Merge pull request #64 from Ahson-Shaikh/29-12-2025
Plane Compose Template - Updated to v1.2.1
This commit is contained in:
Andrei Canta
@@ -14,6 +14,8 @@ _APP_DOMAIN_TARGET=localhost
|
|||||||
_APP_DOMAIN_TARGET_CNAME=localhost
|
_APP_DOMAIN_TARGET_CNAME=localhost
|
||||||
_APP_DOMAIN_TARGET_AAAA=::1
|
_APP_DOMAIN_TARGET_AAAA=::1
|
||||||
_APP_DOMAIN_TARGET_A=127.0.0.1
|
_APP_DOMAIN_TARGET_A=127.0.0.1
|
||||||
|
_APP_DOMAIN_TARGET_CAA=
|
||||||
|
_APP_DNS=8.8.8.8
|
||||||
_APP_CONSOLE_WHITELIST_ROOT=enabled
|
_APP_CONSOLE_WHITELIST_ROOT=enabled
|
||||||
_APP_CONSOLE_WHITELIST_EMAILS=
|
_APP_CONSOLE_WHITELIST_EMAILS=
|
||||||
_APP_CONSOLE_WHITELIST_IPS=
|
_APP_CONSOLE_WHITELIST_IPS=
|
||||||
|
|||||||
@@ -28,7 +28,7 @@ services:
|
|||||||
- appwrite
|
- appwrite
|
||||||
|
|
||||||
appwrite:
|
appwrite:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
networks:
|
networks:
|
||||||
@@ -83,6 +83,8 @@ services:
|
|||||||
- _APP_DOMAIN_TARGET_CNAME
|
- _APP_DOMAIN_TARGET_CNAME
|
||||||
- _APP_DOMAIN_TARGET_AAAA
|
- _APP_DOMAIN_TARGET_AAAA
|
||||||
- _APP_DOMAIN_TARGET_A
|
- _APP_DOMAIN_TARGET_A
|
||||||
|
- _APP_DOMAIN_TARGET_CAA
|
||||||
|
- _APP_DNS
|
||||||
- _APP_DOMAIN_FUNCTIONS
|
- _APP_DOMAIN_FUNCTIONS
|
||||||
- _APP_REDIS_HOST
|
- _APP_REDIS_HOST
|
||||||
- _APP_REDIS_PORT
|
- _APP_REDIS_PORT
|
||||||
@@ -162,10 +164,9 @@ services:
|
|||||||
- _APP_MIGRATIONS_FIREBASE_CLIENT_ID
|
- _APP_MIGRATIONS_FIREBASE_CLIENT_ID
|
||||||
- _APP_MIGRATIONS_FIREBASE_CLIENT_SECRET
|
- _APP_MIGRATIONS_FIREBASE_CLIENT_SECRET
|
||||||
- _APP_ASSISTANT_OPENAI_API_KEY
|
- _APP_ASSISTANT_OPENAI_API_KEY
|
||||||
|
|
||||||
appwrite-console:
|
appwrite-console:
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
image: appwrite/console:6.0.13
|
image: appwrite/console:7.4.7
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
networks:
|
networks:
|
||||||
- appwrite
|
- appwrite
|
||||||
@@ -185,7 +186,7 @@ services:
|
|||||||
- traefik.http.routers.appwrite_console_https.tls=true
|
- traefik.http.routers.appwrite_console_https.tls=true
|
||||||
|
|
||||||
appwrite-realtime:
|
appwrite-realtime:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: realtime
|
entrypoint: realtime
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -227,7 +228,7 @@ services:
|
|||||||
- _APP_LOGGING_CONFIG
|
- _APP_LOGGING_CONFIG
|
||||||
|
|
||||||
appwrite-worker-audits:
|
appwrite-worker-audits:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-audits
|
entrypoint: worker-audits
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -252,7 +253,7 @@ services:
|
|||||||
- _APP_LOGGING_CONFIG
|
- _APP_LOGGING_CONFIG
|
||||||
|
|
||||||
appwrite-worker-webhooks:
|
appwrite-worker-webhooks:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-webhooks
|
entrypoint: worker-webhooks
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -279,7 +280,7 @@ services:
|
|||||||
- _APP_LOGGING_CONFIG
|
- _APP_LOGGING_CONFIG
|
||||||
|
|
||||||
appwrite-worker-deletes:
|
appwrite-worker-deletes:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-deletes
|
entrypoint: worker-deletes
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -341,7 +342,7 @@ services:
|
|||||||
- _APP_EMAIL_CERTIFICATES
|
- _APP_EMAIL_CERTIFICATES
|
||||||
|
|
||||||
appwrite-worker-databases:
|
appwrite-worker-databases:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-databases
|
entrypoint: worker-databases
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -366,7 +367,7 @@ services:
|
|||||||
- _APP_LOGGING_CONFIG
|
- _APP_LOGGING_CONFIG
|
||||||
|
|
||||||
appwrite-worker-builds:
|
appwrite-worker-builds:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-builds
|
entrypoint: worker-builds
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -433,7 +434,7 @@ services:
|
|||||||
- _APP_DOMAIN_SITES
|
- _APP_DOMAIN_SITES
|
||||||
|
|
||||||
appwrite-worker-certificates:
|
appwrite-worker-certificates:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-certificates
|
entrypoint: worker-certificates
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -453,6 +454,8 @@ services:
|
|||||||
- _APP_DOMAIN_TARGET_CNAME
|
- _APP_DOMAIN_TARGET_CNAME
|
||||||
- _APP_DOMAIN_TARGET_AAAA
|
- _APP_DOMAIN_TARGET_AAAA
|
||||||
- _APP_DOMAIN_TARGET_A
|
- _APP_DOMAIN_TARGET_A
|
||||||
|
- _APP_DOMAIN_TARGET_CAA
|
||||||
|
- _APP_DNS
|
||||||
- _APP_DOMAIN_FUNCTIONS
|
- _APP_DOMAIN_FUNCTIONS
|
||||||
- _APP_EMAIL_CERTIFICATES
|
- _APP_EMAIL_CERTIFICATES
|
||||||
- _APP_REDIS_HOST
|
- _APP_REDIS_HOST
|
||||||
@@ -467,7 +470,7 @@ services:
|
|||||||
- _APP_LOGGING_CONFIG
|
- _APP_LOGGING_CONFIG
|
||||||
|
|
||||||
appwrite-worker-functions:
|
appwrite-worker-functions:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-functions
|
entrypoint: worker-functions
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -505,7 +508,7 @@ services:
|
|||||||
- _APP_LOGGING_CONFIG
|
- _APP_LOGGING_CONFIG
|
||||||
|
|
||||||
appwrite-worker-mails:
|
appwrite-worker-mails:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-mails
|
entrypoint: worker-mails
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -538,7 +541,7 @@ services:
|
|||||||
- _APP_OPTIONS_FORCE_HTTPS
|
- _APP_OPTIONS_FORCE_HTTPS
|
||||||
|
|
||||||
appwrite-worker-messaging:
|
appwrite-worker-messaging:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-messaging
|
entrypoint: worker-messaging
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -588,7 +591,7 @@ services:
|
|||||||
- _APP_STORAGE_WASABI_BUCKET
|
- _APP_STORAGE_WASABI_BUCKET
|
||||||
|
|
||||||
appwrite-worker-migrations:
|
appwrite-worker-migrations:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-migrations
|
entrypoint: worker-migrations
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -606,6 +609,8 @@ services:
|
|||||||
- _APP_DOMAIN_TARGET_CNAME
|
- _APP_DOMAIN_TARGET_CNAME
|
||||||
- _APP_DOMAIN_TARGET_AAAA
|
- _APP_DOMAIN_TARGET_AAAA
|
||||||
- _APP_DOMAIN_TARGET_A
|
- _APP_DOMAIN_TARGET_A
|
||||||
|
- _APP_DOMAIN_TARGET_CAA
|
||||||
|
- _APP_DNS
|
||||||
- _APP_EMAIL_SECURITY
|
- _APP_EMAIL_SECURITY
|
||||||
- _APP_REDIS_HOST
|
- _APP_REDIS_HOST
|
||||||
- _APP_REDIS_PORT
|
- _APP_REDIS_PORT
|
||||||
@@ -621,7 +626,7 @@ services:
|
|||||||
- _APP_MIGRATIONS_FIREBASE_CLIENT_SECRET
|
- _APP_MIGRATIONS_FIREBASE_CLIENT_SECRET
|
||||||
|
|
||||||
appwrite-task-maintenance:
|
appwrite-task-maintenance:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: maintenance
|
entrypoint: maintenance
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -636,6 +641,8 @@ services:
|
|||||||
- _APP_DOMAIN_TARGET_CNAME
|
- _APP_DOMAIN_TARGET_CNAME
|
||||||
- _APP_DOMAIN_TARGET_AAAA
|
- _APP_DOMAIN_TARGET_AAAA
|
||||||
- _APP_DOMAIN_TARGET_A
|
- _APP_DOMAIN_TARGET_A
|
||||||
|
- _APP_DOMAIN_TARGET_CAA
|
||||||
|
- _APP_DNS
|
||||||
- _APP_DOMAIN_FUNCTIONS
|
- _APP_DOMAIN_FUNCTIONS
|
||||||
- _APP_OPENSSL_KEY_V1
|
- _APP_OPENSSL_KEY_V1
|
||||||
- _APP_REDIS_HOST
|
- _APP_REDIS_HOST
|
||||||
@@ -657,7 +664,7 @@ services:
|
|||||||
- _APP_MAINTENANCE_RETENTION_SCHEDULES
|
- _APP_MAINTENANCE_RETENTION_SCHEDULES
|
||||||
|
|
||||||
appwrite-task-stats-resources:
|
appwrite-task-stats-resources:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: stats-resources
|
entrypoint: stats-resources
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -685,7 +692,7 @@ services:
|
|||||||
- _APP_STATS_RESOURCES_INTERVAL
|
- _APP_STATS_RESOURCES_INTERVAL
|
||||||
|
|
||||||
appwrite-worker-stats-resources:
|
appwrite-worker-stats-resources:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-stats-resources
|
entrypoint: worker-stats-resources
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -712,7 +719,7 @@ services:
|
|||||||
- _APP_STATS_RESOURCES_INTERVAL
|
- _APP_STATS_RESOURCES_INTERVAL
|
||||||
|
|
||||||
appwrite-worker-stats-usage:
|
appwrite-worker-stats-usage:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: worker-stats-usage
|
entrypoint: worker-stats-usage
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -739,7 +746,7 @@ services:
|
|||||||
- _APP_USAGE_AGGREGATION_INTERVAL
|
- _APP_USAGE_AGGREGATION_INTERVAL
|
||||||
|
|
||||||
appwrite-task-scheduler-functions:
|
appwrite-task-scheduler-functions:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: schedule-functions
|
entrypoint: schedule-functions
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -763,7 +770,7 @@ services:
|
|||||||
- _APP_DB_PASS
|
- _APP_DB_PASS
|
||||||
|
|
||||||
appwrite-task-scheduler-executions:
|
appwrite-task-scheduler-executions:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: schedule-executions
|
entrypoint: schedule-executions
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -787,7 +794,7 @@ services:
|
|||||||
- _APP_DB_PASS
|
- _APP_DB_PASS
|
||||||
|
|
||||||
appwrite-task-scheduler-messages:
|
appwrite-task-scheduler-messages:
|
||||||
image: appwrite/appwrite:1.7.4
|
image: appwrite/appwrite:1.8.0
|
||||||
entrypoint: schedule-messages
|
entrypoint: schedule-messages
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
@@ -811,7 +818,7 @@ services:
|
|||||||
- _APP_DB_PASS
|
- _APP_DB_PASS
|
||||||
|
|
||||||
appwrite-assistant:
|
appwrite-assistant:
|
||||||
image: appwrite/assistant:0.4.0
|
image: appwrite/assistant:0.8.3
|
||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
networks:
|
networks:
|
||||||
@@ -831,7 +838,7 @@ services:
|
|||||||
<<: *x-logging
|
<<: *x-logging
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
stop_signal: SIGINT
|
stop_signal: SIGINT
|
||||||
image: openruntimes/executor:0.7.14
|
image: openruntimes/executor:0.7.22
|
||||||
networks:
|
networks:
