143.   MYSCALE_PORT: ${MYSCALE_PORT:-8123}
144.   MYSCALE_USER: ${MYSCALE_USER:-default}
145.   MYSCALE_PASSWORD: ${MYSCALE_PASSWORD:-}
146.   MYSCALE_DATABASE: ${MYSCALE_DATABASE:-dify}
147.   MYSCALE_FTS_PARAMS: ${MYSCALE_FTS_PARAMS:-}
148.   COUCHBASE_CONNECTION_STRING: ${COUCHBASE_CONNECTION_STRING:-couchbase://couchbase-server}
149.   COUCHBASE_USER: ${COUCHBASE_USER:-Administrator}
150.   COUCHBASE_PASSWORD: ${COUCHBASE_PASSWORD:-password}
151.   COUCHBASE_BUCKET_NAME: ${COUCHBASE_BUCKET_NAME:-Embeddings}
152.   COUCHBASE_SCOPE_NAME: ${COUCHBASE_SCOPE_NAME:-_default}
153.   PGVECTOR_HOST: ${PGVECTOR_HOST:-pgvector}
154.   PGVECTOR_PORT: ${PGVECTOR_PORT:-5432}
155.   PGVECTOR_USER: ${PGVECTOR_USER:-postgres}
156.   PGVECTOR_PASSWORD: ${PGVECTOR_PASSWORD:-difyai123456}
157.   PGVECTOR_DATABASE: ${PGVECTOR_DATABASE:-dify}
158.   PGVECTOR_MIN_CONNECTION: ${PGVECTOR_MIN_CONNECTION:-1}
159.   PGVECTOR_MAX_CONNECTION: ${PGVECTOR_MAX_CONNECTION:-5}
160.   PGVECTOR_PG_BIGM: ${PGVECTOR_PG_BIGM:-false}
161.   PGVECTOR_PG_BIGM_VERSION: ${PGVECTOR_PG_BIGM_VERSION:-1.2-20240606}
162.   PGVECTO_RS_HOST: ${PGVECTO_RS_HOST:-pgvecto-rs}
163.   PGVECTO_RS_PORT: ${PGVECTO_RS_PORT:-5432}
164.   PGVECTO_RS_USER: ${PGVECTO_RS_USER:-postgres}
165.   PGVECTO_RS_PASSWORD: ${PGVECTO_RS_PASSWORD:-difyai123456}
166.   PGVECTO_RS_DATABASE: ${PGVECTO_RS_DATABASE:-dify}
167.   ANALYTICDB_KEY_ID: ${ANALYTICDB_KEY_ID:-your-ak}
168.   ANALYTICDB_KEY_SECRET: ${ANALYTICDB_KEY_SECRET:-your-sk}
169.   ANALYTICDB_REGION_ID: ${ANALYTICDB_REGION_ID:-cn-hangzhou}
170.   ANALYTICDB_INSTANCE_ID: ${ANALYTICDB_INSTANCE_ID:-gp-ab123456}
171.   ANALYTICDB_ACCOUNT: ${ANALYTICDB_ACCOUNT:-testaccount}
172.   ANALYTICDB_PASSWORD: ${ANALYTICDB_PASSWORD:-testpassword}
173.   ANALYTICDB_NAMESPACE: ${ANALYTICDB_NAMESPACE:-dify}
174.   ANALYTICDB_NAMESPACE_PASSWORD: ${ANALYTICDB_NAMESPACE_PASSWORD:-difypassword}
175.   ANALYTICDB_HOST: ${ANALYTICDB_HOST:-gp-test.aliyuncs.com}
176.   ANALYTICDB_PORT: ${ANALYTICDB_PORT:-5432}
177.   ANALYTICDB_MIN_CONNECTION: ${ANALYTICDB_MIN_CONNECTION:-1}
178.   ANALYTICDB_MAX_CONNECTION: ${ANALYTICDB_MAX_CONNECTION:-5}
179.   TIDB_VECTOR_HOST: ${TIDB_VECTOR_HOST:-tidb}
180.   TIDB_VECTOR_PORT: ${TIDB_VECTOR_PORT:-4000}
181.   TIDB_VECTOR_USER: ${TIDB_VECTOR_USER:-}
182.   TIDB_VECTOR_PASSWORD: ${TIDB_VECTOR_PASSWORD:-}
183.   TIDB_VECTOR_DATABASE: ${TIDB_VECTOR_DATABASE:-dify}
184.   TIDB_ON_QDRANT_URL: ${TIDB_ON_QDRANT_URL:-http://127.0.0.1}
185.   TIDB_ON_QDRANT_API_KEY: ${TIDB_ON_QDRANT_API_KEY:-dify}
186.   TIDB_ON_QDRANT_CLIENT_TIMEOUT: ${TIDB_ON_QDRANT_CLIENT_TIMEOUT:-20}
187.   TIDB_ON_QDRANT_GRPC_ENABLED: ${TIDB_ON_QDRANT_GRPC_ENABLED:-false}
188.   TIDB_ON_QDRANT_GRPC_PORT: ${TIDB_ON_QDRANT_GRPC_PORT:-6334}
189.   TIDB_PUBLIC_KEY: ${TIDB_PUBLIC_KEY:-dify}
190.   TIDB_PRIVATE_KEY: ${TIDB_PRIVATE_KEY:-dify}
191.   TIDB_API_URL: ${TIDB_API_URL:-http://127.0.0.1}
192.   TIDB_IAM_API_URL: ${TIDB_IAM_API_URL:-http://127.0.0.1}
193.   TIDB_REGION: ${TIDB_REGION:-regions/aws-us-east-1}
194.   TIDB_PROJECT_ID: ${TIDB_PROJECT_ID:-dify}
195.   TIDB_SPEND_LIMIT: ${TIDB_SPEND_LIMIT:-100}
196.   CHROMA_HOST: ${CHROMA_HOST:-127.0.0.1}
197.   CHROMA_PORT: ${CHROMA_PORT:-8000}
198.   CHROMA_TENANT: ${CHROMA_TENANT:-default_tenant}
199.   CHROMA_DATABASE: ${CHROMA_DATABASE:-default_database}
200.   CHROMA_AUTH_PROVIDER: ${CHROMA_AUTH_PROVIDER:-chromadb.auth.token_authn.TokenAuthClientProvider}
201.   CHROMA_AUTH_CREDENTIALS: ${CHROMA_AUTH_CREDENTIALS:-}
202.   ORACLE_USER: ${ORACLE_USER:-dify}
203.   ORACLE_PASSWORD: ${ORACLE_PASSWORD:-dify}
204.   ORACLE_DSN: ${ORACLE_DSN:-oracle:1521/FREEPDB1}
205.   ORACLE_CONFIG_DIR: ${ORACLE_CONFIG_DIR:-/app/api/storage/wallet}
206.   ORACLE_WALLET_LOCATION: ${ORACLE_WALLET_LOCATION:-/app/api/storage/wallet}
207.   ORACLE_WALLET_PASSWORD: ${ORACLE_WALLET_PASSWORD:-dify}
208.   ORACLE_IS_AUTONOMOUS: ${ORACLE_IS_AUTONOMOUS:-false}
209.   RELYT_HOST: ${RELYT_HOST:-db}
210.   RELYT_PORT: ${RELYT_PORT:-5432}
211.   RELYT_USER: ${RELYT_USER:-postgres}
212.   RELYT_PASSWORD: ${RELYT_PASSWORD:-difyai123456}
213.   RELYT_DATABASE: ${RELYT_DATABASE:-postgres}
214.   OPENSEARCH_HOST: ${OPENSEARCH_HOST:-opensearch}
215.   OPENSEARCH_PORT: ${OPENSEARCH_PORT:-9200}
216.   OPENSEARCH_USER: ${OPENSEARCH_USER:-admin}
217.   OPENSEARCH_PASSWORD: ${OPENSEARCH_PASSWORD:-admin}
218.   OPENSEARCH_SECURE: ${OPENSEARCH_SECURE:-true}
219.   TENCENT_VECTOR_DB_URL: ${TENCENT_VECTOR_DB_URL:-http://127.0.0.1}
220.   TENCENT_VECTOR_DB_API_KEY: ${TENCENT_VECTOR_DB_API_KEY:-dify}
221.   TENCENT_VECTOR_DB_TIMEOUT: ${TENCENT_VECTOR_DB_TIMEOUT:-30}
222.   TENCENT_VECTOR_DB_USERNAME: ${TENCENT_VECTOR_DB_USERNAME:-dify}
223.   TENCENT_VECTOR_DB_DATABASE: ${TENCENT_VECTOR_DB_DATABASE:-dify}
224.   TENCENT_VECTOR_DB_SHARD: ${TENCENT_VECTOR_DB_SHARD:-1}
225.   TENCENT_VECTOR_DB_REPLICAS: ${TENCENT_VECTOR_DB_REPLICAS:-2}
226.   TENCENT_VECTOR_DB_ENABLE_HYBRID_SEARCH: ${TENCENT_VECTOR_DB_ENABLE_HYBRID_SEARCH:-false}
227.   ELASTICSEARCH_HOST: ${ELASTICSEARCH_HOST:-0.0.0.0}
228.   ELASTICSEARCH_PORT: ${ELASTICSEARCH_PORT:-9200}