|
||||||
- appwrite
|
- appwrite
|
||||||
- runtimes
|
- runtimes
|
||||||
|
|||||||
+258
-35
@@ -24,6 +24,11 @@ CONSOLE_WEB_URL=
|
|||||||
# Example: https://api.dify.ai
|
# Example: https://api.dify.ai
|
||||||
SERVICE_API_URL=
|
SERVICE_API_URL=
|
||||||
|
|
||||||
|
# Trigger external URL
|
||||||
|
# used to display trigger endpoint API Base URL to the front-end.
|
||||||
|
# Example: https://api.dify.ai
|
||||||
|
TRIGGER_URL=http://localhost
|
||||||
|
|
||||||
# WebApp API backend Url,
|
# WebApp API backend Url,
|
||||||
# used to declare the back-end URL for the front-end API.
|
# used to declare the back-end URL for the front-end API.
|
||||||
# If empty, it is the same domain.
|
# If empty, it is the same domain.
|
||||||
@@ -128,6 +133,8 @@ ACCESS_TOKEN_EXPIRE_MINUTES=60
|
|||||||
# Refresh token expiration time in days
|
# Refresh token expiration time in days
|
||||||
REFRESH_TOKEN_EXPIRE_DAYS=30
|
REFRESH_TOKEN_EXPIRE_DAYS=30
|
||||||
|
|
||||||
|
# The default number of active requests for the application, where 0 means unlimited, should be a non-negative integer.
|
||||||
|
APP_DEFAULT_ACTIVE_REQUESTS=0
|
||||||
# The maximum number of active requests for the application, where 0 means unlimited, should be a non-negative integer.
|
# The maximum number of active requests for the application, where 0 means unlimited, should be a non-negative integer.
|
||||||
APP_MAX_ACTIVE_REQUESTS=0
|
APP_MAX_ACTIVE_REQUESTS=0
|
||||||
APP_MAX_EXECUTION_TIME=1200
|
APP_MAX_EXECUTION_TIME=1200
|
||||||
@@ -149,6 +156,12 @@ DIFY_PORT=5001
|
|||||||
SERVER_WORKER_AMOUNT=1
|
SERVER_WORKER_AMOUNT=1
|
||||||
|
|
||||||
# Defaults to gevent. If using windows, it can be switched to sync or solo.
|
# Defaults to gevent. If using windows, it can be switched to sync or solo.
|
||||||
|
#
|
||||||
|
# Warning: Changing this parameter requires disabling patching for
|
||||||
|
# psycopg2 and gRPC (see `gunicorn.conf.py` and `celery_entrypoint.py`).
|
||||||
|
# Modifying it may also decrease throughput.
|
||||||
|
#
|
||||||
|
# It is strongly discouraged to change this parameter.
|
||||||
SERVER_WORKER_CLASS=gevent
|
SERVER_WORKER_CLASS=gevent
|
||||||
|
|
||||||
# Default number of worker connections, the default is 10.
|
# Default number of worker connections, the default is 10.
|
||||||
@@ -156,6 +169,12 @@ SERVER_WORKER_CONNECTIONS=10
|
|||||||
|
|
||||||
# Similar to SERVER_WORKER_CLASS.
|
# Similar to SERVER_WORKER_CLASS.
|
||||||
# If using windows, it can be switched to sync or solo.
|
# If using windows, it can be switched to sync or solo.
|
||||||
|
#
|
||||||
|
# Warning: Changing this parameter requires disabling patching for
|
||||||
|
# psycopg2 and gRPC (see `gunicorn_conf.py` and `celery_entrypoint.py`).
|
||||||
|
# Modifying it may also decrease throughput.
|
||||||
|
#
|
||||||
|
# It is strongly discouraged to change this parameter.
|
||||||
CELERY_WORKER_CLASS=
|
CELERY_WORKER_CLASS=
|
||||||
|
|
||||||
# Request handling timeout. The default is 200,
|
# Request handling timeout. The default is 200,
|
||||||
@@ -201,17 +220,26 @@ ENABLE_WEBSITE_JINAREADER=true
|
|||||||
ENABLE_WEBSITE_FIRECRAWL=true
|
ENABLE_WEBSITE_FIRECRAWL=true
|
||||||
ENABLE_WEBSITE_WATERCRAWL=true
|
ENABLE_WEBSITE_WATERCRAWL=true
|
||||||
|
|
||||||
|
# Enable inline LaTeX rendering with single dollar signs ($...$) in the web frontend
|
||||||
|
# Default is false for security reasons to prevent conflicts with regular text
|
||||||
|
NEXT_PUBLIC_ENABLE_SINGLE_DOLLAR_LATEX=false
|
||||||
|
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
# Database Configuration
|
# Database Configuration
|
||||||
# The database uses PostgreSQL. Please use the public schema.
|
# The database uses PostgreSQL or MySQL. OceanBase and seekdb are also supported. Please use the public schema.
|
||||||
# It is consistent with the configuration in the 'db' service below.
|
# It is consistent with the configuration in the database service below.
|
||||||
|
# You can adjust the database configuration according to your needs.
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
|
|
||||||
|
# Database type, supported values are `postgresql` and `mysql`
|
||||||
|
DB_TYPE=postgresql
|
||||||
|
# For MySQL, only `root` user is supported for now
|
||||||
DB_USERNAME=postgres
|
DB_USERNAME=postgres
|
||||||
DB_PASSWORD=difyai123456
|
DB_PASSWORD=difyai123456
|
||||||
DB_HOST=db
|
DB_HOST=db_postgres
|
||||||
DB_PORT=5432
|
DB_PORT=5432
|
||||||
DB_DATABASE=dify
|
DB_DATABASE=dify
|
||||||
|
|
||||||
# The size of the database connection pool.
|
# The size of the database connection pool.
|
||||||
# The default is 30 connections, which can be appropriately increased.
|
# The default is 30 connections, which can be appropriately increased.
|
||||||
SQLALCHEMY_POOL_SIZE=30
|
SQLALCHEMY_POOL_SIZE=30
|
||||||
@@ -225,6 +253,9 @@ SQLALCHEMY_ECHO=false
|
|||||||
SQLALCHEMY_POOL_PRE_PING=false
|
SQLALCHEMY_POOL_PRE_PING=false
|
||||||
# Whether to enable the Last in first out option or use default FIFO queue if is false
|
# Whether to enable the Last in first out option or use default FIFO queue if is false
|
||||||
SQLALCHEMY_POOL_USE_LIFO=false
|
SQLALCHEMY_POOL_USE_LIFO=false
|
||||||
|
# Number of seconds to wait for a connection from the pool before raising a timeout error.
|
||||||
|
# Default is 30
|
||||||
|
SQLALCHEMY_POOL_TIMEOUT=30
|
||||||
|
|
||||||
# Maximum number of connections to the database
|
# Maximum number of connections to the database
|
||||||
# Default is 100
|
# Default is 100
|
||||||
@@ -256,6 +287,43 @@ POSTGRES_MAINTENANCE_WORK_MEM=64MB
|
|||||||
# Reference: https://www.postgresql.org/docs/current/runtime-config-query.html#GUC-EFFECTIVE-CACHE-SIZE
|
# Reference: https://www.postgresql.org/docs/current/runtime-config-query.html#GUC-EFFECTIVE-CACHE-SIZE
|
||||||
POSTGRES_EFFECTIVE_CACHE_SIZE=4096MB
|
POSTGRES_EFFECTIVE_CACHE_SIZE=4096MB
|
||||||
|
|
||||||
|
# Sets the maximum allowed duration of any statement before termination.
|
||||||
|
# Default is 0 (no timeout).
|
||||||
|
#
|
||||||
|
# Reference: https://www.postgresql.org/docs/current/runtime-config-client.html#GUC-STATEMENT-TIMEOUT
|
||||||
|
# A value of 0 prevents the server from timing out statements.
|
||||||
|
POSTGRES_STATEMENT_TIMEOUT=0
|
||||||
|
|
||||||
|
# Sets the maximum allowed duration of any idle in-transaction session before termination.
|
||||||
|
# Default is 0 (no timeout).
|
||||||
|
#
|
||||||
|
# Reference: https://www.postgresql.org/docs/current/runtime-config-client.html#GUC-IDLE-IN-TRANSACTION-SESSION-TIMEOUT
|
||||||
|
# A value of 0 prevents the server from terminating idle sessions.
|
||||||
|
POSTGRES_IDLE_IN_TRANSACTION_SESSION_TIMEOUT=0
|
||||||
|
|
||||||
|
# MySQL Performance Configuration
|
||||||
|
# Maximum number of connections to MySQL
|
||||||
|
#
|
||||||
|
# Default is 1000
|
||||||
|
MYSQL_MAX_CONNECTIONS=1000
|
||||||
|
|
||||||
|
# InnoDB buffer pool size
|
||||||
|
# Default is 512M
|
||||||
|
# Recommended value: 70-80% of available memory for dedicated MySQL server
|
||||||
|
# Reference: https://dev.mysql.com/doc/refman/8.0/en/innodb-parameters.html#sysvar_innodb_buffer_pool_size
|
||||||
|
MYSQL_INNODB_BUFFER_POOL_SIZE=512M
|
||||||
|
|
||||||
|
# InnoDB log file size
|
||||||
|
# Default is 128M
|
||||||
|
# Reference: https://dev.mysql.com/doc/refman/8.0/en/innodb-parameters.html#sysvar_innodb_log_file_size
|
||||||
|
MYSQL_INNODB_LOG_FILE_SIZE=128M
|
||||||
|
|
||||||
|
# InnoDB flush log at transaction commit
|
||||||
|
# Default is 2 (flush to OS cache, sync every second)
|
||||||
|
# Options: 0 (no flush), 1 (flush and sync), 2 (flush to OS cache)
|
||||||
|
# Reference: https://dev.mysql.com/doc/refman/8.0/en/innodb-parameters.html#sysvar_innodb_flush_log_at_trx_commit
|
||||||
|
MYSQL_INNODB_FLUSH_LOG_AT_TRX_COMMIT=2
|
||||||
|
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
# Redis Configuration
|
# Redis Configuration
|
||||||
# This Redis configuration is used for caching and for pub/sub during conversation.
|
# This Redis configuration is used for caching and for pub/sub during conversation.
|
||||||
@@ -299,7 +367,7 @@ REDIS_CLUSTERS_PASSWORD=
|
|||||||
# Celery Configuration
|
# Celery Configuration
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
|
|
||||||
# Use standalone redis as the broker, and redis db 1 for celery broker. (redis_username is usually set by defualt as empty)
|
# Use standalone redis as the broker, and redis db 1 for celery broker. (redis_username is usually set by default as empty)
|
||||||
# Format as follows: `redis://<redis_username>:<redis_password>@<redis_host>:<redis_port>/<redis_database>`.
|
# Format as follows: `redis://<redis_username>:<redis_password>@<redis_host>:<redis_port>/<redis_database>`.
|
||||||
# Example: redis://:difyai123456@redis:6379/1
|
# Example: redis://:difyai123456@redis:6379/1
|
||||||
# If use Redis Sentinel, format as follows: `sentinel://<redis_username>:<redis_password>@<sentinel_host1>:<sentinel_port>/<redis_database>`
|
# If use Redis Sentinel, format as follows: `sentinel://<redis_username>:<redis_password>@<sentinel_host1>:<sentinel_port>/<redis_database>`
|
||||||
@@ -327,6 +395,11 @@ WEB_API_CORS_ALLOW_ORIGINS=*
|
|||||||
# Specifies the allowed origins for cross-origin requests to the console API,
|
# Specifies the allowed origins for cross-origin requests to the console API,
|
||||||
# e.g. https://cloud.dify.ai or * for all origins.
|
# e.g. https://cloud.dify.ai or * for all origins.
|
||||||
CONSOLE_CORS_ALLOW_ORIGINS=*
|
CONSOLE_CORS_ALLOW_ORIGINS=*
|
||||||
|
# When the frontend and backend run on different subdomains, set COOKIE_DOMAIN to the site’s top-level domain (e.g., `example.com`). Leading dots are optional.
|
||||||
|
COOKIE_DOMAIN=
|
||||||
|
# When the frontend and backend run on different subdomains, set NEXT_PUBLIC_COOKIE_DOMAIN=1.
|
||||||
|
NEXT_PUBLIC_COOKIE_DOMAIN=
|
||||||
|
NEXT_PUBLIC_BATCH_CONCURRENCY=5
|
||||||
|
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
# File Storage Configuration
|
# File Storage Configuration
|
||||||
@@ -396,6 +469,7 @@ ALIYUN_OSS_REGION=ap-southeast-1
|
|||||||
ALIYUN_OSS_AUTH_VERSION=v4
|
ALIYUN_OSS_AUTH_VERSION=v4
|
||||||
# Don't start with '/'. OSS doesn't support leading slash in object names.
|
# Don't start with '/'. OSS doesn't support leading slash in object names.
|
||||||
ALIYUN_OSS_PATH=your-path
|
ALIYUN_OSS_PATH=your-path
|
||||||
|
ALIYUN_CLOUDBOX_ID=your-cloudbox-id
|
||||||
|
|
||||||
# Tencent COS Configuration
|
# Tencent COS Configuration
|
||||||
#
|
#
|
||||||
@@ -404,6 +478,7 @@ TENCENT_COS_SECRET_KEY=your-secret-key
|
|||||||
TENCENT_COS_SECRET_ID=your-secret-id
|
TENCENT_COS_SECRET_ID=your-secret-id
|
||||||
TENCENT_COS_REGION=your-region
|
TENCENT_COS_REGION=your-region
|
||||||
TENCENT_COS_SCHEME=your-scheme
|
TENCENT_COS_SCHEME=your-scheme
|
||||||
|
TENCENT_COS_CUSTOM_DOMAIN=your-custom-domain
|
||||||
|
|
||||||
# Oracle Storage Configuration
|
# Oracle Storage Configuration
|
||||||
#
|
#
|
||||||
@@ -419,6 +494,7 @@ HUAWEI_OBS_BUCKET_NAME=your-bucket-name
|
|||||||
HUAWEI_OBS_SECRET_KEY=your-secret-key
|
HUAWEI_OBS_SECRET_KEY=your-secret-key
|
||||||
HUAWEI_OBS_ACCESS_KEY=your-access-key
|
HUAWEI_OBS_ACCESS_KEY=your-access-key
|
||||||
HUAWEI_OBS_SERVER=your-server-url
|
HUAWEI_OBS_SERVER=your-server-url
|
||||||
|
HUAWEI_OBS_PATH_STYLE=false
|
||||||
|
|
||||||
# Volcengine TOS Configuration
|
# Volcengine TOS Configuration
|
||||||
#
|
#
|
||||||
@@ -446,7 +522,7 @@ SUPABASE_URL=your-server-url
|
|||||||
# ------------------------------
|
# ------------------------------
|
||||||
|
|
||||||
# The type of vector store to use.
|
# The type of vector store to use.
|
||||||
# Supported values are `weaviate`, `qdrant`, `milvus`, `myscale`, `relyt`, `pgvector`, `pgvecto-rs`, `chroma`, `opensearch`, `oracle`, `tencent`, `elasticsearch`, `elasticsearch-ja`, `analyticdb`, `couchbase`, `vikingdb`, `oceanbase`, `opengauss`, `tablestore`,`vastbase`,`tidb`,`tidb_on_qdrant`,`baidu`,`lindorm`,`huawei_cloud`,`upstash`, `matrixone`, `clickzetta`.
|
# Supported values are `weaviate`, `oceanbase`, `qdrant`, `milvus`, `myscale`, `relyt`, `pgvector`, `pgvecto-rs`, `chroma`, `opensearch`, `oracle`, `tencent`, `elasticsearch`, `elasticsearch-ja`, `analyticdb`, `couchbase`, `vikingdb`, `opengauss`, `tablestore`,`vastbase`,`tidb`,`tidb_on_qdrant`,`baidu`,`lindorm`,`huawei_cloud`,`upstash`, `matrixone`, `clickzetta`, `alibabacloud_mysql`, `iris`.
|
||||||
VECTOR_STORE=weaviate
|
VECTOR_STORE=weaviate
|
||||||
# Prefix used to create collection name in vector database
|
# Prefix used to create collection name in vector database
|
||||||
VECTOR_INDEX_NAME_PREFIX=Vector_index
|
VECTOR_INDEX_NAME_PREFIX=Vector_index
|
||||||
@@ -454,6 +530,25 @@ VECTOR_INDEX_NAME_PREFIX=Vector_index
|
|||||||
# The Weaviate endpoint URL. Only available when VECTOR_STORE is `weaviate`.
|
# The Weaviate endpoint URL. Only available when VECTOR_STORE is `weaviate`.
|
||||||
WEAVIATE_ENDPOINT=http://weaviate:8080
|
WEAVIATE_ENDPOINT=http://weaviate:8080
|
||||||
WEAVIATE_API_KEY=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih
|
WEAVIATE_API_KEY=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih
|
||||||
|
WEAVIATE_GRPC_ENDPOINT=grpc://weaviate:50051
|
||||||
|
WEAVIATE_TOKENIZATION=word
|
||||||
|
|
||||||
|
# For OceanBase metadata database configuration, available when `DB_TYPE` is `mysql` and `COMPOSE_PROFILES` includes `oceanbase`.
|
||||||
|
# For OceanBase vector database configuration, available when `VECTOR_STORE` is `oceanbase`
|
||||||
|
# If you want to use OceanBase as both vector database and metadata database, you need to set `DB_TYPE` to `mysql`, `COMPOSE_PROFILES` is `oceanbase`, and set Database Configuration is the same as the vector database.