229.   ELASTICSEARCH_USERNAME: ${ELASTICSEARCH_USERNAME:-elastic}
230.   ELASTICSEARCH_PASSWORD: ${ELASTICSEARCH_PASSWORD:-elastic}
231.   KIBANA_PORT: ${KIBANA_PORT:-5601}
232.   BAIDU_VECTOR_DB_ENDPOINT: ${BAIDU_VECTOR_DB_ENDPOINT:-http://127.0.0.1:5287}
233.   BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS: ${BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS:-30000}
234.   BAIDU_VECTOR_DB_ACCOUNT: ${BAIDU_VECTOR_DB_ACCOUNT:-root}
235.   BAIDU_VECTOR_DB_API_KEY: ${BAIDU_VECTOR_DB_API_KEY:-dify}
236.   BAIDU_VECTOR_DB_DATABASE: ${BAIDU_VECTOR_DB_DATABASE:-dify}
237.   BAIDU_VECTOR_DB_SHARD: ${BAIDU_VECTOR_DB_SHARD:-1}
238.   BAIDU_VECTOR_DB_REPLICAS: ${BAIDU_VECTOR_DB_REPLICAS:-3}
239.   VIKINGDB_ACCESS_KEY: ${VIKINGDB_ACCESS_KEY:-your-ak}
240.   VIKINGDB_SECRET_KEY: ${VIKINGDB_SECRET_KEY:-your-sk}
241.   VIKINGDB_REGION: ${VIKINGDB_REGION:-cn-shanghai}
242.   VIKINGDB_HOST: ${VIKINGDB_HOST:-api-vikingdb.xxx.volces.com}
243.   VIKINGDB_SCHEMA: ${VIKINGDB_SCHEMA:-http}
244.   VIKINGDB_CONNECTION_TIMEOUT: ${VIKINGDB_CONNECTION_TIMEOUT:-30}
245.   VIKINGDB_SOCKET_TIMEOUT: ${VIKINGDB_SOCKET_TIMEOUT:-30}
246.   LINDORM_URL: ${LINDORM_URL:-http://lindorm:30070}
247.   LINDORM_USERNAME: ${LINDORM_USERNAME:-lindorm}
248.   LINDORM_PASSWORD: ${LINDORM_PASSWORD:-lindorm}
249.   OCEANBASE_VECTOR_HOST: ${OCEANBASE_VECTOR_HOST:-oceanbase}
250.   OCEANBASE_VECTOR_PORT: ${OCEANBASE_VECTOR_PORT:-2881}
251.   OCEANBASE_VECTOR_USER: ${OCEANBASE_VECTOR_USER:-root@test}
252.   OCEANBASE_VECTOR_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
253.   OCEANBASE_VECTOR_DATABASE: ${OCEANBASE_VECTOR_DATABASE:-test}
254.   OCEANBASE_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
255.   OCEANBASE_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
256.   OCEANBASE_ENABLE_HYBRID_SEARCH: ${OCEANBASE_ENABLE_HYBRID_SEARCH:-false}
257.   OPENGAUSS_HOST: ${OPENGAUSS_HOST:-opengauss}
258.   OPENGAUSS_PORT: ${OPENGAUSS_PORT:-6600}
259.   OPENGAUSS_USER: ${OPENGAUSS_USER:-postgres}
260.   OPENGAUSS_PASSWORD: ${OPENGAUSS_PASSWORD:-Dify@123}
261.   OPENGAUSS_DATABASE: ${OPENGAUSS_DATABASE:-dify}
262.   OPENGAUSS_MIN_CONNECTION: ${OPENGAUSS_MIN_CONNECTION:-1}
263.   OPENGAUSS_MAX_CONNECTION: ${OPENGAUSS_MAX_CONNECTION:-5}
264.   OPENGAUSS_ENABLE_PQ: ${OPENGAUSS_ENABLE_PQ:-false}
265.   UPSTASH_VECTOR_URL: ${UPSTASH_VECTOR_URL:-https://xxx-vector.upstash.io}
266.   UPSTASH_VECTOR_TOKEN: ${UPSTASH_VECTOR_TOKEN:-dify}
267.   TABLESTORE_ENDPOINT: ${TABLESTORE_ENDPOINT:-https://instance-name.cn-hangzhou.ots.aliyuncs.com}
268.   TABLESTORE_INSTANCE_NAME: ${TABLESTORE_INSTANCE_NAME:-instance-name}
269.   TABLESTORE_ACCESS_KEY_ID: ${TABLESTORE_ACCESS_KEY_ID:-xxx}
270.   TABLESTORE_ACCESS_KEY_SECRET: ${TABLESTORE_ACCESS_KEY_SECRET:-xxx}
271.   UPLOAD_FILE_SIZE_LIMIT: ${UPLOAD_FILE_SIZE_LIMIT:-15}
272.   UPLOAD_FILE_BATCH_LIMIT: ${UPLOAD_FILE_BATCH_LIMIT:-5}
273.   ETL_TYPE: ${ETL_TYPE:-dify}
274.   UNSTRUCTURED_API_URL: ${UNSTRUCTURED_API_URL:-}
275.   UNSTRUCTURED_API_KEY: ${UNSTRUCTURED_API_KEY:-}
276.   SCARF_NO_ANALYTICS: ${SCARF_NO_ANALYTICS:-true}
277.   PROMPT_GENERATION_MAX_TOKENS: ${PROMPT_GENERATION_MAX_TOKENS:-512}
278.   CODE_GENERATION_MAX_TOKENS: ${CODE_GENERATION_MAX_TOKENS:-1024}
279.   MULTIMODAL_SEND_FORMAT: ${MULTIMODAL_SEND_FORMAT:-base64}
280.   UPLOAD_IMAGE_FILE_SIZE_LIMIT: ${UPLOAD_IMAGE_FILE_SIZE_LIMIT:-10}
281.   UPLOAD_VIDEO_FILE_SIZE_LIMIT: ${UPLOAD_VIDEO_FILE_SIZE_LIMIT:-100}
282.   UPLOAD_AUDIO_FILE_SIZE_LIMIT: ${UPLOAD_AUDIO_FILE_SIZE_LIMIT:-50}
283.   SENTRY_DSN: ${SENTRY_DSN:-}
284.   API_SENTRY_DSN: ${API_SENTRY_DSN:-}
285.   API_SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
286.   API_SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}
287.   WEB_SENTRY_DSN: ${WEB_SENTRY_DSN:-}
288.   NOTION_INTEGRATION_TYPE: ${NOTION_INTEGRATION_TYPE:-public}
289.   NOTION_CLIENT_SECRET: ${NOTION_CLIENT_SECRET:-}
290.   NOTION_CLIENT_ID: ${NOTION_CLIENT_ID:-}
291.   NOTION_INTERNAL_SECRET: ${NOTION_INTERNAL_SECRET:-}
292.   MAIL_TYPE: ${MAIL_TYPE:-resend}
293.   MAIL_DEFAULT_SEND_FROM: ${MAIL_DEFAULT_SEND_FROM:-}
294.   RESEND_API_URL: ${RESEND_API_URL:-https://api.resend.com}
295.   RESEND_API_KEY: ${RESEND_API_KEY:-your-resend-api-key}
296.   SMTP_SERVER: ${SMTP_SERVER:-}
297.   SMTP_PORT: ${SMTP_PORT:-465}
298.   SMTP_USERNAME: ${SMTP_USERNAME:-}
299.   SMTP_PASSWORD: ${SMTP_PASSWORD:-}
300.   SMTP_USE_TLS: ${SMTP_USE_TLS:-true}
301.   SMTP_OPPORTUNISTIC_TLS: ${SMTP_OPPORTUNISTIC_TLS:-false}
302.   INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-4000}
303.   INVITE_EXPIRY_HOURS: ${INVITE_EXPIRY_HOURS:-72}
304.   RESET_PASSWORD_TOKEN_EXPIRY_MINUTES: ${RESET_PASSWORD_TOKEN_EXPIRY_MINUTES:-5}
305.   CODE_EXECUTION_ENDPOINT: ${CODE_EXECUTION_ENDPOINT:-http://sandbox:8194}
306.   CODE_EXECUTION_API_KEY: ${CODE_EXECUTION_API_KEY:-dify-sandbox}
307.   CODE_MAX_NUMBER: ${CODE_MAX_NUMBER:-9223372036854775807}
308.   CODE_MIN_NUMBER: ${CODE_MIN_NUMBER:--9223372036854775808}
309.   CODE_MAX_DEPTH: ${CODE_MAX_DEPTH:-5}
310.   CODE_MAX_PRECISION: ${CODE_MAX_PRECISION:-20}
311.   CODE_MAX_STRING_LENGTH: ${CODE_MAX_STRING_LENGTH:-80000}
312.   CODE_MAX_STRING_ARRAY_LENGTH: ${CODE_MAX_STRING_ARRAY_LENGTH:-30}
313.   CODE_MAX_OBJECT_ARRAY_LENGTH: ${CODE_MAX_OBJECT_ARRAY_LENGTH:-30}
314.   CODE_MAX_NUMBER_ARRAY_LENGTH: ${CODE_MAX_NUMBER_ARRAY_LENGTH:-1000}
315.   CODE_EXECUTION_CONNECT_TIMEOUT: ${CODE_EXECUTION_CONNECT_TIMEOUT:-10}
316.   CODE_EXECUTION_READ_TIMEOUT: ${CODE_EXECUTION_READ_TIMEOUT:-60}
317.   CODE_EXECUTION_WRITE_TIMEOUT: ${CODE_EXECUTION_WRITE_TIMEOUT:-10}
318.   TEMPLATE_TRANSFORM_MAX_LENGTH: ${TEMPLATE_TRANSFORM_MAX_LENGTH:-80000}
319.   WORKFLOW_MAX_EXECUTION_STEPS: ${WORKFLOW_MAX_EXECUTION_STEPS:-500}
320.   WORKFLOW_MAX_EXECUTION_TIME: ${WORKFLOW_MAX_EXECUTION_TIME:-1200}
321.   WORKFLOW_CALL_MAX_DEPTH: ${WORKFLOW_CALL_MAX_DEPTH:-5}
322.   MAX_VARIABLE_SIZE: ${MAX_VARIABLE_SIZE:-204800}
323.   WORKFLOW_PARALLEL_DEPTH_LIMIT: ${WORKFLOW_PARALLEL_DEPTH_LIMIT:-3}
324.   WORKFLOW_FILE_UPLOAD_LIMIT: ${WORKFLOW_FILE_UPLOAD_LIMIT:-10}
325.   HTTP_REQUEST_NODE_MAX_BINARY_SIZE: ${HTTP_REQUEST_NODE_MAX_BINARY_SIZE:-10485760}
326.   HTTP_REQUEST_NODE_MAX_TEXT_SIZE: ${HTTP_REQUEST_NODE_MAX_TEXT_SIZE:-1048576}
327.   HTTP_REQUEST_NODE_SSL_VERIFY: ${HTTP_REQUEST_NODE_SSL_VERIFY:-True}
328.   SSRF_PROXY_HTTP_URL: ${SSRF_PROXY_HTTP_URL:-http://ssrf_proxy:3128}
329.   SSRF_PROXY_HTTPS_URL: ${SSRF_PROXY_HTTPS_URL:-http://ssrf_proxy:3128}
330.   LOOP_NODE_MAX_COUNT: ${LOOP_NODE_MAX_COUNT:-100}
331.   MAX_TOOLS_NUM: ${MAX_TOOLS_NUM:-10}
332.   MAX_PARALLEL_LIMIT: ${MAX_PARALLEL_LIMIT:-10}
333.   MAX_ITERATIONS_NUM: ${MAX_ITERATIONS_NUM:-5}
334.   TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
335.   PGUSER: ${PGUSER:-${DB_USERNAME}}
336.   POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-${DB_PASSWORD}}
337.   POSTGRES_DB: ${POSTGRES_DB:-${DB_DATABASE}}
338.   PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
339.   SANDBOX_API_KEY: ${SANDBOX_API_KEY:-dify-sandbox}
340.   SANDBOX_GIN_MODE: ${SANDBOX_GIN_MODE:-release}
341.   SANDBOX_WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15}
342.   SANDBOX_ENABLE_NETWORK: ${SANDBOX_ENABLE_NETWORK:-true}
343.   SANDBOX_HTTP_PROXY: ${SANDBOX_HTTP_PROXY:-http://ssrf_proxy:3128}
344.   SANDBOX_HTTPS_PROXY: ${SANDBOX_HTTPS_PROXY:-http://ssrf_proxy:3128}
345.   SANDBOX_PORT: ${SANDBOX_PORT:-8194}
346.   WEAVIATE_PERSISTENCE_DATA_PATH: ${WEAVIATE_PERSISTENCE_DATA_PATH:-/var/lib/weaviate}
347.   WEAVIATE_QUERY_DEFAULTS_LIMIT: ${WEAVIATE_QUERY_DEFAULTS_LIMIT:-25}
348.   WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: ${WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED:-true}
349.   WEAVIATE_DEFAULT_VECTORIZER_MODULE: ${WEAVIATE_DEFAULT_VECTORIZER_MODULE:-none}
350.   WEAVIATE_CLUSTER_HOSTNAME: ${WEAVIATE_CLUSTER_HOSTNAME:-node1}
351.   WEAVIATE_AUTHENTICATION_APIKEY_ENABLED: ${WEAVIATE_AUTHENTICATION_APIKEY_ENABLED:-true}
352.   WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS: ${WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}
353.   WEAVIATE_AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
354.   WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
355.   WEAVIATE_AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
356.   CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456}
357.   CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
358.   CHROMA_IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
359.   ORACLE_PWD: ${ORACLE_PWD:-Dify123456}
360.   ORACLE_CHARACTERSET: ${ORACLE_CHARACTERSET:-AL32UTF8}
361.   ETCD_AUTO_COMPACTION_MODE: ${ETCD_AUTO_COMPACTION_MODE:-revision}
362.   ETCD_AUTO_COMPACTION_RETENTION: ${ETCD_AUTO_COMPACTION_RETENTION:-1000}
363.   ETCD_QUOTA_BACKEND_BYTES: ${ETCD_QUOTA_BACKEND_BYTES:-4294967296}
364.   ETCD_SNAPSHOT_COUNT: ${ETCD_SNAPSHOT_COUNT:-50000}
365.   MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-minioadmin}
366.   MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-minioadmin}
367.   ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}
368.   MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}
369.   MILVUS_AUTHORIZATION_ENABLED: ${MILVUS_AUTHORIZATION_ENABLED:-true}
370.   PGVECTOR_PGUSER: ${PGVECTOR_PGUSER:-postgres}
371.   PGVECTOR_POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}
372.   PGVECTOR_POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}
373.   PGVECTOR_PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}
374.   OPENSEARCH_DISCOVERY_TYPE: ${OPENSEARCH_DISCOVERY_TYPE:-single-node}
375.   OPENSEARCH_BOOTSTRAP_MEMORY_LOCK: ${OPENSEARCH_BOOTSTRAP_MEMORY_LOCK:-true}
376.   OPENSEARCH_JAVA_OPTS_MIN: ${OPENSEARCH_JAVA_OPTS_MIN:-512m}
377.   OPENSEARCH_JAVA_OPTS_MAX: ${OPENSEARCH_JAVA_OPTS_MAX:-1024m}
378.   OPENSEARCH_INITIAL_ADMIN_PASSWORD: ${OPENSEARCH_INITIAL_ADMIN_PASSWORD:-Qazwsxedc!@#123}
379.   OPENSEARCH_MEMLOCK_SOFT: ${OPENSEARCH_MEMLOCK_SOFT:--1}
380.   OPENSEARCH_MEMLOCK_HARD: ${OPENSEARCH_MEMLOCK_HARD:--1}
381.   OPENSEARCH_NOFILE_SOFT: ${OPENSEARCH_NOFILE_SOFT:-65536}
382.   OPENSEARCH_NOFILE_HARD: ${OPENSEARCH_NOFILE_HARD:-65536}
383.   NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