|
||||||
|
# seekdb is the lite version of OceanBase and shares the connection configuration with OceanBase.
|
||||||
|
OCEANBASE_VECTOR_HOST=oceanbase
|
||||||
|
OCEANBASE_VECTOR_PORT=2881
|
||||||
|
OCEANBASE_VECTOR_USER=root@test
|
||||||
|
OCEANBASE_VECTOR_PASSWORD=difyai123456
|
||||||
|
OCEANBASE_VECTOR_DATABASE=test
|
||||||
|
OCEANBASE_CLUSTER_NAME=difyai
|
||||||
|
OCEANBASE_MEMORY_LIMIT=6G
|
||||||
|
OCEANBASE_ENABLE_HYBRID_SEARCH=false
|
||||||
|
# For OceanBase vector database, built-in fulltext parsers are `ngram`, `beng`, `space`, `ngram2`, `ik`
|
||||||
|
# For OceanBase vector database, external fulltext parsers (require plugin installation) are `japanese_ftparser`, `thai_ftparser`
|
||||||
|
OCEANBASE_FULLTEXT_PARSER=ik
|
||||||
|
SEEKDB_MEMORY_LIMIT=2G
|
||||||
|
|
||||||
# The Qdrant endpoint URL. Only available when VECTOR_STORE is `qdrant`.
|
# The Qdrant endpoint URL. Only available when VECTOR_STORE is `qdrant`.
|
||||||
QDRANT_URL=http://qdrant:6333
|
QDRANT_URL=http://qdrant:6333
|
||||||
@@ -577,6 +672,15 @@ ORACLE_WALLET_LOCATION=/app/api/storage/wallet
|
|||||||
ORACLE_WALLET_PASSWORD=dify
|
ORACLE_WALLET_PASSWORD=dify
|
||||||
ORACLE_IS_AUTONOMOUS=false
|
ORACLE_IS_AUTONOMOUS=false
|
||||||
|
|
||||||
|
# AlibabaCloud MySQL configuration, only available when VECTOR_STORE is `alibabcloud_mysql`
|
||||||
|
ALIBABACLOUD_MYSQL_HOST=127.0.0.1
|
||||||
|
ALIBABACLOUD_MYSQL_PORT=3306
|
||||||
|
ALIBABACLOUD_MYSQL_USER=root
|
||||||
|
ALIBABACLOUD_MYSQL_PASSWORD=difyai123456
|
||||||
|
ALIBABACLOUD_MYSQL_DATABASE=dify
|
||||||
|
ALIBABACLOUD_MYSQL_MAX_CONNECTION=5
|
||||||
|
ALIBABACLOUD_MYSQL_HNSW_M=6
|
||||||
|
|
||||||
# relyt configurations, only available when VECTOR_STORE is `relyt`
|
# relyt configurations, only available when VECTOR_STORE is `relyt`
|
||||||
RELYT_HOST=db
|
RELYT_HOST=db
|
||||||
RELYT_PORT=5432
|
RELYT_PORT=5432
|
||||||
@@ -632,6 +736,8 @@ BAIDU_VECTOR_DB_API_KEY=dify
|
|||||||
BAIDU_VECTOR_DB_DATABASE=dify
|
BAIDU_VECTOR_DB_DATABASE=dify
|
||||||
BAIDU_VECTOR_DB_SHARD=1
|
BAIDU_VECTOR_DB_SHARD=1
|
||||||
BAIDU_VECTOR_DB_REPLICAS=3
|
BAIDU_VECTOR_DB_REPLICAS=3
|
||||||
|
BAIDU_VECTOR_DB_INVERTED_INDEX_ANALYZER=DEFAULT_ANALYZER
|
||||||
|
BAIDU_VECTOR_DB_INVERTED_INDEX_PARSER_MODE=COARSE_MODE
|
||||||
|
|
||||||
# VikingDB configurations, only available when VECTOR_STORE is `vikingdb`
|
# VikingDB configurations, only available when VECTOR_STORE is `vikingdb`
|
||||||
VIKINGDB_ACCESS_KEY=your-ak
|
VIKINGDB_ACCESS_KEY=your-ak
|
||||||
@@ -643,21 +749,12 @@ VIKINGDB_CONNECTION_TIMEOUT=30
|
|||||||
VIKINGDB_SOCKET_TIMEOUT=30
|
VIKINGDB_SOCKET_TIMEOUT=30
|
||||||
|
|
||||||
# Lindorm configuration, only available when VECTOR_STORE is `lindorm`
|
# Lindorm configuration, only available when VECTOR_STORE is `lindorm`
|
||||||
LINDORM_URL=http://lindorm:30070
|
LINDORM_URL=http://localhost:30070
|
||||||
LINDORM_USERNAME=lindorm
|
LINDORM_USERNAME=admin
|
||||||
LINDORM_PASSWORD=lindorm
|
LINDORM_PASSWORD=admin
|
||||||
|
LINDORM_USING_UGC=True
|
||||||
LINDORM_QUERY_TIMEOUT=1
|
LINDORM_QUERY_TIMEOUT=1
|
||||||
|
|
||||||
# OceanBase Vector configuration, only available when VECTOR_STORE is `oceanbase`
|
|
||||||
OCEANBASE_VECTOR_HOST=oceanbase
|
|
||||||
OCEANBASE_VECTOR_PORT=2881
|
|
||||||
OCEANBASE_VECTOR_USER=root@test
|
|
||||||
OCEANBASE_VECTOR_PASSWORD=difyai123456
|
|
||||||
OCEANBASE_VECTOR_DATABASE=test
|
|
||||||
OCEANBASE_CLUSTER_NAME=difyai
|
|
||||||
OCEANBASE_MEMORY_LIMIT=6G
|
|
||||||
OCEANBASE_ENABLE_HYBRID_SEARCH=false
|
|
||||||
|
|
||||||
# opengauss configurations, only available when VECTOR_STORE is `opengauss`
|
# opengauss configurations, only available when VECTOR_STORE is `opengauss`
|
||||||
OPENGAUSS_HOST=opengauss
|
OPENGAUSS_HOST=opengauss
|
||||||
OPENGAUSS_PORT=6600
|
OPENGAUSS_PORT=6600
|
||||||
@@ -699,6 +796,21 @@ CLICKZETTA_ANALYZER_TYPE=chinese
|
|||||||
CLICKZETTA_ANALYZER_MODE=smart
|
CLICKZETTA_ANALYZER_MODE=smart
|
||||||
CLICKZETTA_VECTOR_DISTANCE_FUNCTION=cosine_distance
|
CLICKZETTA_VECTOR_DISTANCE_FUNCTION=cosine_distance
|
||||||
|
|
||||||
|
# InterSystems IRIS configuration, only available when VECTOR_STORE is `iris`
|
||||||
|
IRIS_HOST=iris
|
||||||
|
IRIS_SUPER_SERVER_PORT=1972
|
||||||
|
IRIS_WEB_SERVER_PORT=52773
|
||||||
|
IRIS_USER=_SYSTEM
|
||||||
|
IRIS_PASSWORD=Dify@1234
|
||||||
|
IRIS_DATABASE=USER
|
||||||
|
IRIS_SCHEMA=dify
|
||||||
|
IRIS_CONNECTION_URL=
|
||||||
|
IRIS_MIN_CONNECTION=1
|
||||||
|
IRIS_MAX_CONNECTION=3
|
||||||
|
IRIS_TEXT_INDEX=true
|
||||||
|
IRIS_TEXT_INDEX_LANGUAGE=en
|
||||||
|
IRIS_TIMEZONE=UTC
|
||||||
|
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
# Knowledge Configuration
|
# Knowledge Configuration
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
@@ -709,6 +821,25 @@ UPLOAD_FILE_SIZE_LIMIT=15
|
|||||||
# The maximum number of files that can be uploaded at a time, default 5.
|
# The maximum number of files that can be uploaded at a time, default 5.
|
||||||
UPLOAD_FILE_BATCH_LIMIT=5
|
UPLOAD_FILE_BATCH_LIMIT=5
|
||||||
|
|
||||||
|
# Comma-separated list of file extensions blocked from upload for security reasons.
|
||||||
|
# Extensions should be lowercase without dots (e.g., exe,bat,sh,dll).
|
||||||
|
# Empty by default to allow all file types.
|
||||||
|
# Recommended: exe,bat,cmd,com,scr,vbs,ps1,msi,dll
|
||||||
|
UPLOAD_FILE_EXTENSION_BLACKLIST=
|
||||||
|
|
||||||
|
# Maximum number of files allowed in a single chunk attachment, default 10.
|
||||||
|
SINGLE_CHUNK_ATTACHMENT_LIMIT=10
|
||||||
|
|
||||||
|
# Maximum number of files allowed in a image batch upload operation
|
||||||
|
IMAGE_FILE_BATCH_LIMIT=10
|
||||||
|
|
||||||
|
# Maximum allowed image file size for attachments in megabytes, default 2.
|
||||||
|
ATTACHMENT_IMAGE_FILE_SIZE_LIMIT=2
|
||||||
|
|
||||||
|
# Timeout for downloading image attachments in seconds, default 60.
|
||||||
|
ATTACHMENT_IMAGE_DOWNLOAD_TIMEOUT=60
|
||||||
|
|
||||||
|
|
||||||
# ETL type, support: `dify`, `Unstructured`
|
# ETL type, support: `dify`, `Unstructured`
|
||||||
# `dify` Dify's proprietary file extraction scheme
|
# `dify` Dify's proprietary file extraction scheme
|
||||||
# `Unstructured` Unstructured.io file extraction scheme
|
# `Unstructured` Unstructured.io file extraction scheme
|
||||||
@@ -843,33 +974,47 @@ INVITE_EXPIRY_HOURS=72
|
|||||||
|
|
||||||
# Reset password token valid time (minutes),
|
# Reset password token valid time (minutes),
|
||||||
RESET_PASSWORD_TOKEN_EXPIRY_MINUTES=5
|
RESET_PASSWORD_TOKEN_EXPIRY_MINUTES=5
|
||||||
|
EMAIL_REGISTER_TOKEN_EXPIRY_MINUTES=5
|
||||||
CHANGE_EMAIL_TOKEN_EXPIRY_MINUTES=5
|
CHANGE_EMAIL_TOKEN_EXPIRY_MINUTES=5
|
||||||
OWNER_TRANSFER_TOKEN_EXPIRY_MINUTES=5
|
OWNER_TRANSFER_TOKEN_EXPIRY_MINUTES=5
|
||||||
|
|
||||||
# The sandbox service endpoint.
|
# The sandbox service endpoint.
|
||||||
CODE_EXECUTION_ENDPOINT=http://sandbox:8194
|
CODE_EXECUTION_ENDPOINT=http://sandbox:8194
|
||||||
CODE_EXECUTION_API_KEY=dify-sandbox
|
CODE_EXECUTION_API_KEY=dify-sandbox
|
||||||
|
CODE_EXECUTION_SSL_VERIFY=True
|
||||||
|
CODE_EXECUTION_POOL_MAX_CONNECTIONS=100
|
||||||
|
CODE_EXECUTION_POOL_MAX_KEEPALIVE_CONNECTIONS=20
|
||||||
|
CODE_EXECUTION_POOL_KEEPALIVE_EXPIRY=5.0
|
||||||
CODE_MAX_NUMBER=9223372036854775807
|
CODE_MAX_NUMBER=9223372036854775807
|
||||||
CODE_MIN_NUMBER=-9223372036854775808
|
CODE_MIN_NUMBER=-9223372036854775808
|
||||||
CODE_MAX_DEPTH=5
|
CODE_MAX_DEPTH=5
|
||||||
CODE_MAX_PRECISION=20
|
CODE_MAX_PRECISION=20
|
||||||
CODE_MAX_STRING_LENGTH=80000
|
CODE_MAX_STRING_LENGTH=400000
|
||||||
CODE_MAX_STRING_ARRAY_LENGTH=30
|
CODE_MAX_STRING_ARRAY_LENGTH=30
|
||||||
CODE_MAX_OBJECT_ARRAY_LENGTH=30
|
CODE_MAX_OBJECT_ARRAY_LENGTH=30
|
||||||
CODE_MAX_NUMBER_ARRAY_LENGTH=1000
|
CODE_MAX_NUMBER_ARRAY_LENGTH=1000
|
||||||
CODE_EXECUTION_CONNECT_TIMEOUT=10
|
CODE_EXECUTION_CONNECT_TIMEOUT=10
|
||||||
CODE_EXECUTION_READ_TIMEOUT=60
|
CODE_EXECUTION_READ_TIMEOUT=60
|
||||||
CODE_EXECUTION_WRITE_TIMEOUT=10
|
CODE_EXECUTION_WRITE_TIMEOUT=10
|
||||||
TEMPLATE_TRANSFORM_MAX_LENGTH=80000
|
TEMPLATE_TRANSFORM_MAX_LENGTH=400000
|
||||||
|
|
||||||
# Workflow runtime configuration
|
# Workflow runtime configuration
|
||||||
WORKFLOW_MAX_EXECUTION_STEPS=500
|
WORKFLOW_MAX_EXECUTION_STEPS=500
|
||||||
WORKFLOW_MAX_EXECUTION_TIME=1200
|
WORKFLOW_MAX_EXECUTION_TIME=1200
|
||||||
WORKFLOW_CALL_MAX_DEPTH=5
|
WORKFLOW_CALL_MAX_DEPTH=5
|
||||||
MAX_VARIABLE_SIZE=204800
|
MAX_VARIABLE_SIZE=204800
|
||||||
WORKFLOW_PARALLEL_DEPTH_LIMIT=3
|
|
||||||
WORKFLOW_FILE_UPLOAD_LIMIT=10
|
WORKFLOW_FILE_UPLOAD_LIMIT=10
|
||||||
|
|
||||||
|
# GraphEngine Worker Pool Configuration
|
||||||
|
# Minimum number of workers per GraphEngine instance (default: 1)
|
||||||
|
GRAPH_ENGINE_MIN_WORKERS=1
|
||||||
|
# Maximum number of workers per GraphEngine instance (default: 10)
|
||||||
|
GRAPH_ENGINE_MAX_WORKERS=10
|
||||||
|
# Queue depth threshold that triggers worker scale up (default: 3)
|
||||||
|
GRAPH_ENGINE_SCALE_UP_THRESHOLD=3
|
||||||
|
# Seconds of idle time before scaling down workers (default: 5.0)
|
||||||
|
GRAPH_ENGINE_SCALE_DOWN_IDLE_TIME=5.0
|
||||||
|
|
||||||
# Workflow storage configuration
|
# Workflow storage configuration
|
||||||
# Options: rdbms, hybrid
|
# Options: rdbms, hybrid
|
||||||
# rdbms: Use only the relational database (default)
|
# rdbms: Use only the relational database (default)
|
||||||
@@ -903,11 +1048,49 @@ WORKFLOW_LOG_RETENTION_DAYS=30
|
|||||||
# Batch size for workflow log cleanup operations (default: 100)
|
# Batch size for workflow log cleanup operations (default: 100)
|
||||||
WORKFLOW_LOG_CLEANUP_BATCH_SIZE=100
|
WORKFLOW_LOG_CLEANUP_BATCH_SIZE=100
|
||||||
|
|
||||||
|
# Aliyun SLS Logstore Configuration
|
||||||
|
# Aliyun Access Key ID
|
||||||
|
ALIYUN_SLS_ACCESS_KEY_ID=
|
||||||
|
# Aliyun Access Key Secret
|
||||||
|
ALIYUN_SLS_ACCESS_KEY_SECRET=
|
||||||
|
# Aliyun SLS Endpoint (e.g., cn-hangzhou.log.aliyuncs.com)
|
||||||
|
ALIYUN_SLS_ENDPOINT=
|
||||||
|
# Aliyun SLS Region (e.g., cn-hangzhou)
|
||||||
|
ALIYUN_SLS_REGION=
|
||||||
|
# Aliyun SLS Project Name
|
||||||
|
ALIYUN_SLS_PROJECT_NAME=
|
||||||
|
# Number of days to retain workflow run logs (default: 365 days， 3650 for permanent storage)
|
||||||
|
ALIYUN_SLS_LOGSTORE_TTL=365
|
||||||
|
# Enable dual-write to both SLS LogStore and SQL database (default: false)
|
||||||
|
LOGSTORE_DUAL_WRITE_ENABLED=false
|
||||||
|
# Enable dual-read fallback to SQL database when LogStore returns no results (default: true)
|
||||||
|
# Useful for migration scenarios where historical data exists only in SQL database
|
||||||
|
LOGSTORE_DUAL_READ_ENABLED=true
|
||||||
|
|
||||||
# HTTP request node in workflow configuration
|
# HTTP request node in workflow configuration
|
||||||
HTTP_REQUEST_NODE_MAX_BINARY_SIZE=10485760
|
HTTP_REQUEST_NODE_MAX_BINARY_SIZE=10485760
|
||||||
HTTP_REQUEST_NODE_MAX_TEXT_SIZE=1048576
|
HTTP_REQUEST_NODE_MAX_TEXT_SIZE=1048576
|
||||||
HTTP_REQUEST_NODE_SSL_VERIFY=True
|
HTTP_REQUEST_NODE_SSL_VERIFY=True
|
||||||
|
|
||||||
|
# HTTP request node timeout configuration
|
||||||
|
# Maximum timeout values (in seconds) that users can set in HTTP request nodes
|
||||||
|
# - Connect timeout: Time to wait for establishing connection (default: 10s)
|
||||||
|
# - Read timeout: Time to wait for receiving response data (default: 600s, 10 minutes)
|
||||||
|
# - Write timeout: Time to wait for sending request data (default: 600s, 10 minutes)
|
||||||
|
HTTP_REQUEST_MAX_CONNECT_TIMEOUT=10
|
||||||
|
HTTP_REQUEST_MAX_READ_TIMEOUT=600
|
||||||
|
HTTP_REQUEST_MAX_WRITE_TIMEOUT=600
|
||||||
|
|
||||||
|
# Base64 encoded CA certificate data for custom certificate verification (PEM format, optional)
|
||||||
|
# HTTP_REQUEST_NODE_SSL_CERT_DATA=LS0tLS1CRUdJTi...
|
||||||
|
# Base64 encoded client certificate data for mutual TLS authentication (PEM format, optional)
|
||||||
|
# HTTP_REQUEST_NODE_SSL_CLIENT_CERT_DATA=LS0tLS1CRUdJTi...
|
||||||
|
# Base64 encoded client private key data for mutual TLS authentication (PEM format, optional)
|
||||||
|
# HTTP_REQUEST_NODE_SSL_CLIENT_KEY_DATA=LS0tLS1CRUdJTi...
|
||||||
|
|
||||||
|
# Webhook request configuration
|
||||||
|
WEBHOOK_REQUEST_BODY_MAX_SIZE=10485760
|
||||||
|
|
||||||
# Respect X-* headers to redirect clients
|
# Respect X-* headers to redirect clients
|
||||||
RESPECT_XFORWARD_HEADERS_ENABLED=false
|
RESPECT_XFORWARD_HEADERS_ENABLED=false
|
||||||
|
|
||||||
@@ -942,18 +1125,14 @@ ALLOW_UNSAFE_DATA_SCHEME=false
|
|||||||
MAX_TREE_DEPTH=50
|
MAX_TREE_DEPTH=50
|
||||||
|
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
# Environment Variables for db Service
|
# Environment Variables for database Service
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
|
# Postgres data directory
|
||||||
# The name of the default postgres user.
|
|
||||||
POSTGRES_USER=${DB_USERNAME}
|
|
||||||
# The password for the default postgres user.
|
|
||||||
POSTGRES_PASSWORD=${DB_PASSWORD}
|
|
||||||
# The name of the default postgres database.
|
|
||||||
POSTGRES_DB=${DB_DATABASE}
|
|
||||||
# postgres data directory
|
|
||||||
PGDATA=/var/lib/postgresql/data/pgdata
|
PGDATA=/var/lib/postgresql/data/pgdata
|
||||||
|
|
||||||
|
# MySQL Default Configuration
|
||||||
|
MYSQL_HOST_VOLUME=./volumes/mysql/data
|
||||||
|
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
# Environment Variables for sandbox Service
|
# Environment Variables for sandbox Service
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
@@ -987,6 +1166,10 @@ WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih
|
|||||||
WEAVIATE_AUTHENTICATION_APIKEY_USERS=hello@dify.ai
|
WEAVIATE_AUTHENTICATION_APIKEY_USERS=hello@dify.ai
|
||||||
WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED=true
|
WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED=true
|
||||||
WEAVIATE_AUTHORIZATION_ADMINLIST_USERS=hello@dify.ai
|
WEAVIATE_AUTHORIZATION_ADMINLIST_USERS=hello@dify.ai
|
||||||
|
WEAVIATE_DISABLE_TELEMETRY=false
|
||||||
|
WEAVIATE_ENABLE_TOKENIZER_GSE=false
|
||||||
|
WEAVIATE_ENABLE_TOKENIZER_KAGOME_JA=false
|
||||||
|
WEAVIATE_ENABLE_TOKENIZER_KAGOME_KR=false
|
||||||
|
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
# Environment Variables for Chroma
|
# Environment Variables for Chroma
|
||||||
@@ -1069,7 +1252,7 @@ NGINX_SSL_PORT=443
|
|||||||
# and modify the env vars below accordingly.
|
# and modify the env vars below accordingly.
|
||||||
NGINX_SSL_CERT_FILENAME=dify.crt
|
NGINX_SSL_CERT_FILENAME=dify.crt
|
||||||
NGINX_SSL_CERT_KEY_FILENAME=dify.key
|
NGINX_SSL_CERT_KEY_FILENAME=dify.key
|
||||||
NGINX_SSL_PROTOCOLS=TLSv1.1 TLSv1.2 TLSv1.3
|
NGINX_SSL_PROTOCOLS=TLSv1.2 TLSv1.3
|
||||||
|
|
||||||
# Nginx performance tuning
|
# Nginx performance tuning
|
||||||
NGINX_WORKER_PROCESSES=auto
|
NGINX_WORKER_PROCESSES=auto
|
||||||
@@ -1108,14 +1291,17 @@ SSRF_DEFAULT_TIME_OUT=5
|
|||||||
SSRF_DEFAULT_CONNECT_TIME_OUT=5
|
SSRF_DEFAULT_CONNECT_TIME_OUT=5
|
||||||
SSRF_DEFAULT_READ_TIME_OUT=5
|
SSRF_DEFAULT_READ_TIME_OUT=5
|
||||||
SSRF_DEFAULT_WRITE_TIME_OUT=5
|
SSRF_DEFAULT_WRITE_TIME_OUT=5
|
||||||
|
SSRF_POOL_MAX_CONNECTIONS=100
|
||||||
|
SSRF_POOL_MAX_KEEPALIVE_CONNECTIONS=20
|
||||||
|
SSRF_POOL_KEEPALIVE_EXPIRY=5.0
|
||||||
|
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
# docker env var for specifying vector db type at startup
|
# docker env var for specifying vector db and metadata db type at startup
|
||||||
# (based on the vector db type, the corresponding docker
|
# (based on the vector db and metadata db type, the corresponding docker
|
||||||
# compose profile will be used)
|
# compose profile will be used)
|
||||||
# if you want to use unstructured, add ',unstructured' to the end
|
# if you want to use unstructured, add ',unstructured' to the end
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
COMPOSE_PROFILES=${VECTOR_STORE:-weaviate}
|
COMPOSE_PROFILES=${VECTOR_STORE:-weaviate},${DB_TYPE:-postgresql}
|
||||||
|
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
# Docker Compose Service Expose Host Port Configurations
|
# Docker Compose Service Expose Host Port Configurations
|
||||||
@@ -1181,12 +1367,16 @@ MARKETPLACE_ENABLED=true
|
|||||||
MARKETPLACE_API_URL=https://marketplace.dify.ai
|
MARKETPLACE_API_URL=https://marketplace.dify.ai
|
||||||
|
|
||||||
FORCE_VERIFYING_SIGNATURE=true
|
FORCE_VERIFYING_SIGNATURE=true
|
||||||
|
ENFORCE_LANGGENIUS_PLUGIN_SIGNATURES=true
|
||||||
|
|
||||||
PLUGIN_STDIO_BUFFER_SIZE=1024
|
PLUGIN_STDIO_BUFFER_SIZE=1024
|
||||||
PLUGIN_STDIO_MAX_BUFFER_SIZE=5242880
|
PLUGIN_STDIO_MAX_BUFFER_SIZE=5242880
|
||||||
|
|
||||||
PLUGIN_PYTHON_ENV_INIT_TIMEOUT=120
|
PLUGIN_PYTHON_ENV_INIT_TIMEOUT=120
|
||||||
|
# Plugin Daemon side timeout (configure to match the API side below)
|
||||||
PLUGIN_MAX_EXECUTION_TIMEOUT=600
|
PLUGIN_MAX_EXECUTION_TIMEOUT=600
|
||||||
|
# API side timeout (configure to match the Plugin Daemon side above)
|
||||||
|
PLUGIN_DAEMON_TIMEOUT=600.0
|
||||||
# PIP_MIRROR_URL=https://pypi.tuna.tsinghua.edu.cn/simple
|
# PIP_MIRROR_URL=https://pypi.tuna.tsinghua.edu.cn/simple
|
||||||
PIP_MIRROR_URL=
|
PIP_MIRROR_URL=
|
||||||
|
|
||||||
@@ -1257,9 +1447,16 @@ QUEUE_MONITOR_ALERT_EMAILS=
|
|||||||
QUEUE_MONITOR_INTERVAL=30
|
QUEUE_MONITOR_INTERVAL=30
|
||||||
|
|
||||||
# Swagger UI configuration
|
# Swagger UI configuration
|
||||||
SWAGGER_UI_ENABLED=true
|
SWAGGER_UI_ENABLED=false
|
||||||
SWAGGER_UI_PATH=/swagger-ui.html
|
SWAGGER_UI_PATH=/swagger-ui.html
|
||||||
|
|
||||||
|
# Whether to encrypt dataset IDs when exporting DSL files (default: true)
|
||||||
|
# Set to false to export dataset IDs as plain text for easier cross-environment import
|
||||||
|
DSL_EXPORT_ENCRYPT_DATASET_ID=true
|
||||||
|
|
||||||
|
# Maximum number of segments for dataset segments API (0 for unlimited)
|
||||||
|
DATASET_MAX_SEGMENTS_PER_REQUEST=0
|
||||||
|
|
||||||
# Celery schedule tasks configuration
|
# Celery schedule tasks configuration
|
||||||
ENABLE_CLEAN_EMBEDDING_CACHE_TASK=false
|
ENABLE_CLEAN_EMBEDDING_CACHE_TASK=false
|
||||||
ENABLE_CLEAN_UNUSED_DATASETS_TASK=false
|
ENABLE_CLEAN_UNUSED_DATASETS_TASK=false
|
||||||
@@ -1269,3 +1466,29 @@ ENABLE_CLEAN_MESSAGES=false
|
|||||||
ENABLE_MAIL_CLEAN_DOCUMENT_NOTIFY_TASK=false
|
ENABLE_MAIL_CLEAN_DOCUMENT_NOTIFY_TASK=false
|
||||||
ENABLE_DATASETS_QUEUE_MONITOR=false
|
ENABLE_DATASETS_QUEUE_MONITOR=false
|
||||||
ENABLE_CHECK_UPGRADABLE_PLUGIN_TASK=true
|
ENABLE_CHECK_UPGRADABLE_PLUGIN_TASK=true
|
||||||
|
ENABLE_WORKFLOW_SCHEDULE_POLLER_TASK=true
|
||||||
|
WORKFLOW_SCHEDULE_POLLER_INTERVAL=1
|
||||||
|
WORKFLOW_SCHEDULE_POLLER_BATCH_SIZE=100
|
||||||
|
WORKFLOW_SCHEDULE_MAX_DISPATCH_PER_TICK=0
|
||||||
|
|
||||||
|
# Tenant isolated task queue configuration
|
||||||
|
TENANT_ISOLATED_TASK_CONCURRENCY=1
|
||||||
|
|
||||||
|
# Maximum allowed CSV file size for annotation import in megabytes
|
||||||
|
ANNOTATION_IMPORT_FILE_SIZE_LIMIT=2
|
||||||
|
#Maximum number of annotation records allowed in a single import
|
||||||
|
ANNOTATION_IMPORT_MAX_RECORDS=10000
|
||||||
|
# Minimum number of annotation records required in a single import
|
||||||
|
ANNOTATION_IMPORT_MIN_RECORDS=1
|
||||||
|
ANNOTATION_IMPORT_RATE_LIMIT_PER_MINUTE=5
|
||||||
|
ANNOTATION_IMPORT_RATE_LIMIT_PER_HOUR=20
|
||||||
|
# Maximum number of concurrent annotation import tasks per tenant
|
||||||
|
ANNOTATION_IMPORT_MAX_CONCURRENT=5
|
||||||
|
|
||||||
|
# The API key of amplitude
|
||||||
|
AMPLITUDE_API_KEY=
|
||||||
|
|
||||||
|
# Sandbox expired records clean configuration
|
||||||
|
SANDBOX_EXPIRED_RECORDS_CLEAN_GRACEFUL_PERIOD=21
|
||||||
|
SANDBOX_EXPIRED_RECORDS_CLEAN_BATCH_SIZE=1000
|
||||||
|
SANDBOX_EXPIRED_RECORDS_RETENTION_DAYS=30
|
||||||
|
|||||||
+48
-1
@@ -23,6 +23,10 @@ Welcome to the new `docker` directory for deploying Dify using Docker Compose. T
|
|||||||
- Navigate to the `docker` directory.
|
- Navigate to the `docker` directory.
|
||||||
- Copy the `.env.example` file to a new file named `.env` by running `cp .env.example .env`.
|
- Copy the `.env.example` file to a new file named `.env` by running `cp .env.example .env`.
|
||||||
- Customize the `.env` file as needed. Refer to the `.env.example` file for detailed configuration options.
|
- Customize the `.env` file as needed. Refer to the `.env.example` file for detailed configuration options.
|
||||||
|
- **Optional (Recommended for upgrades)**:
|
||||||
|
You may use the environment synchronization tool to help keep your `.env` file aligned with the latest `.env.example` updates, while preserving your custom settings.
|
||||||
|
This is especially useful when upgrading Dify or managing a large, customized `.env` file.
|
||||||
|
See the [Environment Variables Synchronization](#environment-variables-synchronization) section below.
|
||||||
1. **Running the Services**:
|
1. **Running the Services**:
|
||||||
- Execute `docker compose up` from the `docker` directory to start the services.
|
- Execute `docker compose up` from the `docker` directory to start the services.
|
||||||
- To specify a vector database, set the `VECTOR_STORE` variable in your `.env` file to your desired vector database service, such as `milvus`, `weaviate`, or `opensearch`.
|
- To specify a vector database, set the `VECTOR_STORE` variable in your `.env` file to your desired vector database service, such as `milvus`, `weaviate`, or `opensearch`.
|
||||||
@@ -40,7 +44,9 @@ Welcome to the new `docker` directory for deploying Dify using Docker Compose. T
|
|||||||
- Ensure the `middleware.env` file is created by running `cp middleware.env.example middleware.env` (refer to the `middleware.env.example` file).
|
- Ensure the `middleware.env` file is created by running `cp middleware.env.example middleware.env` (refer to the `middleware.env.example` file).
|
||||||
1. **Running Middleware Services**:
|
1. **Running Middleware Services**:
|
||||||
- Navigate to the `docker` directory.
|
- Navigate to the `docker` directory.
|
||||||
- Execute `docker compose -f docker-compose.middleware.yaml --profile weaviate -p dify up -d` to start the middleware services. (Change the profile to other vector database if you are not using weaviate)
|
- Execute `docker compose --env-file middleware.env -f docker-compose.middleware.yaml -p dify up -d` to start PostgreSQL/MySQL (per `DB_TYPE`) plus the bundled Weaviate instance.
|
||||||
|
|
||||||
|
> Compose automatically loads `COMPOSE_PROFILES=${DB_TYPE:-postgresql},weaviate` from `middleware.env`, so no extra `--profile` flags are needed. Adjust variables in `middleware.env` if you want a different combination of services.
|
||||||
|
|
||||||
### Migration for Existing Users
|
### Migration for Existing Users
|
||||||
|
|
||||||
@@ -109,6 +115,47 @@ The `.env.example` file provided in the Docker setup is extensive and covers a w
|
|||||||
|
|
||||||
- Each service like `nginx`, `redis`, `db`, and vector databases have specific environment variables that are directly referenced in the `docker-compose.yaml`.
|
- Each service like `nginx`, `redis`, `db`, and vector databases have specific environment variables that are directly referenced in the `docker-compose.yaml`.
|
||||||
|
|
||||||
|
### Environment Variables Synchronization
|
||||||
|
|
||||||
|
When upgrading Dify or pulling the latest changes, new environment variables may be introduced in `.env.example`.
|
||||||
|
|
||||||
|
To help keep your existing `.env` file up to date **without losing your custom values**, an optional environment variables synchronization tool is provided.
|
||||||
|
|
||||||
|
> This tool performs a **one-way synchronization** from `.env.example` to `.env`.
|
||||||
|
> Existing values in `.env` are never overwritten automatically.
|
||||||
|
|
||||||
|
#### `dify-env-sync.sh` (Optional)
|
||||||
|
|
||||||
|
This script compares your current `.env` file with the latest `.env.example` template and helps safely apply new or updated environment variables.
|
||||||
|
|
||||||
|
**What it does**
|
||||||
|
|
||||||
|
- Creates a backup of the current `.env` file before making any changes
|
||||||
|
- Synchronizes newly added environment variables from `.env.example`
|
||||||
|
- Preserves all existing custom values in `.env`
|
||||||
|
- Displays differences and variables removed from `.env.example` for review
|
||||||
|
|
||||||
|
**Backup behavior**
|
||||||
|
|
||||||
|
Before synchronization, the current `.env` file is saved to the `env-backup/` directory with a timestamped filename
|
||||||
|
(e.g. `env-backup/.env.backup_20231218_143022`).