384.   NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false}
385.   NGINX_PORT: ${NGINX_PORT:-80}
386.   NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443}
387.   NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
388.   NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
389.   NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3}
390.   NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
391.   NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-15M}
392.   NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
393.   NGINX_PROXY_READ_TIMEOUT: ${NGINX_PROXY_READ_TIMEOUT:-3600s}
394.   NGINX_PROXY_SEND_TIMEOUT: ${NGINX_PROXY_SEND_TIMEOUT:-3600s}
395.   NGINX_ENABLE_CERTBOT_CHALLENGE: ${NGINX_ENABLE_CERTBOT_CHALLENGE:-false}
396.   CERTBOT_EMAIL: ${CERTBOT_EMAIL:-your_email@example.com}
397.   CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-your_domain.com}
398.   CERTBOT_OPTIONS: ${CERTBOT_OPTIONS:-}
399.   SSRF_HTTP_PORT: ${SSRF_HTTP_PORT:-3128}
400.   SSRF_COREDUMP_DIR: ${SSRF_COREDUMP_DIR:-/var/spool/squid}
401.   SSRF_REVERSE_PROXY_PORT: ${SSRF_REVERSE_PROXY_PORT:-8194}
402.   SSRF_SANDBOX_HOST: ${SSRF_SANDBOX_HOST:-sandbox}
403.   SSRF_DEFAULT_TIME_OUT: ${SSRF_DEFAULT_TIME_OUT:-5}
404.   SSRF_DEFAULT_CONNECT_TIME_OUT: ${SSRF_DEFAULT_CONNECT_TIME_OUT:-5}
405.   SSRF_DEFAULT_READ_TIME_OUT: ${SSRF_DEFAULT_READ_TIME_OUT:-5}
406.   SSRF_DEFAULT_WRITE_TIME_OUT: ${SSRF_DEFAULT_WRITE_TIME_OUT:-5}
407.   EXPOSE_NGINX_PORT: ${EXPOSE_NGINX_PORT:-80}
408.   EXPOSE_NGINX_SSL_PORT: ${EXPOSE_NGINX_SSL_PORT:-443}
409.   POSITION_TOOL_PINS: ${POSITION_TOOL_PINS:-}
410.   POSITION_TOOL_INCLUDES: ${POSITION_TOOL_INCLUDES:-}
411.   POSITION_TOOL_EXCLUDES: ${POSITION_TOOL_EXCLUDES:-}
412.   POSITION_PROVIDER_PINS: ${POSITION_PROVIDER_PINS:-}
413.   POSITION_PROVIDER_INCLUDES: ${POSITION_PROVIDER_INCLUDES:-}
414.   POSITION_PROVIDER_EXCLUDES: ${POSITION_PROVIDER_EXCLUDES:-}
415.   CSP_WHITELIST: ${CSP_WHITELIST:-}
416.   CREATE_TIDB_SERVICE_JOB_ENABLED: ${CREATE_TIDB_SERVICE_JOB_ENABLED:-false}
417.   MAX_SUBMIT_COUNT: ${MAX_SUBMIT_COUNT:-100}
418.   TOP_K_MAX_VALUE: ${TOP_K_MAX_VALUE:-10}
419.   DB_PLUGIN_DATABASE: ${DB_PLUGIN_DATABASE:-dify_plugin}
420.   EXPOSE_PLUGIN_DAEMON_PORT: ${EXPOSE_PLUGIN_DAEMON_PORT:-5002}
421.   PLUGIN_DAEMON_PORT: ${PLUGIN_DAEMON_PORT:-5002}
422.   PLUGIN_DAEMON_KEY: ${PLUGIN_DAEMON_KEY:-lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi}
423.   PLUGIN_DAEMON_URL: ${PLUGIN_DAEMON_URL:-http://plugin_daemon:5002}
424.   PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
425.   PLUGIN_PPROF_ENABLED: ${PLUGIN_PPROF_ENABLED:-false}
426.   PLUGIN_DEBUGGING_HOST: ${PLUGIN_DEBUGGING_HOST:-0.0.0.0}
427.   PLUGIN_DEBUGGING_PORT: ${PLUGIN_DEBUGGING_PORT:-5003}
428.   EXPOSE_PLUGIN_DEBUGGING_HOST: ${EXPOSE_PLUGIN_DEBUGGING_HOST:-localhost}
429.   EXPOSE_PLUGIN_DEBUGGING_PORT: ${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}
430.   PLUGIN_DIFY_INNER_API_KEY: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
431.   PLUGIN_DIFY_INNER_API_URL: ${PLUGIN_DIFY_INNER_API_URL:-http://api:5001}
432.   ENDPOINT_URL_TEMPLATE: ${ENDPOINT_URL_TEMPLATE:-http://localhost/e/{hook_id}}
433.   MARKETPLACE_ENABLED: ${MARKETPLACE_ENABLED:-true}
434.   MARKETPLACE_API_URL: ${MARKETPLACE_API_URL:-https://marketplace.dify.ai}
435.   FORCE_VERIFYING_SIGNATURE: ${FORCE_VERIFYING_SIGNATURE:-true}
436.   PLUGIN_PYTHON_ENV_INIT_TIMEOUT: ${PLUGIN_PYTHON_ENV_INIT_TIMEOUT:-120}
437.   PLUGIN_MAX_EXECUTION_TIMEOUT: ${PLUGIN_MAX_EXECUTION_TIMEOUT:-600}
438.   PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
439.   PLUGIN_STORAGE_TYPE: ${PLUGIN_STORAGE_TYPE:-local}
440.   PLUGIN_STORAGE_LOCAL_ROOT: ${PLUGIN_STORAGE_LOCAL_ROOT:-/app/storage}
441.   PLUGIN_WORKING_PATH: ${PLUGIN_WORKING_PATH:-/app/storage/cwd}
442.   PLUGIN_INSTALLED_PATH: ${PLUGIN_INSTALLED_PATH:-plugin}
443.   PLUGIN_PACKAGE_CACHE_PATH: ${PLUGIN_PACKAGE_CACHE_PATH:-plugin_packages}
444.   PLUGIN_MEDIA_CACHE_PATH: ${PLUGIN_MEDIA_CACHE_PATH:-assets}
445.   PLUGIN_STORAGE_OSS_BUCKET: ${PLUGIN_STORAGE_OSS_BUCKET:-}
446.   PLUGIN_S3_USE_AWS_MANAGED_IAM: ${PLUGIN_S3_USE_AWS_MANAGED_IAM:-false}
447.   PLUGIN_S3_ENDPOINT: ${PLUGIN_S3_ENDPOINT:-}
448.   PLUGIN_S3_USE_PATH_STYLE: ${PLUGIN_S3_USE_PATH_STYLE:-false}
449.   PLUGIN_AWS_ACCESS_KEY: ${PLUGIN_AWS_ACCESS_KEY:-}
450.   PLUGIN_AWS_SECRET_KEY: ${PLUGIN_AWS_SECRET_KEY:-}
451.   PLUGIN_AWS_REGION: ${PLUGIN_AWS_REGION:-}
452.   PLUGIN_AZURE_BLOB_STORAGE_CONTAINER_NAME: ${PLUGIN_AZURE_BLOB_STORAGE_CONTAINER_NAME:-}
453.   PLUGIN_AZURE_BLOB_STORAGE_CONNECTION_STRING: ${PLUGIN_AZURE_BLOB_STORAGE_CONNECTION_STRING:-}
454.   PLUGIN_TENCENT_COS_SECRET_KEY: ${PLUGIN_TENCENT_COS_SECRET_KEY:-}
455.   PLUGIN_TENCENT_COS_SECRET_ID: ${PLUGIN_TENCENT_COS_SECRET_ID:-}
456.   PLUGIN_TENCENT_COS_REGION: ${PLUGIN_TENCENT_COS_REGION:-}
458. services:
459.   # API service
460.   api:
461.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/langgenius/dify-api:1.2.0
462.     restart: always
463.     environment:
464.       # Use the shared environment variables.