|
||||||
|
|
||||||
|
**When to use**
|
||||||
|
|
||||||
|
- After upgrading Dify to a newer version
|
||||||
|
- When `.env.example` has been updated with new environment variables
|
||||||
|
- When managing a large or heavily customized `.env` file
|
||||||
|
|
||||||
|
**Usage**
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Grant execution permission (first time only)
|
||||||
|
chmod +x dify-env-sync.sh
|
||||||
|
|
||||||
|
# Run the synchronization
|
||||||
|
./dify-env-sync.sh
|
||||||
|
```
|
||||||
|
|
||||||
### Additional Information
|
### Additional Information
|
||||||
|
|
||||||
- **Continuous Improvement Phase**: We are actively seeking feedback from the community to refine and enhance the deployment process. As more users adopt this new method, we will continue to make improvements based on your experiences and suggestions.
|
- **Continuous Improvement Phase**: We are actively seeking feedback from the community to refine and enhance the deployment process. As more users adopt this new method, we will continue to make improvements based on your experiences and suggestions.
|
||||||
|
|||||||
Executable
+465
@@ -0,0 +1,465 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# ================================================================
|
||||||
|
# Dify Environment Variables Synchronization Script
|
||||||
|
#
|
||||||
|
# Features:
|
||||||
|
# - Synchronize latest settings from .env.example to .env
|
||||||
|
# - Preserve custom settings in existing .env
|
||||||
|
# - Add new environment variables
|
||||||
|
# - Detect removed environment variables
|
||||||
|
# - Create backup files
|
||||||
|
# ================================================================
|
||||||
|
|
||||||
|
set -eo pipefail # Exit on error and pipe failures (safer for complex variable handling)
|
||||||
|
|
||||||
|
# Error handling function
|
||||||
|
# Arguments:
|
||||||
|
# $1 - Line number where error occurred
|
||||||
|
# $2 - Error code
|
||||||
|
handle_error() {
|
||||||
|
local line_no=$1
|
||||||
|
local error_code=$2
|
||||||
|
echo -e "\033[0;31m[ERROR]\033[0m Script error: line $line_no with error code $error_code" >&2
|
||||||
|
echo -e "\033[0;31m[ERROR]\033[0m Debug info: current working directory $(pwd)" >&2
|
||||||
|
exit $error_code
|
||||||
|
}
|
||||||
|
|
||||||
|
# Set error trap
|
||||||
|
trap 'handle_error ${LINENO} $?' ERR
|
||||||
|
|
||||||
|
# Color settings for output
|
||||||
|
readonly RED='\033[0;31m'
|
||||||
|
readonly GREEN='\033[0;32m'
|
||||||
|
readonly YELLOW='\033[1;33m'
|
||||||
|
readonly BLUE='\033[0;34m'
|
||||||
|
readonly NC='\033[0m' # No Color
|
||||||
|
|
||||||
|
# Logging functions
|
||||||
|
# Print informational message in blue
|
||||||
|
# Arguments: $1 - Message to print
|
||||||
|
log_info() {
|
||||||
|
echo -e "${BLUE}[INFO]${NC} $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Print success message in green
|
||||||
|
# Arguments: $1 - Message to print
|
||||||
|
log_success() {
|
||||||
|
echo -e "${GREEN}[SUCCESS]${NC} $1"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Print warning message in yellow
|
||||||
|
# Arguments: $1 - Message to print
|
||||||
|
log_warning() {
|
||||||
|
echo -e "${YELLOW}[WARNING]${NC} $1" >&2
|
||||||
|
}
|
||||||
|
|
||||||
|
# Print error message in red to stderr
|
||||||
|
# Arguments: $1 - Message to print
|
||||||
|
log_error() {
|
||||||
|
echo -e "${RED}[ERROR]${NC} $1" >&2
|
||||||
|
}
|
||||||
|
|
||||||
|
# Check for required files and create .env if missing
|
||||||
|
# Verifies that .env.example exists and creates .env from template if needed
|
||||||
|
check_files() {
|
||||||
|
log_info "Checking required files..."
|
||||||
|
|
||||||
|
if [[ ! -f ".env.example" ]]; then
|
||||||
|
log_error ".env.example file not found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ ! -f ".env" ]]; then
|
||||||
|
log_warning ".env file does not exist. Creating from .env.example."
|
||||||
|
cp ".env.example" ".env"
|
||||||
|
log_success ".env file created"
|
||||||
|
fi
|
||||||
|
|
||||||
|
log_success "Required files verified"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Create timestamped backup of .env file
|
||||||
|
# Creates env-backup directory if needed and backs up current .env file
|
||||||
|
create_backup() {
|
||||||
|
local timestamp=$(date +"%Y%m%d_%H%M%S")
|
||||||
|
local backup_dir="env-backup"
|
||||||
|
|
||||||
|
# Create backup directory if it doesn't exist
|
||||||
|
if [[ ! -d "$backup_dir" ]]; then
|
||||||
|
mkdir -p "$backup_dir"
|
||||||
|
log_info "Created backup directory: $backup_dir"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ -f ".env" ]]; then
|
||||||
|
local backup_file="${backup_dir}/.env.backup_${timestamp}"
|
||||||
|
cp ".env" "$backup_file"
|
||||||
|
log_success "Backed up existing .env to $backup_file"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Detect differences between .env and .env.example (optimized for large files)
|
||||||
|
detect_differences() {
|
||||||
|
log_info "Detecting differences between .env and .env.example..."
|
||||||
|
|
||||||
|
# Create secure temporary directory
|
||||||
|
local temp_dir=$(mktemp -d)
|
||||||
|
local temp_diff="$temp_dir/env_diff"
|
||||||
|
|
||||||
|
# Store diff file path as global variable
|
||||||
|
declare -g DIFF_FILE="$temp_diff"
|
||||||
|
declare -g TEMP_DIR="$temp_dir"
|
||||||
|
|
||||||
|
# Initialize difference file
|
||||||
|
> "$temp_diff"
|
||||||
|
|
||||||
|
# Use awk for efficient comparison (much faster for large files)
|
||||||
|
local diff_count=$(awk -F= '
|
||||||
|
BEGIN { OFS="\x01" }
|
||||||
|
FNR==NR {
|
||||||
|
if (!/^[[:space:]]*#/ && !/^[[:space:]]*$/ && /=/) {
|
||||||
|
gsub(/^[[:space:]]+|[[:space:]]+$/, "", $1)
|
||||||
|
key = $1
|
||||||
|
value = substr($0, index($0,"=")+1)
|
||||||
|
gsub(/^[[:space:]]+|[[:space:]]+$/, "", value)
|
||||||
|
env_values[key] = value
|
||||||
|
}
|
||||||
|
next
|
||||||
|
}
|
||||||
|
{
|
||||||
|
if (!/^[[:space:]]*#/ && !/^[[:space:]]*$/ && /=/) {
|
||||||
|
gsub(/^[[:space:]]+|[[:space:]]+$/, "", $1)
|
||||||
|
key = $1
|
||||||
|
example_value = substr($0, index($0,"=")+1)
|
||||||
|
gsub(/^[[:space:]]+|[[:space:]]+$/, "", example_value)
|
||||||
|
|
||||||
|
if (key in env_values && env_values[key] != example_value) {
|
||||||
|
print key, env_values[key], example_value > "'$temp_diff'"
|
||||||
|
diff_count++
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
END { print diff_count }
|
||||||
|
' .env .env.example)
|
||||||
|
|
||||||
|
if [[ $diff_count -gt 0 ]]; then
|
||||||
|
log_success "Detected differences in $diff_count environment variables"
|
||||||
|
# Show detailed differences
|
||||||
|
show_differences_detail
|
||||||
|
else
|
||||||
|
log_info "No differences detected"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Parse environment variable line
|
||||||
|
# Extracts key-value pairs from .env file format lines
|
||||||
|
# Arguments:
|
||||||
|
# $1 - Line to parse
|
||||||
|
# Returns:
|
||||||
|
# 0 - Success, outputs "key|value" format
|
||||||
|
# 1 - Skip (empty line, comment, or invalid format)
|
||||||
|
parse_env_line() {
|
||||||
|
local line="$1"
|
||||||
|
local key=""
|
||||||
|
local value=""
|
||||||
|
|
||||||
|
# Skip empty lines or comment lines
|
||||||
|
[[ -z "$line" || "$line" =~ ^[[:space:]]*# ]] && return 1
|
||||||
|
|
||||||
|
# Split by =
|
||||||
|
if [[ "$line" =~ ^([^=]+)=(.*)$ ]]; then
|
||||||
|
key="${BASH_REMATCH[1]}"
|
||||||
|
value="${BASH_REMATCH[2]}"
|
||||||
|
|
||||||
|
# Remove leading and trailing whitespace
|
||||||
|
key=$(echo "$key" | sed 's/^[[:space:]]*//; s/[[:space:]]*$//')
|
||||||
|
value=$(echo "$value" | sed 's/^[[:space:]]*//; s/[[:space:]]*$//')
|
||||||
|
|
||||||
|
if [[ -n "$key" ]]; then
|
||||||
|
echo "$key|$value"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
# Show detailed differences
|
||||||
|
show_differences_detail() {
|
||||||
|
log_info ""
|
||||||
|
log_info "=== Environment Variable Differences ==="
|
||||||
|
|
||||||
|
# Read differences from the already created diff file
|
||||||
|
if [[ ! -s "$DIFF_FILE" ]]; then
|
||||||
|
log_info "No differences to display"
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Display differences
|
||||||
|
local count=1
|
||||||
|
while IFS=$'\x01' read -r key env_value example_value; do
|
||||||
|
echo ""
|
||||||
|
echo -e "${YELLOW}[$count] $key${NC}"
|
||||||
|
echo -e " ${GREEN}.env (current)${NC} : ${env_value}"
|
||||||
|
echo -e " ${BLUE}.env.example (recommended)${NC}: ${example_value}"
|
||||||
|
|
||||||
|
# Analyze value changes
|
||||||
|
analyze_value_change "$env_value" "$example_value"
|
||||||
|
((count++))
|
||||||
|
done < "$DIFF_FILE"
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
log_info "=== Difference Analysis Complete ==="
|
||||||
|
log_info "Note: Consider changing to the recommended values above."
|
||||||
|
log_info "Current implementation preserves .env values."
|
||||||
|
echo ""
|
||||||
|
}
|
||||||
|
|
||||||
|
# Analyze value changes
|
||||||
|
analyze_value_change() {
|
||||||
|
local current_value="$1"
|
||||||
|
local recommended_value="$2"
|
||||||
|
|
||||||
|
# Analyze value characteristics
|
||||||
|
local analysis=""
|
||||||
|
|
||||||
|
# Empty value check
|
||||||
|
if [[ -z "$current_value" && -n "$recommended_value" ]]; then
|
||||||
|
analysis=" ${RED}→ Setting from empty to recommended value${NC}"
|
||||||
|
elif [[ -n "$current_value" && -z "$recommended_value" ]]; then
|
||||||
|
analysis=" ${RED}→ Recommended value changed to empty${NC}"
|
||||||
|
# Numeric check - using arithmetic evaluation for robust comparison
|
||||||
|
elif [[ "$current_value" =~ ^[0-9]+$ && "$recommended_value" =~ ^[0-9]+$ ]]; then
|
||||||
|
# Use arithmetic evaluation to handle leading zeros correctly
|
||||||
|
if (( 10#$current_value < 10#$recommended_value )); then
|
||||||
|
analysis=" ${BLUE}→ Numeric increase (${current_value} < ${recommended_value})${NC}"
|
||||||
|
elif (( 10#$current_value > 10#$recommended_value )); then
|
||||||
|
analysis=" ${YELLOW}→ Numeric decrease (${current_value} > ${recommended_value})${NC}"
|
||||||
|
fi
|
||||||
|
# Boolean check
|
||||||
|
elif [[ "$current_value" =~ ^(true|false)$ && "$recommended_value" =~ ^(true|false)$ ]]; then
|
||||||
|
if [[ "$current_value" != "$recommended_value" ]]; then
|
||||||
|
analysis=" ${BLUE}→ Boolean value change (${current_value} → ${recommended_value})${NC}"
|
||||||
|
fi
|
||||||
|
# URL/endpoint check
|
||||||
|
elif [[ "$current_value" =~ ^https?:// || "$recommended_value" =~ ^https?:// ]]; then
|
||||||
|
analysis=" ${BLUE}→ URL/endpoint change${NC}"
|
||||||
|
# File path check
|
||||||
|
elif [[ "$current_value" =~ ^/ || "$recommended_value" =~ ^/ ]]; then
|
||||||
|
analysis=" ${BLUE}→ File path change${NC}"
|
||||||
|
else
|
||||||
|
# Length comparison
|
||||||
|
local current_len=${#current_value}
|
||||||
|
local recommended_len=${#recommended_value}
|
||||||
|
if [[ $current_len -ne $recommended_len ]]; then
|
||||||
|
analysis=" ${YELLOW}→ String length change (${current_len} → ${recommended_len} characters)${NC}"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ -n "$analysis" ]]; then
|
||||||
|
echo -e "$analysis"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Synchronize .env file with .env.example while preserving custom values
|
||||||
|
# Creates a new .env file based on .env.example structure, preserving existing custom values
|
||||||
|
# Global variables used: DIFF_FILE, TEMP_DIR
|
||||||
|
sync_env_file() {
|
||||||
|
log_info "Starting partial synchronization of .env file..."
|
||||||
|
|
||||||
|
local new_env_file=".env.new"
|
||||||
|
local preserved_count=0
|
||||||
|
local updated_count=0
|
||||||
|
|
||||||
|
# Pre-process diff file for efficient lookup
|
||||||
|
local lookup_file=""
|
||||||
|
if [[ -f "$DIFF_FILE" && -s "$DIFF_FILE" ]]; then
|
||||||
|
lookup_file="${DIFF_FILE}.lookup"
|
||||||
|
# Create sorted lookup file for fast search
|
||||||
|
sort "$DIFF_FILE" > "$lookup_file"
|
||||||
|
log_info "Created lookup file for $(wc -l < "$DIFF_FILE") preserved values"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Use AWK for efficient processing (much faster than bash loop for large files)
|
||||||
|
log_info "Processing $(wc -l < .env.example) lines with AWK..."
|
||||||
|
|
||||||
|
local preserved_keys_file="${TEMP_DIR}/preserved_keys"
|
||||||
|
local awk_preserved_count_file="${TEMP_DIR}/awk_preserved_count"
|
||||||
|
local awk_updated_count_file="${TEMP_DIR}/awk_updated_count"
|
||||||
|
|
||||||
|
awk -F'=' -v lookup_file="$lookup_file" -v preserved_file="$preserved_keys_file" \
|
||||||
|
-v preserved_count_file="$awk_preserved_count_file" -v updated_count_file="$awk_updated_count_file" '
|
||||||
|
BEGIN {
|
||||||
|
preserved_count = 0
|
||||||
|
updated_count = 0
|
||||||
|
|
||||||
|
# Load preserved values if lookup file exists
|
||||||
|
if (lookup_file != "") {
|
||||||
|
while ((getline line < lookup_file) > 0) {
|
||||||
|
split(line, parts, "\x01")
|
||||||
|
key = parts[1]
|
||||||
|
value = parts[2]
|
||||||
|
preserved_values[key] = value
|
||||||
|
}
|
||||||
|
close(lookup_file)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
# Process each line
|
||||||
|
{
|
||||||
|
# Check if this is an environment variable line
|
||||||
|
if (/^[[:space:]]*[A-Za-z_][A-Za-z0-9_]*[[:space:]]*=/) {
|
||||||
|
# Extract key
|
||||||
|
key = $1
|
||||||
|
gsub(/^[[:space:]]+|[[:space:]]+$/, "", key)
|
||||||
|
|
||||||
|
# Check if key should be preserved
|
||||||
|
if (key in preserved_values) {
|
||||||
|
print key "=" preserved_values[key]
|
||||||
|
print key > preserved_file
|
||||||
|
preserved_count++
|
||||||
|
} else {
|
||||||
|
print $0
|
||||||
|
updated_count++
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
# Not an env var line, preserve as-is
|
||||||
|
print $0
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
END {
|
||||||
|
print preserved_count > preserved_count_file
|
||||||
|
print updated_count > updated_count_file
|
||||||
|
}
|
||||||
|
' .env.example > "$new_env_file"
|
||||||
|
|
||||||
|
# Read counters and preserved keys
|
||||||
|
if [[ -f "$awk_preserved_count_file" ]]; then
|
||||||
|
preserved_count=$(cat "$awk_preserved_count_file")
|
||||||
|
fi
|
||||||
|
if [[ -f "$awk_updated_count_file" ]]; then
|
||||||
|
updated_count=$(cat "$awk_updated_count_file")
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Show what was preserved
|
||||||
|
if [[ -f "$preserved_keys_file" ]]; then
|
||||||
|
while read -r key; do
|
||||||
|
[[ -n "$key" ]] && log_info " Preserved: $key (.env value)"
|
||||||
|
done < "$preserved_keys_file"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Clean up lookup file
|
||||||
|
[[ -n "$lookup_file" ]] && rm -f "$lookup_file"
|
||||||
|
|
||||||
|
# Replace the original .env file
|
||||||
|
if mv "$new_env_file" ".env"; then
|
||||||
|
log_success "Successfully created new .env file"
|
||||||
|
else
|
||||||
|
log_error "Failed to replace .env file"
|
||||||
|
rm -f "$new_env_file"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Clean up difference file and temporary directory
|
||||||
|
if [[ -n "${TEMP_DIR:-}" ]]; then
|
||||||
|
rm -rf "${TEMP_DIR}"
|
||||||
|
unset TEMP_DIR
|
||||||
|
fi
|
||||||
|
if [[ -n "${DIFF_FILE:-}" ]]; then
|
||||||
|
unset DIFF_FILE
|
||||||
|
fi
|
||||||
|
|
||||||
|
log_success "Partial synchronization of .env file completed"
|
||||||
|
log_info " Preserved .env values: $preserved_count"
|
||||||
|
log_info " Updated to .env.example values: $updated_count"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Detect removed environment variables
|
||||||
|
detect_removed_variables() {
|
||||||
|
log_info "Detecting removed environment variables..."
|
||||||
|
|
||||||
|
if [[ ! -f ".env" ]]; then
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Use temporary files for efficient lookup
|
||||||
|
local temp_dir="${TEMP_DIR:-$(mktemp -d)}"
|
||||||
|
local temp_example_keys="$temp_dir/example_keys"
|
||||||
|
local temp_current_keys="$temp_dir/current_keys"
|
||||||
|
local cleanup_temp_dir=""
|
||||||
|
|
||||||
|
# Set flag if we created a new temp directory
|
||||||
|
if [[ -z "${TEMP_DIR:-}" ]]; then
|
||||||
|
cleanup_temp_dir="$temp_dir"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Get keys from .env.example and .env, sorted for comm
|
||||||
|
awk -F= '!/^[[:space:]]*#/ && /=/ {gsub(/^[[:space:]]+|[[:space:]]+$/, "", $1); print $1}' .env.example | sort > "$temp_example_keys"
|
||||||
|
awk -F= '!/^[[:space:]]*#/ && /=/ {gsub(/^[[:space:]]+|[[:space:]]+$/, "", $1); print $1}' .env | sort > "$temp_current_keys"
|
||||||
|
|
||||||
|
# Get keys from existing .env and check for removals
|
||||||
|
local removed_vars=()
|
||||||
|
while IFS= read -r var; do
|
||||||
|
removed_vars+=("$var")
|
||||||
|
done < <(comm -13 "$temp_example_keys" "$temp_current_keys")
|
||||||
|
|
||||||
|
# Clean up temporary files if we created a new temp directory
|
||||||
|
if [[ -n "$cleanup_temp_dir" ]]; then
|
||||||
|
rm -rf "$cleanup_temp_dir"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ ${#removed_vars[@]} -gt 0 ]]; then
|
||||||
|
log_warning "The following environment variables have been removed from .env.example:"
|
||||||
|
for var in "${removed_vars[@]}"; do
|
||||||
|
log_warning " - $var"
|
||||||
|
done
|
||||||
|
log_warning "Consider manually removing these variables from .env"
|
||||||
|
else
|
||||||
|
log_success "No removed environment variables found"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Show statistics
|
||||||
|
show_statistics() {
|
||||||
|
log_info "Synchronization statistics:"
|
||||||
|
|
||||||
|
local total_example=$(grep -c "^[^#]*=" .env.example 2>/dev/null || echo "0")
|
||||||
|
local total_env=$(grep -c "^[^#]*=" .env 2>/dev/null || echo "0")
|
||||||
|
|
||||||
|
log_info " .env.example environment variables: $total_example"
|
||||||
|
log_info " .env environment variables: $total_env"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Main execution function
|
||||||
|
# Orchestrates the complete synchronization process in the correct order
|
||||||
|
main() {
|
||||||
|
log_info "=== Dify Environment Variables Synchronization Script ==="
|
||||||
|
log_info "Execution started: $(date)"
|
||||||
|
|
||||||
|
# Check prerequisites
|
||||||
|
check_files
|
||||||
|
|
||||||
|
# Create backup
|
||||||
|
create_backup
|
||||||
|
|
||||||
|
# Detect differences
|
||||||
|
detect_differences
|
||||||
|
|
||||||
|
# Detect removed variables (before sync)
|
||||||
|
detect_removed_variables
|
||||||
|
|
||||||
|
# Synchronize environment file
|
||||||
|
sync_env_file
|
||||||
|
|
||||||
|
# Show statistics
|
||||||
|
show_statistics
|
||||||
|
|
||||||
|
log_success "=== Synchronization process completed successfully ==="
|
||||||
|
log_info "Execution finished: $(date)"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Execute main function only when script is run directly
|
||||||
|
if [[ "${BASH_SOURCE[0]}" == "${0}" ]]; then
|
||||||
|
main "$@"
|
||||||
|
fi
|
||||||
@@ -1,8 +1,27 @@
|
|||||||
x-shared-env: &shared-api-worker-env
|
x-shared-env: &shared-api-worker-env
|
||||||
services:
|
services:
|
||||||
|
# Init container to fix permissions
|
||||||
|
init_permissions:
|
||||||
|
image: busybox:latest
|
||||||
|
command:
|
||||||
|
- sh
|
||||||
|
- -c
|
||||||
|
- |
|
||||||
|
FLAG_FILE="/app/api/storage/.init_permissions"
|
||||||
|
if [ -f "$${FLAG_FILE}" ]; then
|
||||||
|
echo "Permissions already initialized. Exiting."
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
echo "Initializing permissions for /app/api/storage"
|
||||||
|
chown -R 1001:1001 /app/api/storage && touch "$${FLAG_FILE}"
|
||||||
|
echo "Permissions initialized. Exiting."
|
||||||
|
volumes:
|
||||||
|
- ./volumes/app/storage:/app/api/storage
|
||||||
|
restart: "no"
|
||||||
|
|
||||||
# API service
|
# API service
|
||||||
api:
|
api:
|
||||||
image: langgenius/dify-api:1.8.0
|
image: langgenius/dify-api:1.11.2
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
# Use the shared environment variables.
|
# Use the shared environment variables.
|
||||||
@@ -15,10 +34,23 @@ services:
|
|||||||
PLUGIN_REMOTE_INSTALL_HOST: ${EXPOSE_PLUGIN_DEBUGGING_HOST:-localhost}
|
PLUGIN_REMOTE_INSTALL_HOST: ${EXPOSE_PLUGIN_DEBUGGING_HOST:-localhost}
|
||||||
PLUGIN_REMOTE_INSTALL_PORT: ${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}
|
PLUGIN_REMOTE_INSTALL_PORT: ${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}
|
||||||
PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
|
PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
|
||||||
|
PLUGIN_DAEMON_TIMEOUT: ${PLUGIN_DAEMON_TIMEOUT:-600.0}
|
||||||
INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
|
INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
|
||||||
depends_on:
|
depends_on:
|
||||||
db:
|
init_permissions:
|
||||||
|
condition: service_completed_successfully
|
||||||
|
db_postgres:
|
||||||
condition: service_healthy
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
db_mysql:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
oceanbase:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
seekdb:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
redis:
|
redis:
|
||||||
condition: service_started
|
condition: service_started
|
||||||
volumes:
|
volumes:
|
||||||
@@ -29,14 +61,14 @@ services:
|
|||||||
- default
|
- default
|
||||||
|
|
||||||
# worker service
|
# worker service
|
||||||
# The Celery worker for processing the queue.
|
# The Celery worker for processing all queues (dataset, workflow, mail, etc.)
|
||||||
worker:
|
worker:
|
||||||
image: langgenius/dify-api:1.8.0
|
image: langgenius/dify-api:1.11.2
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
# Use the shared environment variables.
|
# Use the shared environment variables.
|
||||||
<<: *shared-api-worker-env
|
<<: *shared-api-worker-env
|
||||||
# Startup mode, 'worker' starts the Celery worker for processing the queue.
|
# Startup mode, 'worker' starts the Celery worker for processing all queues.
|
||||||
MODE: worker
|
MODE: worker
|
||||||
SENTRY_DSN: ${API_SENTRY_DSN:-}
|
SENTRY_DSN: ${API_SENTRY_DSN:-}
|
||||||
SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
|
SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
|
||||||
@@ -44,8 +76,20 @@ services:
|
|||||||
PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
|
PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
|
||||||
INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
|
INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
|
||||||
depends_on:
|
depends_on:
|
||||||
db:
|
init_permissions:
|
||||||
|
condition: service_completed_successfully
|
||||||
|
db_postgres:
|
||||||
condition: service_healthy
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
db_mysql:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
oceanbase:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
seekdb:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
redis:
|
redis:
|
||||||
condition: service_started
|
condition: service_started
|
||||||
volumes:
|
volumes:
|
||||||
@@ -58,7 +102,7 @@ services:
|
|||||||
# worker_beat service
|
# worker_beat service
|
||||||
# Celery beat for scheduling periodic tasks.
|
# Celery beat for scheduling periodic tasks.
|
||||||
worker_beat:
|
worker_beat:
|
||||||
image: langgenius/dify-api:1.8.0
|
image: langgenius/dify-api:1.11.2
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
# Use the shared environment variables.
|
# Use the shared environment variables.
|
||||||
@@ -66,8 +110,20 @@ services:
|
|||||||
# Startup mode, 'worker_beat' starts the Celery beat for scheduling periodic tasks.
|
# Startup mode, 'worker_beat' starts the Celery beat for scheduling periodic tasks.
|
||||||
MODE: beat
|
MODE: beat
|
||||||
depends_on:
|
depends_on:
|
||||||
db:
|
init_permissions:
|
||||||
|
condition: service_completed_successfully
|
||||||
|
db_postgres:
|
||||||
condition: service_healthy
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
db_mysql:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
oceanbase:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
seekdb:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
redis:
|
redis:
|
||||||
condition: service_started
|
condition: service_started
|
||||||
networks:
|
networks:
|
||||||
@@ -76,11 +132,13 @@ services:
|
|||||||
|
|
||||||
# Frontend web application.
|
# Frontend web application.
|
||||||
web:
|
web:
|
||||||
image: langgenius/dify-web:1.8.0
|
image: langgenius/dify-web:1.11.2
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
CONSOLE_API_URL: ${CONSOLE_API_URL:-}
|
CONSOLE_API_URL: ${CONSOLE_API_URL:-}
|
||||||
APP_API_URL: ${APP_API_URL:-}
|
APP_API_URL: ${APP_API_URL:-}
|
||||||
|
AMPLITUDE_API_KEY: ${AMPLITUDE_API_KEY:-}
|
||||||
|
NEXT_PUBLIC_COOKIE_DOMAIN: ${NEXT_PUBLIC_COOKIE_DOMAIN:-}
|
||||||
SENTRY_DSN: ${WEB_SENTRY_DSN:-}
|
SENTRY_DSN: ${WEB_SENTRY_DSN:-}
|
||||||
NEXT_TELEMETRY_DISABLED: ${NEXT_TELEMETRY_DISABLED:-0}
|
NEXT_TELEMETRY_DISABLED: ${NEXT_TELEMETRY_DISABLED:-0}
|
||||||
TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
|
TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
|
||||||
@@ -100,14 +158,17 @@ services:
|
|||||||
ENABLE_WEBSITE_JINAREADER: ${ENABLE_WEBSITE_JINAREADER:-true}
|
ENABLE_WEBSITE_JINAREADER: ${ENABLE_WEBSITE_JINAREADER:-true}
|
||||||
ENABLE_WEBSITE_FIRECRAWL: ${ENABLE_WEBSITE_FIRECRAWL:-true}
|
ENABLE_WEBSITE_FIRECRAWL: ${ENABLE_WEBSITE_FIRECRAWL:-true}
|
||||||
ENABLE_WEBSITE_WATERCRAWL: ${ENABLE_WEBSITE_WATERCRAWL:-true}
|
ENABLE_WEBSITE_WATERCRAWL: ${ENABLE_WEBSITE_WATERCRAWL:-true}
|
||||||
# The postgres database.
|
|
||||||
db:
|
# The PostgreSQL database.
|
||||||
|
db_postgres:
|
||||||
image: postgres:15-alpine
|
image: postgres:15-alpine
|
||||||
|
profiles:
|
||||||
|
- postgresql
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
POSTGRES_USER: ${POSTGRES_USER:-postgres}
|
POSTGRES_USER: ${DB_USERNAME:-postgres}
|
||||||
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-difyai123456}
|
POSTGRES_PASSWORD: ${DB_PASSWORD:-difyai123456}
|
||||||
POSTGRES_DB: ${POSTGRES_DB:-dify}
|
POSTGRES_DB: ${DB_DATABASE:-dify}
|
||||||
PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
|
PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
|
||||||
command: >
|
command: >
|
||||||
postgres -c 'max_connections=${POSTGRES_MAX_CONNECTIONS:-100}'
|
postgres -c 'max_connections=${POSTGRES_MAX_CONNECTIONS:-100}'
|
||||||
@@ -115,14 +176,56 @@ services:
|
|||||||
-c 'work_mem=${POSTGRES_WORK_MEM:-4MB}'
|
-c 'work_mem=${POSTGRES_WORK_MEM:-4MB}'
|
||||||
-c 'maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}'
|
-c 'maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}'
|
||||||
-c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}'
|
-c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}'
|
||||||
|
-c 'statement_timeout=${POSTGRES_STATEMENT_TIMEOUT:-0}'
|
||||||
|
-c 'idle_in_transaction_session_timeout=${POSTGRES_IDLE_IN_TRANSACTION_SESSION_TIMEOUT:-0}'
|
||||||
volumes:
|
volumes:
|
||||||
- ./volumes/db/data:/var/lib/postgresql/data
|
- ./volumes/db/data:/var/lib/postgresql/data
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'pg_isready', '-h', 'db', '-U', '${PGUSER:-postgres}', '-d', '${POSTGRES_DB:-dify}' ]
|
test:
|
||||||
|
[
|
||||||
|
"CMD",
|
||||||
|
"pg_isready",
|
||||||
|
"-h",
|
||||||
|
"db_postgres",
|
||||||
|
"-U",
|
||||||
|
"${DB_USERNAME:-postgres}",
|
||||||
|
"-d",
|
||||||
|
"${DB_DATABASE:-dify}",
|
||||||
|
]