465.       <<: *shared-api-worker-env
466.       # Startup mode, 'api' starts the API server.
467.       MODE: api
468.       SENTRY_DSN: ${API_SENTRY_DSN:-}
469.       SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
470.       SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}
471.       PLUGIN_REMOTE_INSTALL_HOST: ${EXPOSE_PLUGIN_DEBUGGING_HOST:-localhost}
472.       PLUGIN_REMOTE_INSTALL_PORT: ${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}
473.       PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
474.       INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
475.     depends_on:
476.       - db
477.       - redis
478.     volumes:
479.       # Mount the storage directory to the container, for storing user files.
480.       - ./volumes/app/storage:/app/api/storage
481.     networks:
482.       - ssrf_proxy_network
483.       - default
485.   # worker service
486.   # The Celery worker for processing the queue.
487.   worker:
488.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/langgenius/dify-api:1.2.0
489.     restart: always
490.     environment:
491.       # Use the shared environment variables.
492.       <<: *shared-api-worker-env
493.       # Startup mode, 'worker' starts the Celery worker for processing the queue.
494.       MODE: worker
495.       SENTRY_DSN: ${API_SENTRY_DSN:-}
496.       SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
497.       SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}
498.       PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
499.       INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
500.     depends_on:
501.       - db
502.       - redis
503.     volumes:
504.       # Mount the storage directory to the container, for storing user files.
505.       - ./volumes/app/storage:/app/api/storage
506.     networks:
507.       - ssrf_proxy_network
508.       - default
510.   # Frontend web application.
511.   web:
512.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/langgenius/dify-web:1.2.0
513.     restart: always
514.     environment:
515.       CONSOLE_API_URL: ${CONSOLE_API_URL:-}
516.       APP_API_URL: ${APP_API_URL:-}
517.       SENTRY_DSN: ${WEB_SENTRY_DSN:-}
518.       NEXT_TELEMETRY_DISABLED: ${NEXT_TELEMETRY_DISABLED:-0}
519.       TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
520.       CSP_WHITELIST: ${CSP_WHITELIST:-}
521.       MARKETPLACE_API_URL: ${MARKETPLACE_API_URL:-https://marketplace.dify.ai}
522.       MARKETPLACE_URL: ${MARKETPLACE_URL:-https://marketplace.dify.ai}
523.       TOP_K_MAX_VALUE: ${TOP_K_MAX_VALUE:-}
524.       INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-}
525.       PM2_INSTANCES: ${PM2_INSTANCES:-2}
526.       LOOP_NODE_MAX_COUNT: ${LOOP_NODE_MAX_COUNT:-100}
527.       MAX_TOOLS_NUM: ${MAX_TOOLS_NUM:-10}
528.       MAX_PARALLEL_LIMIT: ${MAX_PARALLEL_LIMIT:-10}
529.       MAX_ITERATIONS_NUM: ${MAX_ITERATIONS_NUM:-5}
531.   # The postgres database.
532.   db:
533.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/postgres:15-alpine
534.     restart: always
535.     environment:
536.       PGUSER: ${PGUSER:-postgres}
537.       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-difyai123456}
538.       POSTGRES_DB: ${POSTGRES_DB:-dify}
539.       PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
540.     command: >
541.       postgres -c 'max_connections=${POSTGRES_MAX_CONNECTIONS:-100}'
542.                -c 'shared_buffers=${POSTGRES_SHARED_BUFFERS:-128MB}'
543.                -c 'work_mem=${POSTGRES_WORK_MEM:-4MB}'
544.                -c 'maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}'
545.                -c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}'
546.     volumes:
547.       - ./volumes/db/data:/var/lib/postgresql/data
548.     healthcheck:
549.       test: [ 'CMD', 'pg_isready' ]
550.       interval: 1s
551.       timeout: 3s
552.       retries: 30
554.   # The redis cache.
555.   redis:
556.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/redis:6-alpine
557.     restart: always
558.     environment:
559.       REDISCLI_AUTH: ${REDIS_PASSWORD:-difyai123456}
560.     volumes:
561.       # Mount the redis data directory to the container.
562.       - ./volumes/redis/data:/data
563.     # Set the redis password when startup redis server.
564.     command: redis-server --requirepass ${REDIS_PASSWORD:-difyai123456}
565.     healthcheck:
566.       test: [ 'CMD', 'redis-cli', 'ping' ]
568.   # The DifySandbox
569.   sandbox:
570.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/langgenius/dify-sandbox:0.2.11
571.     restart: always
572.     environment:
573.       # The DifySandbox configurations
574.       # Make sure you are changing this key for your deployment with a strong key.
575.       # You can generate a strong key using `openssl rand -base64 42`.
576.       API_KEY: ${SANDBOX_API_KEY:-dify-sandbox}
577.       GIN_MODE: ${SANDBOX_GIN_MODE:-release}
578.       WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15}
579.       ENABLE_NETWORK: ${SANDBOX_ENABLE_NETWORK:-true}
580.       HTTP_PROXY: ${SANDBOX_HTTP_PROXY:-http://ssrf_proxy:3128}
581.       HTTPS_PROXY: ${SANDBOX_HTTPS_PROXY:-http://ssrf_proxy:3128}
582.       SANDBOX_PORT: ${SANDBOX_PORT:-8194}
583.     volumes:
584.       - ./volumes/sandbox/dependencies:/dependencies
585.       - ./volumes/sandbox/conf:/conf
586.     healthcheck:
587.       test: [ 'CMD', 'curl', '-f', 'http://localhost:8194/health' ]
588.     networks:
589.       - ssrf_proxy_network
591.   # plugin daemon
592.   plugin_daemon:
593.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/langgenius/dify-plugin-daemon:0.0.7-local
594.     restart: always
595.     environment:
596.       # Use the shared environment variables.