|
||||||
interval: 1s
|
interval: 1s
|
||||||
timeout: 3s
|
timeout: 3s
|
||||||
retries: 60
|
retries: 60
|
||||||
|
|
||||||
|
# The mysql database.
|
||||||
|
db_mysql:
|
||||||
|
image: mysql:8.0
|
||||||
|
profiles:
|
||||||
|
- mysql
|
||||||
|
restart: always
|
||||||
|
environment:
|
||||||
|
MYSQL_ROOT_PASSWORD: ${DB_PASSWORD:-difyai123456}
|
||||||
|
MYSQL_DATABASE: ${DB_DATABASE:-dify}
|
||||||
|
command: >
|
||||||
|
--max_connections=1000
|
||||||
|
--innodb_buffer_pool_size=${MYSQL_INNODB_BUFFER_POOL_SIZE:-512M}
|
||||||
|
--innodb_log_file_size=${MYSQL_INNODB_LOG_FILE_SIZE:-128M}
|
||||||
|
--innodb_flush_log_at_trx_commit=${MYSQL_INNODB_FLUSH_LOG_AT_TRX_COMMIT:-2}
|
||||||
|
volumes:
|
||||||
|
- ${MYSQL_HOST_VOLUME:-./volumes/mysql/data}:/var/lib/mysql
|
||||||
|
healthcheck:
|
||||||
|
test:
|
||||||
|
[
|
||||||
|
"CMD",
|
||||||
|
"mysqladmin",
|
||||||
|
"ping",
|
||||||
|
"-u",
|
||||||
|
"root",
|
||||||
|
"-p${DB_PASSWORD:-difyai123456}",
|
||||||
|
]
|
||||||
|
interval: 1s
|
||||||
|
timeout: 3s
|
||||||
|
retries: 30
|
||||||
|
|
||||||
# The redis cache.
|
# The redis cache.
|
||||||
redis:
|
redis:
|
||||||
image: redis:6-alpine
|
image: redis:6-alpine
|
||||||
@@ -135,7 +238,11 @@ services:
|
|||||||
# Set the redis password when startup redis server.
|
# Set the redis password when startup redis server.
|
||||||
command: redis-server --requirepass ${REDIS_PASSWORD:-difyai123456}
|
command: redis-server --requirepass ${REDIS_PASSWORD:-difyai123456}
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'redis-cli', 'ping' ]
|
test:
|
||||||
|
[
|
||||||
|
"CMD-SHELL",
|
||||||
|
"redis-cli -a ${REDIS_PASSWORD:-difyai123456} ping | grep -q PONG",
|
||||||
|
]
|
||||||
|
|
||||||
# The DifySandbox
|
# The DifySandbox
|
||||||
sandbox:
|
sandbox:
|
||||||
@@ -157,13 +264,13 @@ services:
|
|||||||
- ./volumes/sandbox/dependencies:/dependencies
|
- ./volumes/sandbox/dependencies:/dependencies
|
||||||
- ./volumes/sandbox/conf:/conf
|
- ./volumes/sandbox/conf:/conf
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'curl', '-f', 'http://localhost:8194/health' ]
|
test: ["CMD", "curl", "-f", "http://localhost:8194/health"]
|
||||||
networks:
|
networks:
|
||||||
- ssrf_proxy_network
|
- ssrf_proxy_network
|
||||||
|
|
||||||
# plugin daemon
|
# plugin daemon
|
||||||
plugin_daemon:
|
plugin_daemon:
|
||||||
image: langgenius/dify-plugin-daemon:0.2.0-local
|
image: langgenius/dify-plugin-daemon:0.5.2-local
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
# Use the shared environment variables.
|
# Use the shared environment variables.
|
||||||
@@ -219,8 +326,18 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- ./volumes/plugin_daemon:/app/storage
|
- ./volumes/plugin_daemon:/app/storage
|
||||||
depends_on:
|
depends_on:
|
||||||
db:
|
db_postgres:
|
||||||
condition: service_healthy
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
db_mysql:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
oceanbase:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
seekdb:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
|
||||||
# ssrf_proxy server
|
# ssrf_proxy server
|
||||||
# for more information, please refer to
|
# for more information, please refer to
|
||||||
@@ -231,7 +348,12 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- ./ssrf_proxy/squid.conf.template:/etc/squid/squid.conf.template
|
- ./ssrf_proxy/squid.conf.template:/etc/squid/squid.conf.template
|
||||||
- ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh
|
- ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh
|
||||||
entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]
|
entrypoint:
|
||||||
|
[
|
||||||
|
"sh",
|
||||||
|
"-c",
|
||||||
|
"cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh",
|
||||||
|
]
|
||||||
environment:
|
environment:
|
||||||
# pls clearly modify the squid env vars to fit your network environment.
|
# pls clearly modify the squid env vars to fit your network environment.
|
||||||
HTTP_PORT: ${SSRF_HTTP_PORT:-3128}
|
HTTP_PORT: ${SSRF_HTTP_PORT:-3128}
|
||||||
@@ -260,8 +382,8 @@ services:
|
|||||||
- CERTBOT_EMAIL=${CERTBOT_EMAIL}
|
- CERTBOT_EMAIL=${CERTBOT_EMAIL}
|
||||||
- CERTBOT_DOMAIN=${CERTBOT_DOMAIN}
|
- CERTBOT_DOMAIN=${CERTBOT_DOMAIN}
|
||||||
- CERTBOT_OPTIONS=${CERTBOT_OPTIONS:-}
|
- CERTBOT_OPTIONS=${CERTBOT_OPTIONS:-}
|
||||||
entrypoint: [ '/docker-entrypoint.sh' ]
|
entrypoint: ["/docker-entrypoint.sh"]
|
||||||
command: [ 'tail', '-f', '/dev/null' ]
|
command: ["tail", "-f", "/dev/null"]
|
||||||
|
|
||||||
# The nginx reverse proxy.
|
# The nginx reverse proxy.
|
||||||
# used for reverse proxying the API service and Web service.
|
# used for reverse proxying the API service and Web service.
|
||||||
@@ -278,7 +400,12 @@ services:
|
|||||||
- ./volumes/certbot/conf/live:/etc/letsencrypt/live # cert dir (with certbot container)
|
- ./volumes/certbot/conf/live:/etc/letsencrypt/live # cert dir (with certbot container)
|
||||||
- ./volumes/certbot/conf:/etc/letsencrypt
|
- ./volumes/certbot/conf:/etc/letsencrypt
|
||||||
- ./volumes/certbot/www:/var/www/html
|
- ./volumes/certbot/www:/var/www/html
|
||||||
entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]
|
entrypoint:
|
||||||
|
[
|
||||||
|
"sh",
|
||||||
|
"-c",
|
||||||
|
"cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh",
|
||||||
|
]
|
||||||
environment:
|
environment:
|
||||||
NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
|
NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
|
||||||
NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false}
|
NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false}
|
||||||
@@ -288,7 +415,7 @@ services:
|
|||||||
# and modify the env vars below in .env if HTTPS_ENABLED is true.
|
# and modify the env vars below in .env if HTTPS_ENABLED is true.
|
||||||
NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
|
NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
|
||||||
NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
|
NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
|
||||||
NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3}
|
NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.2 TLSv1.3}
|
||||||
NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
|
NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
|
||||||
NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-100M}
|
NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-100M}
|
||||||
NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
|
NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
|
||||||
@@ -300,14 +427,13 @@ services:
|
|||||||
- api
|
- api
|
||||||
- web
|
- web
|
||||||
ports:
|
ports:
|
||||||
- '${EXPOSE_NGINX_PORT:-80}:${NGINX_PORT:-80}'
|
- "${EXPOSE_NGINX_PORT:-80}:${NGINX_PORT:-80}"
|
||||||
- '${EXPOSE_NGINX_SSL_PORT:-443}:${NGINX_SSL_PORT:-443}'
|
- "${EXPOSE_NGINX_SSL_PORT:-443}:${NGINX_SSL_PORT:-443}"
|
||||||
|
|
||||||
# The Weaviate vector store.
|
# The Weaviate vector store.
|
||||||
weaviate:
|
weaviate:
|
||||||
image: semitechnologies/weaviate:1.19.0
|
image: semitechnologies/weaviate:1.27.0
|
||||||
profiles:
|
profiles:
|
||||||
- ''
|
|
||||||
- weaviate
|
- weaviate
|
||||||
restart: always
|
restart: always
|
||||||
volumes:
|
volumes:
|
||||||
@@ -326,11 +452,72 @@ services:
|
|||||||
AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
|
AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
|
||||||
AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
|
AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
|
||||||
AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
|
AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
|
||||||
|
DISABLE_TELEMETRY: ${WEAVIATE_DISABLE_TELEMETRY:-false}
|
||||||
|
ENABLE_TOKENIZER_GSE: ${WEAVIATE_ENABLE_TOKENIZER_GSE:-false}
|
||||||
|
ENABLE_TOKENIZER_KAGOME_JA: ${WEAVIATE_ENABLE_TOKENIZER_KAGOME_JA:-false}
|
||||||
|
ENABLE_TOKENIZER_KAGOME_KR: ${WEAVIATE_ENABLE_TOKENIZER_KAGOME_KR:-false}
|
||||||
|
|
||||||
|
# OceanBase vector database
|
||||||
|
oceanbase:
|
||||||
|
image: oceanbase/oceanbase-ce:4.3.5-lts
|
||||||
|
container_name: oceanbase
|
||||||
|
profiles:
|
||||||
|
- oceanbase
|
||||||
|
restart: always
|
||||||
|
volumes:
|
||||||
|
- ./volumes/oceanbase/data:/root/ob
|
||||||
|
- ./volumes/oceanbase/conf:/root/.obd/cluster
|
||||||
|
- ./volumes/oceanbase/init.d:/root/boot/init.d
|
||||||
|
environment:
|
||||||
|
OB_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
|
||||||
|
OB_SYS_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
||||||
|
OB_TENANT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
||||||
|
OB_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
|
||||||
|
OB_SERVER_IP: 127.0.0.1
|
||||||
|
MODE: mini
|
||||||
|
LANG: en_US.UTF-8
|
||||||
|
ports:
|
||||||
|
- "${OCEANBASE_VECTOR_PORT:-2881}:2881"
|
||||||
|
healthcheck:
|
||||||
|
test:
|
||||||
|
[
|
||||||
|
"CMD-SHELL",
|
||||||
|
'obclient -h127.0.0.1 -P2881 -uroot@test -p${OCEANBASE_VECTOR_PASSWORD:-difyai123456} -e "SELECT 1;"',
|
||||||
|
]
|
||||||
|
interval: 10s
|
||||||
|
retries: 30
|
||||||
|
start_period: 30s
|
||||||
|
timeout: 10s
|
||||||
|
|
||||||
|
# seekdb vector database
|
||||||
|
seekdb:
|
||||||
|
image: oceanbase/seekdb:latest
|
||||||
|
container_name: seekdb
|
||||||
|
profiles:
|
||||||
|
- seekdb
|
||||||
|
restart: always
|
||||||
|
volumes:
|
||||||
|
- ./volumes/seekdb:/var/lib/oceanbase
|
||||||
|
environment:
|
||||||
|
ROOT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
||||||
|
MEMORY_LIMIT: ${SEEKDB_MEMORY_LIMIT:-2G}
|
||||||
|
REPORTER: dify-ai-seekdb
|
||||||
|
ports:
|
||||||
|
- "${OCEANBASE_VECTOR_PORT:-2881}:2881"
|
||||||
|
healthcheck:
|
||||||
|
test:
|
||||||
|
[
|
||||||
|
"CMD-SHELL",
|
||||||
|
'mysql -h127.0.0.1 -P2881 -uroot -p${OCEANBASE_VECTOR_PASSWORD:-difyai123456} -e "SELECT 1;"',
|
||||||
|
]