597.       <<: *shared-api-worker-env
598.       DB_DATABASE: ${DB_PLUGIN_DATABASE:-dify_plugin}
599.       SERVER_PORT: ${PLUGIN_DAEMON_PORT:-5002}
600.       SERVER_KEY: ${PLUGIN_DAEMON_KEY:-lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi}
601.       MAX_PLUGIN_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
602.       PPROF_ENABLED: ${PLUGIN_PPROF_ENABLED:-false}
603.       DIFY_INNER_API_URL: ${PLUGIN_DIFY_INNER_API_URL:-http://api:5001}
604.       DIFY_INNER_API_KEY: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
605.       PLUGIN_REMOTE_INSTALLING_HOST: ${PLUGIN_DEBUGGING_HOST:-0.0.0.0}
606.       PLUGIN_REMOTE_INSTALLING_PORT: ${PLUGIN_DEBUGGING_PORT:-5003}
607.       PLUGIN_WORKING_PATH: ${PLUGIN_WORKING_PATH:-/app/storage/cwd}
608.       FORCE_VERIFYING_SIGNATURE: ${FORCE_VERIFYING_SIGNATURE:-true}
609.       PYTHON_ENV_INIT_TIMEOUT: ${PLUGIN_PYTHON_ENV_INIT_TIMEOUT:-120}
610.       PLUGIN_MAX_EXECUTION_TIMEOUT: ${PLUGIN_MAX_EXECUTION_TIMEOUT:-600}
611.       PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
612.       PLUGIN_STORAGE_TYPE: ${PLUGIN_STORAGE_TYPE:-local}
613.       PLUGIN_STORAGE_LOCAL_ROOT: ${PLUGIN_STORAGE_LOCAL_ROOT:-/app/storage}
614.       PLUGIN_INSTALLED_PATH: ${PLUGIN_INSTALLED_PATH:-plugin}
615.       PLUGIN_PACKAGE_CACHE_PATH: ${PLUGIN_PACKAGE_CACHE_PATH:-plugin_packages}
616.       PLUGIN_MEDIA_CACHE_PATH: ${PLUGIN_MEDIA_CACHE_PATH:-assets}
617.       PLUGIN_STORAGE_OSS_BUCKET: ${PLUGIN_STORAGE_OSS_BUCKET:-}
618.       S3_USE_AWS_MANAGED_IAM: ${PLUGIN_S3_USE_AWS_MANAGED_IAM:-}
619.       S3_ENDPOINT: ${PLUGIN_S3_ENDPOINT:-}
620.       S3_USE_PATH_STYLE: ${PLUGIN_S3_USE_PATH_STYLE:-}
621.       AWS_ACCESS_KEY: ${PLUGIN_AWS_ACCESS_KEY:-}
622.       PAWS_SECRET_KEY: ${PLUGIN_AWS_SECRET_KEY:-}
623.       AWS_REGION: ${PLUGIN_AWS_REGION:-}
624.       AZURE_BLOB_STORAGE_CONNECTION_STRING: ${PLUGIN_AZURE_BLOB_STORAGE_CONNECTION_STRING:-}
625.       AZURE_BLOB_STORAGE_CONTAINER_NAME: ${PLUGIN_AZURE_BLOB_STORAGE_CONTAINER_NAME:-}
626.       TENCENT_COS_SECRET_KEY: ${PLUGIN_TENCENT_COS_SECRET_KEY:-}
627.       TENCENT_COS_SECRET_ID: ${PLUGIN_TENCENT_COS_SECRET_ID:-}
628.       TENCENT_COS_REGION: ${PLUGIN_TENCENT_COS_REGION:-}
629.     ports:
630.       - "${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}:${PLUGIN_DEBUGGING_PORT:-5003}"
631.     volumes:
632.       - ./volumes/plugin_daemon:/app/storage
633.     depends_on:
634.       - db
636.   # ssrf_proxy server
637.   # for more information, please refer to
638.   # https://docs.dify.ai/learn-more/faq/install-faq#id-18.-why-is-ssrf_proxy-needed
639.   ssrf_proxy:
640.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/ubuntu/squid:latest
641.     restart: always
642.     volumes:
643.       - ./ssrf_proxy/squid.conf.template:/etc/squid/squid.conf.template
644.       - ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh
645.     entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]
646.     environment:
647.       # pls clearly modify the squid env vars to fit your network environment.
648.       HTTP_PORT: ${SSRF_HTTP_PORT:-3128}
649.       COREDUMP_DIR: ${SSRF_COREDUMP_DIR:-/var/spool/squid}
650.       REVERSE_PROXY_PORT: ${SSRF_REVERSE_PROXY_PORT:-8194}
651.       SANDBOX_HOST: ${SSRF_SANDBOX_HOST:-sandbox}
652.       SANDBOX_PORT: ${SANDBOX_PORT:-8194}
653.     networks:
654.       - ssrf_proxy_network
655.       - default
657.   # Certbot service
658.   # use `doswr.cn-southwest-2.myhuaweicloud.com/llody/certbot/certbot:latest
659.   certbot:
660.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/certbot/certbot:latest
661.     profiles:
662.       - certbot
663.     volumes:
664.       - ./volumes/certbot/conf:/etc/letsencrypt
665.       - ./volumes/certbot/www:/var/www/html
666.       - ./volumes/certbot/logs:/var/log/letsencrypt
667.       - ./volumes/certbot/conf/live:/etc/letsencrypt/live
668.       - ./certbot/update-cert.template.txt:/update-cert.template.txt
669.       - ./certbot/docker-entrypoint.sh:/docker-entrypoint.sh
670.     environment:
671.       - CERTBOT_EMAIL=${CERTBOT_EMAIL}
672.       - CERTBOT_DOMAIN=${CERTBOT_DOMAIN}
673.       - CERTBOT_OPTIONS=${CERTBOT_OPTIONS:-}
674.     entrypoint: [ '/docker-entrypoint.sh' ]
675.     command: [ 'tail', '-f', '/dev/null' ]
677.   # The nginx reverse proxy.
678.   # used for reverse proxying the API service and Web service.
679.   nginx:
680.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/nginx:v1.24.0
681.     restart: always
682.     volumes:
683.       - ./nginx/nginx.conf.template:/etc/nginx/nginx.conf.template
684.       - ./nginx/proxy.conf.template:/etc/nginx/proxy.conf.template
685.       - ./nginx/https.conf.template:/etc/nginx/https.conf.template
686.       - ./nginx/conf.d:/etc/nginx/conf.d
687.       - ./nginx/docker-entrypoint.sh:/docker-entrypoint-mount.sh
688.       - ./nginx/ssl:/etc/ssl # cert dir (legacy)
689.       - ./volumes/certbot/conf/live:/etc/letsencrypt/live # cert dir (with certbot container)
690.       - ./volumes/certbot/conf:/etc/letsencrypt
691.       - ./volumes/certbot/www:/var/www/html
692.     entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]
693.     environment:
694.       NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
695.       NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false}
696.       NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443}
697.       NGINX_PORT: ${NGINX_PORT:-80}
698.       # You're required to add your own SSL certificates/keys to the `./nginx/ssl` directory
699.       # and modify the env vars below in .env if HTTPS_ENABLED is true.
700.       NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
701.       NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
702.       NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3}
703.       NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
704.       NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-15M}
705.       NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
706.       NGINX_PROXY_READ_TIMEOUT: ${NGINX_PROXY_READ_TIMEOUT:-3600s}
707.       NGINX_PROXY_SEND_TIMEOUT: ${NGINX_PROXY_SEND_TIMEOUT:-3600s}
708.       NGINX_ENABLE_CERTBOT_CHALLENGE: ${NGINX_ENABLE_CERTBOT_CHALLENGE:-false}
709.       CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-}
710.     depends_on:
711.       - api
712.       - web
713.     ports:
714.       - '${EXPOSE_NGINX_PORT:-80}:${NGINX_PORT:-80}'
715.       - '${EXPOSE_NGINX_SSL_PORT:-443}:${NGINX_SSL_PORT:-443}'
717.   # The Weaviate vector store.
718.   weaviate:
719.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/semitechnologies/weaviate:1.19.0
720.     profiles:
721.       - ''
722.       - weaviate
723.     restart: always
724.     volumes:
725.       # Mount the Weaviate data directory to the con tainer.
726.       - ./volumes/weaviate:/var/lib/weaviate
727.     environment:
728.       # The Weaviate configurations
729.       # You can refer to the [Weaviate](https://weaviate.io/developers/weaviate/config-refs/env-vars) documentation for more information.
730.       PERSISTENCE_DATA_PATH: ${WEAVIATE_PERSISTENCE_DATA_PATH:-/var/lib/weaviate}
731.       QUERY_DEFAULTS_LIMIT: ${WEAVIATE_QUERY_DEFAULTS_LIMIT:-25}
732.       AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: ${WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED:-false}
733.       DEFAULT_VECTORIZER_MODULE: ${WEAVIATE_DEFAULT_VECTORIZER_MODULE:-none}
734.       CLUSTER_HOSTNAME: ${WEAVIATE_CLUSTER_HOSTNAME:-node1}
735.       AUTHENTICATION_APIKEY_ENABLED: ${WEAVIATE_AUTHENTICATION_APIKEY_ENABLED:-true}
736.       AUTHENTICATION_APIKEY_ALLOWED_KEYS: ${WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}
737.       AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
738.       AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
739.       AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
741.   # Qdrant vector store.
742.   # (if used, you need to set VECTOR_STORE to qdrant in the api & worker service.)
743.   qdrant:
744.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/langgenius/qdrant:v1.7.3
745.     profiles:
746.       - qdrant
747.     restart: always
748.     volumes:
749.       - ./volumes/qdrant:/qdrant/storage
750.     environment:
751.       QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456}
753.   # The Couchbase vector store.
754.   couchbase-server:
755.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/couchbase-server:latest
756.     profiles:
757.       - couchbase
758.     restart: always
759.     environment:
760.       - CLUSTER_NAME=dify_search
761.       - COUCHBASE_ADMINISTRATOR_USERNAME=${COUCHBASE_USER:-Administrator}
762.       - COUCHBASE_ADMINISTRATOR_PASSWORD=${COUCHBASE_PASSWORD:-password}
763.       - COUCHBASE_BUCKET=${COUCHBASE_BUCKET_NAME:-Embeddings}
764.       - COUCHBASE_BUCKET_RAMSIZE=512
765.       - COUCHBASE_RAM_SIZE=2048
766.       - COUCHBASE_EVENTING_RAM_SIZE=512
767.       - COUCHBASE_INDEX_RAM_SIZE=512
768.       - COUCHBASE_FTS_RAM_SIZE=1024
769.     hostname: couchbase-server
770.     container_name: couchbase-server
771.     working_dir: /opt/couchbase
772.     stdin_open: true
773.     tty: true
774.     entrypoint: [ "" ]
775.     command: sh -c "/opt/couchbase/init/init-cbserver.sh"
776.     volumes:
777.       - ./volumes/couchbase/data:/opt/couchbase/var/lib/couchbase/data
778.     healthcheck:
779.       # ensure bucket was created before proceeding
780.       test: [ "CMD-SHELL", "curl -s -f -u Administrator:password http://localhost:8091/pools/default/buckets | grep -q '\\[{' || exit 1" ]
781.       interval: 10s
782.       retries: 10
783.       start_period: 30s
784.       timeout: 10s
786.   # The pgvector vector database.
787.   pgvector:
788.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/pgvector/pgvector:pg16
789.     profiles:
790.       - pgvector
791.     restart: always
792.     environment:
793.       PGUSER: ${PGVECTOR_PGUSER:-postgres}
794.       # The password for the default postgres user.
795.       POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}
796.       # The name of the default postgres database.
797.       POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}
798.       # postgres data directory
799.       PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}
800.       # pg_bigm module for full text search
801.       PG_BIGM: ${PGVECTOR_PG_BIGM:-false}
802.       PG_BIGM_VERSION: ${PGVECTOR_PG_BIGM_VERSION:-1.2-20240606}
803.     volumes:
804.       - ./volumes/pgvector/data:/var/lib/postgresql/data
805.       - ./pgvector/docker-entrypoint.sh:/docker-entrypoint.sh
806.     entrypoint: [ '/docker-entrypoint.sh' ]
807.     healthcheck:
808.       test: [ 'CMD', 'pg_isready' ]
809.       interval: 1s
810.       timeout: 3s
811.       retries: 30
813.   # pgvecto-rs vector store
814.   pgvecto-rs:
815.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/tensorchord/pgvecto-rs:pg16-v0.3.0
816.     profiles:
817.       - pgvecto-rs
818.     restart: always
819.     environment:
820.       PGUSER: ${PGVECTOR_PGUSER:-postgres}
821.       # The password for the default postgres user.
822.       POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}
823.       # The name of the default postgres database.
824.       POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}
825.       # postgres data directory
826.       PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}
827.     volumes:
828.       - ./volumes/pgvecto_rs/data:/var/lib/postgresql/data
829.     healthcheck:
830.       test: [ 'CMD', 'pg_isready' ]
831.       interval: 1s
832.       timeout: 3s
833.       retries: 30
835.   # Chroma vector database
836.   chroma:
837.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/chroma-core/chroma:0.5.20
838.     profiles:
839.       - chroma
840.     restart: always
841.     volumes:
842.       - ./volumes/chroma:/chroma/chroma
843.     environment:
844.       CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456}
845.       CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
846.       IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
848.   # OceanBase vector database
849.   oceanbase:
850.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/oceanbase/oceanbase-ce:4.3.5.1-101000042025031818
851.     container_name: oceanbase
852.     profiles:
853.       - oceanbase
854.     restart: always
855.     volumes:
856.       - ./volumes/oceanbase/data:/root/ob
857.       - ./volumes/oceanbase/conf:/root/.obd/cluster
858.       - ./volumes/oceanbase/init.d:/root/boot/init.d
859.     environment:
860.       OB_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
861.       OB_SYS_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
862.       OB_TENANT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
863.       OB_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
864.       MODE: MINI
865.     ports:
866.       - "${OCEANBASE_VECTOR_PORT:-2881}:2881"
868.   # Oracle vector database
869.   oracle:
870.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/container-registry.oracle.com/database/free:latest
871.     profiles:
872.       - oracle
873.     restart: always
874.     volumes:
875.       - source: oradata
876.         type: volume
877.         target: /opt/oracle/oradata
878.       - ./startupscripts:/opt/oracle/scripts/startup
879.     environment:
880.       ORACLE_PWD: ${ORACLE_PWD:-Dify123456}
881.       ORACLE_CHARACTERSET: ${ORACLE_CHARACTERSET:-AL32UTF8}
883.   # Milvus vector database services
884.   etcd:
885.     container_name: milvus-etcd
886.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/etcd:v3.5.5
887.     profiles:
888.       - milvus
889.     environment:
890.       ETCD_AUTO_COMPACTION_MODE: ${ETCD_AUTO_COMPACTION_MODE:-revision}
891.       ETCD_AUTO_COMPACTION_RETENTION: ${ETCD_AUTO_COMPACTION_RETENTION:-1000}
892.       ETCD_QUOTA_BACKEND_BYTES: ${ETCD_QUOTA_BACKEND_BYTES:-4294967296}
893.       ETCD_SNAPSHOT_COUNT: ${ETCD_SNAPSHOT_COUNT:-50000}
894.     volumes:
895.       - ./volumes/milvus/etcd:/etcd
896.     command: etcd -advertise-client-urls=http://127.0.0.1:2379 -listen-client-urls http://0.0.0.0:2379 --data-dir /etcd
897.     healthcheck:
898.       test: [ 'CMD', 'etcdctl', 'endpoint', 'health' ]
899.       interval: 30s
900.       timeout: 20s
901.       retries: 3
902.     networks:
903.       - milvus
905.   minio:
906.     container_name: milvus-minio
907.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/minio/minio:RELEASE.2023-03-20T20-16-18Z
908.     profiles:
909.       - milvus
910.     environment:
911.       MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-minioadmin}
912.       MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-minioadmin}
913.     volumes:
914.       - ./volumes/milvus/minio:/minio_data
915.     command: minio server /minio_data --console-address ":9001"
916.     healthcheck:
917.       test: [ 'CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live' ]
918.       interval: 30s
919.       timeout: 20s
920.       retries: 3
921.     networks:
922.       - milvus
924.   milvus-standalone:
925.     container_name: milvus-standalone
926.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/milvusdb/milvus:v2.5.0-beta
927.     profiles:
928.       - milvus
929.     command: [ 'milvus', 'run', 'standalone' ]
930.     environment:
931.       ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}
932.       MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}
933.       common.security.authorizationEnabled: ${MILVUS_AUTHORIZATION_ENABLED:-true}
934.     volumes:
935.       - ./volumes/milvus/milvus:/var/lib/milvus
936.     healthcheck:
937.       test: [ 'CMD', 'curl', '-f', 'http://localhost:9091/healthz' ]
938.       interval: 30s
939.       start_period: 90s
940.       timeout: 20s
941.       retries: 3
942.     depends_on:
943.       - etcd
944.       - minio
945.     ports:
946.       - 19530:19530
947.       - 9091:9091
948.     networks:
949.       - milvus
951.   # Opensearch vector database
952.   opensearch:
953.     container_name: opensearch
954.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/opensearchproject/opensearch:latest
955.     profiles:
956.       - opensearch
957.     environment:
958.       discovery.type: ${OPENSEARCH_DISCOVERY_TYPE:-single-node}
959.       bootstrap.memory_lock: ${OPENSEARCH_BOOTSTRAP_MEMORY_LOCK:-true}
960.       OPENSEARCH_JAVA_OPTS: -Xms${OPENSEARCH_JAVA_OPTS_MIN:-512m} -Xmx${OPENSEARCH_JAVA_OPTS_MAX:-1024m}
961.       OPENSEARCH_INITIAL_ADMIN_PASSWORD: ${OPENSEARCH_INITIAL_ADMIN_PASSWORD:-Qazwsxedc!@#123}
962.     ulimits:
963.       memlock:
964.         soft: ${OPENSEARCH_MEMLOCK_SOFT:--1}
965.         hard: ${OPENSEARCH_MEMLOCK_HARD:--1}
966.       nofile:
967.         soft: ${OPENSEARCH_NOFILE_SOFT:-65536}
968.         hard: ${OPENSEARCH_NOFILE_HARD:-65536}
969.     volumes:
970.       - ./volumes/opensearch/data:/usr/share/opensearch/data
971.     networks:
972.       - opensearch-net
974.   opensearch-dashboards:
975.     container_name: opensearch-dashboards
976.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/opensearchproject/opensearch-dashboards:latest
977.     profiles:
978.       - opensearch
979.     environment:
980.       OPENSEARCH_HOSTS: '["https://opensearch:9200"]'
981.     volumes:
982.       - ./volumes/opensearch/opensearch_dashboards.yml:/usr/share/opensearch-dashboards/config/opensearch_dashboards.yml
983.     networks:
984.       - opensearch-net
985.     depends_on:
986.       - opensearch
988.   # opengauss vector database.
989.   opengauss:
990.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/opengauss/opengauss:7.0.0-RC1
991.     profiles:
992.       - opengauss
993.     privileged: true
994.     restart: always
995.     environment:
996.       GS_USERNAME: ${OPENGAUSS_USER:-postgres}
997.       GS_PASSWORD: ${OPENGAUSS_PASSWORD:-Dify@123}
998.       GS_PORT: ${OPENGAUSS_PORT:-6600}
999.       GS_DB: ${OPENGAUSS_DATABASE:-dify}
1000.     volumes:
1001.       - ./volumes/opengauss/data:/var/lib/opengauss/data
1002.     healthcheck:
1003.       test: ["CMD-SHELL", "netstat -lntp | grep tcp6 > /dev/null 2>&1"]
1004.       interval: 10s
1005.       timeout: 10s
1006.       retries: 10
1007.     ports:
1008.       - ${OPENGAUSS_PORT:-6600}:${OPENGAUSS_PORT:-6600}
1010.   # MyScale vector database
1011.   myscale:
1012.     container_name: myscale
1013.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/myscale/myscaledb:1.6.4
1014.     profiles:
1015.       - myscale
1016.     restart: always
1017.     tty: true
1018.     volumes:
1019.       - ./volumes/myscale/data:/var/lib/clickhouse
1020.       - ./volumes/myscale/log:/var/log/clickhouse-server
1021.       - ./volumes/myscale/config/users.d/custom_users_config.xml:/etc/clickhouse-server/users.d/custom_users_config.xml
1022.     ports:
1023.       - ${MYSCALE_PORT:-8123}:${MYSCALE_PORT:-8123}
1025.   # https://www.elastic.co/guide/en/elasticsearch/reference/current/settings.html
1026.   # https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html#docker-prod-prerequisites
1027.   elasticsearch:
1028.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/elasticsearch:8.15.3
1029.     container_name: elasticsearch
1030.     profiles:
1031.       - elasticsearch
1032.       - elasticsearch-ja
1033.     restart: always
1034.     volumes:
1035.       - ./elasticsearch/docker-entrypoint.sh:/docker-entrypoint-mount.sh
1036.       - dify_es01_data:/usr/share/elasticsearch/data
1037.     environment:
1038.       ELASTIC_PASSWORD: ${ELASTICSEARCH_PASSWORD:-elastic}
1039.       VECTOR_STORE: ${VECTOR_STORE:-}
1040.       cluster.name: dify-es-cluster
1041.       node.name: dify-es0
1042.       discovery.type: single-node
1043.       xpack.license.self_generated.type: basic
1044.       xpack.security.enabled: 'true'
1045.       xpack.security.enrollment.enabled: 'false'
1046.       xpack.security.http.ssl.enabled: 'false'
1047.     ports:
1048.       - ${ELASTICSEARCH_PORT:-9200}:9200
1049.     deploy:
1050.       resources:
1051.         limits:
1052.           memory: 2g
1053.     entrypoint: [ 'sh', '-c', "sh /docker-entrypoint-mount.sh" ]
1054.     healthcheck:
1055.       test: [ 'CMD', 'curl', '-s', 'http://localhost:9200/_cluster/health?pretty' ]
1056.       interval: 30s
1057.       timeout: 10s
1058.       retries: 50
1060.   # https://www.elastic.co/guide/en/kibana/current/docker.html
1061.   # https://www.elastic.co/guide/en/kibana/current/settings.html
1062.   kibana:
1063.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/kibana:8.15.3
1064.     container_name: kibana
1065.     profiles:
1066.       - elasticsearch
1067.     depends_on:
1068.       - elasticsearch
1069.     restart: always
1070.     environment:
1071.       XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: d1a66dfd-c4d3-4a0a-8290-2abcb83ab3aa
1072.       NO_PROXY: localhost,127.0.0.1,elasticsearch,kibana
1073.       XPACK_SECURITY_ENABLED: 'true'
1074.       XPACK_SECURITY_ENROLLMENT_ENABLED: 'false'
1075.       XPACK_SECURITY_HTTP_SSL_ENABLED: 'false'
1076.       XPACK_FLEET_ISAIRGAPPED: 'true'
1077.       I18N_LOCALE: zh-CN
1078.       SERVER_PORT: '5601'
1079.       ELASTICSEARCH_HOSTS: http://elasticsearch:9200
1080.     ports:
1081.       - ${KIBANA_PORT:-5601}:5601
1082.     healthcheck:
1083.       test: [ 'CMD-SHELL', 'curl -s http://localhost:5601 >/dev/null || exit 1' ]
1084.       interval: 30s
1085.       timeout: 10s
1086.       retries: 3
1088.   # unstructured .
1089.   # (if used, you need to set ETL_TYPE to Unstructured in the api & worker service.)
1090.   unstructured:
1091.     image: swr.cn-southwest-2.myhuaweicloud.com/llody/unstructured-io/unstructured-api:latest
1092.     profiles:
1093.       - unstructured
1094.     restart: always
1095.     volumes:
1096.       - ./volumes/unstructured:/app/data
1098. networks:
1099.   # create a network between sandbox, api and ssrf_proxy, and can not access outside.
1100.   ssrf_proxy_network:
1101.     driver: bridge
1102.     internal: true
1103.   milvus:
1104.     driver: bridge
1105.   opensearch-net:
1106.     driver: bridge
1107.     internal: true
1109. volumes:
1110.   oradata:
1111.   dify_es01_data:

复制代码

摆设

1. root@dify:~/dify# docker-compose -p dify -f dify.yaml up -d
2. [+] Running 12/12
3. ✔ Network dify_default             Created                                                                                                  0.1s
4. ✔ Network dify_ssrf_proxy_network  Created                                                                                                  0.0s
5. ✔ Container dify-sandbox-1         Started                                                                                                  1.2s
6. ✔ Container dify-redis-1           Started                                                                                                  2.4s
7. ✔ Container dify-web-1             Started                                                                                                  5.5s
8. ✔ Container dify-ssrf_proxy-1      Started                                                                                                  7.6s
9. ✔ Container dify-weaviate-1        Started                                                                                                  1.5s
10. ✔ Container dify-db-1              Started                                                                                                  3.4s
11. ✔ Container dify-plugin_daemon-1   Started                                                                                                  4.2s
12. ✔ Container dify-api-1             Started                                                                                                  6.5s
13. ✔ Container dify-worker-1          Started                                                                                                  4.5s
14. ✔ Container dify-nginx-1           Started   

复制代码

打开浏览器

输入网址：192.168.1.223:1880

免责声明：如果侵犯了您的权益，请联系站长，我们会及时删除侵权内容，谢谢合作！更多信息从访问主页：qidao123.com:ToB企服之家，中国第一个企服评测及商务社交产业平台。