|
||||||
|
interval: 5s
|
||||||
|
retries: 60
|
||||||
|
timeout: 5s
|
||||||
|
|
||||||
# Qdrant vector store.
|
# Qdrant vector store.
|
||||||
# (if used, you need to set VECTOR_STORE to qdrant in the api & worker service.)
|
# (if used, you need to set VECTOR_STORE to qdrant in the api & worker service.)
|
||||||
qdrant:
|
qdrant:
|
||||||
image: langgenius/qdrant:v1.7.3
|
image: langgenius/qdrant:v1.8.3
|
||||||
profiles:
|
profiles:
|
||||||
- qdrant
|
- qdrant
|
||||||
restart: always
|
restart: always
|
||||||
@@ -366,7 +553,11 @@ services:
|
|||||||
- ./volumes/couchbase/data:/opt/couchbase/var/lib/couchbase/data
|
- ./volumes/couchbase/data:/opt/couchbase/var/lib/couchbase/data
|
||||||
healthcheck:
|
healthcheck:
|
||||||
# ensure bucket was created before proceeding
|
# ensure bucket was created before proceeding
|
||||||
test: [ "CMD-SHELL", "curl -s -f -u Administrator:password http://localhost:8091/pools/default/buckets | grep -q '\\[{' || exit 1" ]
|
test:
|
||||||
|
[
|
||||||
|
"CMD-SHELL",
|
||||||
|
"curl -s -f -u Administrator:password http://localhost:8091/pools/default/buckets | grep -q '\\[{' || exit 1",
|
||||||
|
]
|
||||||
interval: 10s
|
interval: 10s
|
||||||
retries: 10
|
retries: 10
|
||||||
start_period: 30s
|
start_period: 30s
|
||||||
@@ -392,9 +583,9 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- ./volumes/pgvector/data:/var/lib/postgresql/data
|
- ./volumes/pgvector/data:/var/lib/postgresql/data
|
||||||
- ./pgvector/docker-entrypoint.sh:/docker-entrypoint.sh
|
- ./pgvector/docker-entrypoint.sh:/docker-entrypoint.sh
|
||||||
entrypoint: [ '/docker-entrypoint.sh' ]
|
entrypoint: ["/docker-entrypoint.sh"]
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'pg_isready' ]
|
test: ["CMD", "pg_isready"]
|
||||||
interval: 1s
|
interval: 1s
|
||||||
timeout: 3s
|
timeout: 3s
|
||||||
retries: 30
|
retries: 30
|
||||||
@@ -411,14 +602,14 @@ services:
|
|||||||
- VB_USERNAME=dify
|
- VB_USERNAME=dify
|
||||||
- VB_PASSWORD=Difyai123456
|
- VB_PASSWORD=Difyai123456
|
||||||
ports:
|
ports:
|
||||||
- '5434:5432'
|
- "5434:5432"
|
||||||
volumes:
|
volumes:
|
||||||
- ./vastbase/lic:/home/vastbase/vastbase/lic
|
- ./vastbase/lic:/home/vastbase/vastbase/lic
|
||||||
- ./vastbase/data:/home/vastbase/data
|
- ./vastbase/data:/home/vastbase/data
|
||||||
- ./vastbase/backup:/home/vastbase/backup
|
- ./vastbase/backup:/home/vastbase/backup
|
||||||
- ./vastbase/backup_log:/home/vastbase/backup_log
|
- ./vastbase/backup_log:/home/vastbase/backup_log
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'pg_isready' ]
|
test: ["CMD", "pg_isready"]
|
||||||
interval: 1s
|
interval: 1s
|
||||||
timeout: 3s
|
timeout: 3s
|
||||||
retries: 30
|
retries: 30
|
||||||
@@ -440,7 +631,7 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- ./volumes/pgvecto_rs/data:/var/lib/postgresql/data
|
- ./volumes/pgvecto_rs/data:/var/lib/postgresql/data
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'pg_isready' ]
|
test: ["CMD", "pg_isready"]
|
||||||
interval: 1s
|
interval: 1s
|
||||||
timeout: 3s
|
timeout: 3s
|
||||||
retries: 30
|
retries: 30
|
||||||
@@ -458,32 +649,25 @@ services:
|
|||||||
CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
|
CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
|
||||||
IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
|
IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
|
||||||
|
|
||||||
# OceanBase vector database
|
# InterSystems IRIS vector database
|
||||||
oceanbase:
|
iris:
|
||||||
image: oceanbase/oceanbase-ce:4.3.5-lts
|
image: containers.intersystems.com/intersystems/iris-community:2025.3
|
||||||
container_name: oceanbase
|
|
||||||
profiles:
|
profiles:
|
||||||
- oceanbase
|
- iris
|
||||||
|
container_name: iris
|
||||||
restart: always
|
restart: always
|
||||||
volumes:
|
init: true
|
||||||
- ./volumes/oceanbase/data:/root/ob
|
|
||||||
- ./volumes/oceanbase/conf:/root/.obd/cluster
|
|
||||||
- ./volumes/oceanbase/init.d:/root/boot/init.d
|
|
||||||
environment:
|
|
||||||
OB_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
|
|
||||||
OB_SYS_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
|
||||||
OB_TENANT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
|
||||||
OB_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
|
|
||||||
OB_SERVER_IP: 127.0.0.1
|
|
||||||
MODE: mini
|
|
||||||
ports:
|
ports:
|
||||||
- "${OCEANBASE_VECTOR_PORT:-2881}:2881"
|
- "${IRIS_SUPER_SERVER_PORT:-1972}:1972"
|
||||||
healthcheck:
|
- "${IRIS_WEB_SERVER_PORT:-52773}:52773"
|
||||||
test: [ 'CMD-SHELL', 'obclient -h127.0.0.1 -P2881 -uroot@test -p$${OB_TENANT_PASSWORD} -e "SELECT 1;"' ]
|
volumes:
|
||||||
interval: 10s
|
- ./volumes/iris:/opt/iris
|
||||||
retries: 30
|
- ./iris/iris-init.script:/iris-init.script
|
||||||
start_period: 30s
|
- ./iris/docker-entrypoint.sh:/custom-entrypoint.sh
|
||||||
timeout: 10s
|
entrypoint: ["/custom-entrypoint.sh"]
|
||||||
|
tty: true
|
||||||
|
environment:
|
||||||
|
TZ: ${IRIS_TIMEZONE:-UTC}
|
||||||
|
|
||||||
# Oracle vector database
|
# Oracle vector database
|
||||||
oracle:
|
oracle:
|
||||||
@@ -515,7 +699,7 @@ services:
|
|||||||
- ./volumes/milvus/etcd:/etcd
|
- ./volumes/milvus/etcd:/etcd
|
||||||
command: etcd -advertise-client-urls=http://127.0.0.1:2379 -listen-client-urls http://0.0.0.0:2379 --data-dir /etcd
|
command: etcd -advertise-client-urls=http://127.0.0.1:2379 -listen-client-urls http://0.0.0.0:2379 --data-dir /etcd
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'etcdctl', 'endpoint', 'health' ]
|
test: ["CMD", "etcdctl", "endpoint", "health"]
|
||||||
interval: 30s
|
interval: 30s
|
||||||
timeout: 20s
|
timeout: 20s
|
||||||
retries: 3
|
retries: 3
|
||||||
@@ -534,7 +718,7 @@ services:
|
|||||||
- ./volumes/milvus/minio:/minio_data
|
- ./volumes/milvus/minio:/minio_data
|
||||||
command: minio server /minio_data --console-address ":9001"
|
command: minio server /minio_data --console-address ":9001"
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live' ]
|
test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
|
||||||
interval: 30s
|
interval: 30s
|
||||||
timeout: 20s
|
timeout: 20s
|
||||||
retries: 3
|
retries: 3
|
||||||
@@ -543,10 +727,10 @@ services:
|
|||||||
|
|
||||||
milvus-standalone:
|
milvus-standalone:
|
||||||
container_name: milvus-standalone
|
container_name: milvus-standalone
|
||||||
image: milvusdb/milvus:v2.5.15
|
image: milvusdb/milvus:v2.6.3
|
||||||
profiles:
|
profiles:
|
||||||
- milvus
|
- milvus
|
||||||
command: [ 'milvus', 'run', 'standalone' ]
|
command: ["milvus", "run", "standalone"]
|
||||||
environment:
|
environment:
|
||||||
ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}
|
ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}
|
||||||
MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}
|
MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}
|
||||||
@@ -554,7 +738,7 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- ./volumes/milvus/milvus:/var/lib/milvus
|
- ./volumes/milvus/milvus:/var/lib/milvus
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'curl', '-f', 'http://localhost:9091/healthz' ]
|
test: ["CMD", "curl", "-f", "http://localhost:9091/healthz"]
|
||||||
interval: 30s
|
interval: 30s
|
||||||
start_period: 90s
|
start_period: 90s
|
||||||
timeout: 20s
|
timeout: 20s
|
||||||
@@ -673,18 +857,19 @@ services:
|
|||||||
node.name: dify-es0
|
node.name: dify-es0
|
||||||
discovery.type: single-node
|
discovery.type: single-node
|
||||||
xpack.license.self_generated.type: basic
|
xpack.license.self_generated.type: basic
|
||||||
xpack.security.enabled: 'true'
|
xpack.security.enabled: "true"
|
||||||
xpack.security.enrollment.enabled: 'false'
|
xpack.security.enrollment.enabled: "false"
|
||||||
xpack.security.http.ssl.enabled: 'false'
|
xpack.security.http.ssl.enabled: "false"
|
||||||
ports:
|
ports:
|
||||||
- ${ELASTICSEARCH_PORT:-9200}:9200
|
- ${ELASTICSEARCH_PORT:-9200}:9200
|
||||||
deploy:
|
deploy:
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
memory: 2g
|
memory: 2g
|
||||||
entrypoint: [ 'sh', '-c', "sh /docker-entrypoint-mount.sh" ]
|
entrypoint: ["sh", "-c", "sh /docker-entrypoint-mount.sh"]
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'curl', '-s', 'http://localhost:9200/_cluster/health?pretty' ]
|
test:
|
||||||
|
["CMD", "curl", "-s", "http://localhost:9200/_cluster/health?pretty"]
|
||||||
interval: 30s
|
interval: 30s
|
||||||
timeout: 10s
|
timeout: 10s
|
||||||
retries: 50
|
retries: 50
|
||||||
@@ -702,17 +887,17 @@ services:
|
|||||||
environment:
|
environment:
|
||||||
XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: d1a66dfd-c4d3-4a0a-8290-2abcb83ab3aa
|
XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: d1a66dfd-c4d3-4a0a-8290-2abcb83ab3aa
|
||||||
NO_PROXY: localhost,127.0.0.1,elasticsearch,kibana
|
NO_PROXY: localhost,127.0.0.1,elasticsearch,kibana
|
||||||
XPACK_SECURITY_ENABLED: 'true'
|
XPACK_SECURITY_ENABLED: "true"
|
||||||
XPACK_SECURITY_ENROLLMENT_ENABLED: 'false'
|
XPACK_SECURITY_ENROLLMENT_ENABLED: "false"
|
||||||
XPACK_SECURITY_HTTP_SSL_ENABLED: 'false'
|
XPACK_SECURITY_HTTP_SSL_ENABLED: "false"
|
||||||
XPACK_FLEET_ISAIRGAPPED: 'true'
|
XPACK_FLEET_ISAIRGAPPED: "true"
|
||||||
I18N_LOCALE: zh-CN
|
I18N_LOCALE: zh-CN
|
||||||
SERVER_PORT: '5601'
|
SERVER_PORT: "5601"
|
||||||
ELASTICSEARCH_HOSTS: http://elasticsearch:9200
|
ELASTICSEARCH_HOSTS: http://elasticsearch:9200
|
||||||
ports:
|
ports:
|
||||||
- ${KIBANA_PORT:-5601}:5601
|
- ${KIBANA_PORT:-5601}:5601
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD-SHELL', 'curl -s http://localhost:5601 >/dev/null || exit 1' ]
|
test: ["CMD-SHELL", "curl -s http://localhost:5601 >/dev/null || exit 1"]
|
||||||
interval: 30s
|
interval: 30s
|
||||||
timeout: 10s
|
timeout: 10s
|
||||||
retries: 3
|
retries: 3
|
||||||
|
|||||||
@@ -1,13 +1,16 @@
|
|||||||
services:
|
services:
|
||||||
# The postgres database.
|
# The postgres database.
|
||||||
db:
|
db_postgres:
|
||||||
image: postgres:15-alpine
|
image: postgres:15-alpine
|
||||||
|
profiles:
|
||||||
|
- ""
|
||||||
|
- postgresql
|
||||||
restart: always
|
restart: always
|
||||||
env_file:
|
env_file:
|
||||||
- ./middleware.env
|
- ./middleware.env
|
||||||
environment:
|
environment:
|
||||||
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-difyai123456}
|
POSTGRES_PASSWORD: ${DB_PASSWORD:-difyai123456}
|
||||||
POSTGRES_DB: ${POSTGRES_DB:-dify}
|
POSTGRES_DB: ${DB_DATABASE:-dify}
|
||||||
PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
|
PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
|
||||||
command: >
|
command: >
|
||||||
postgres -c 'max_connections=${POSTGRES_MAX_CONNECTIONS:-100}'
|
postgres -c 'max_connections=${POSTGRES_MAX_CONNECTIONS:-100}'
|
||||||
@@ -15,12 +18,57 @@ services:
|
|||||||
-c 'work_mem=${POSTGRES_WORK_MEM:-4MB}'
|
-c 'work_mem=${POSTGRES_WORK_MEM:-4MB}'
|
||||||
-c 'maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}'
|
-c 'maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}'
|
||||||
-c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}'
|
-c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}'
|
||||||
|
-c 'statement_timeout=${POSTGRES_STATEMENT_TIMEOUT:-0}'
|
||||||
|
-c 'idle_in_transaction_session_timeout=${POSTGRES_IDLE_IN_TRANSACTION_SESSION_TIMEOUT:-0}'
|
||||||
volumes:
|
volumes:
|
||||||
- ${PGDATA_HOST_VOLUME:-./volumes/db/data}:/var/lib/postgresql/data
|
- ${PGDATA_HOST_VOLUME:-./volumes/db/data}:/var/lib/postgresql/data
|
||||||
ports:
|
ports:
|
||||||
- "${EXPOSE_POSTGRES_PORT:-5432}:5432"
|
- "${EXPOSE_POSTGRES_PORT:-5432}:5432"
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'pg_isready', '-h', 'db', '-U', '${PGUSER:-postgres}', '-d', '${POSTGRES_DB:-dify}' ]
|
test:
|
||||||
|
[
|
||||||
|
"CMD",
|
||||||
|
"pg_isready",
|
||||||
|
"-h",
|
||||||
|
"db_postgres",
|
||||||
|
"-U",
|
||||||
|
"${DB_USERNAME:-postgres}",
|
||||||
|
"-d",
|
||||||
|
"${DB_DATABASE:-dify}",
|
||||||
|
]
|
||||||
|
interval: 1s
|
||||||
|
timeout: 3s
|
||||||
|
retries: 30
|
||||||
|
|
||||||
|
db_mysql:
|
||||||
|
image: mysql:8.0
|
||||||
|
profiles:
|
||||||
|
- mysql
|
||||||
|
restart: always
|
||||||
|
env_file:
|
||||||
|
- ./middleware.env
|
||||||
|
environment:
|
||||||
|
MYSQL_ROOT_PASSWORD: ${DB_PASSWORD:-difyai123456}
|
||||||
|
MYSQL_DATABASE: ${DB_DATABASE:-dify}
|
||||||
|
command: >
|
||||||
|
--max_connections=1000
|
||||||
|
--innodb_buffer_pool_size=${MYSQL_INNODB_BUFFER_POOL_SIZE:-512M}
|
||||||
|
--innodb_log_file_size=${MYSQL_INNODB_LOG_FILE_SIZE:-128M}
|
||||||
|
--innodb_flush_log_at_trx_commit=${MYSQL_INNODB_FLUSH_LOG_AT_TRX_COMMIT:-2}
|
||||||
|
volumes:
|
||||||
|
- ${MYSQL_HOST_VOLUME:-./volumes/mysql/data}:/var/lib/mysql
|
||||||
|
ports:
|
||||||
|
- "${EXPOSE_MYSQL_PORT:-3306}:3306"
|
||||||
|
healthcheck:
|
||||||
|
test:
|
||||||
|
[
|
||||||
|
"CMD",
|
||||||
|
"mysqladmin",
|
||||||
|
"ping",
|
||||||
|
"-u",
|
||||||
|
"root",
|
||||||
|
"-p${DB_PASSWORD:-difyai123456}",
|
||||||
|
]
|
||||||
interval: 1s
|
interval: 1s
|
||||||
timeout: 3s
|
timeout: 3s
|
||||||
retries: 30
|
retries: 30
|
||||||
@@ -41,7 +89,11 @@ services:
|
|||||||
ports:
|
ports:
|
||||||
- "${EXPOSE_REDIS_PORT:-6379}:6379"
|
- "${EXPOSE_REDIS_PORT:-6379}:6379"
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ "CMD", "redis-cli", "ping" ]
|
test:
|
||||||
|
[
|
||||||
|
"CMD-SHELL",
|
||||||
|
"redis-cli -a ${REDIS_PASSWORD:-difyai123456} ping | grep -q PONG",
|
||||||
|
]
|
||||||
|
|
||||||
# The DifySandbox
|
# The DifySandbox
|
||||||
sandbox:
|
sandbox:
|
||||||
@@ -71,16 +123,12 @@ services:
|
|||||||
|
|
||||||
# plugin daemon
|
# plugin daemon
|
||||||
plugin_daemon:
|
plugin_daemon:
|
||||||
image: langgenius/dify-plugin-daemon:0.2.0-local
|
image: langgenius/dify-plugin-daemon:0.5.2-local
|
||||||
restart: always
|
restart: always
|
||||||
env_file:
|
env_file:
|
||||||
- ./middleware.env
|
- ./middleware.env
|
||||||
environment:
|
environment:
|
||||||
# Use the shared environment variables.
|
# Use the shared environment variables.
|
||||||
DB_HOST: ${DB_HOST:-db}
|
|
||||||
DB_PORT: ${DB_PORT:-5432}
|
|
||||||
DB_USERNAME: ${DB_USER:-postgres}
|
|
||||||
DB_PASSWORD: ${DB_PASSWORD:-difyai123456}
|
|
||||||
DB_DATABASE: ${DB_PLUGIN_DATABASE:-dify_plugin}
|
DB_DATABASE: ${DB_PLUGIN_DATABASE:-dify_plugin}
|
||||||
REDIS_HOST: ${REDIS_HOST:-redis}
|
REDIS_HOST: ${REDIS_HOST:-redis}
|
||||||
REDIS_PORT: ${REDIS_PORT:-6379}
|
REDIS_PORT: ${REDIS_PORT:-6379}
|
||||||
@@ -94,7 +142,6 @@ services:
|
|||||||
PLUGIN_REMOTE_INSTALLING_HOST: ${PLUGIN_DEBUGGING_HOST:-0.0.0.0}
|
PLUGIN_REMOTE_INSTALLING_HOST: ${PLUGIN_DEBUGGING_HOST:-0.0.0.0}
|
||||||
PLUGIN_REMOTE_INSTALLING_PORT: ${PLUGIN_DEBUGGING_PORT:-5003}
|
PLUGIN_REMOTE_INSTALLING_PORT: ${PLUGIN_DEBUGGING_PORT:-5003}
|
||||||
PLUGIN_WORKING_PATH: ${PLUGIN_WORKING_PATH:-/app/storage/cwd}
|
PLUGIN_WORKING_PATH: ${PLUGIN_WORKING_PATH:-/app/storage/cwd}
|
||||||
FORCE_VERIFYING_SIGNATURE: ${FORCE_VERIFYING_SIGNATURE:-true}
|
|
||||||
PYTHON_ENV_INIT_TIMEOUT: ${PLUGIN_PYTHON_ENV_INIT_TIMEOUT:-120}
|
PYTHON_ENV_INIT_TIMEOUT: ${PLUGIN_PYTHON_ENV_INIT_TIMEOUT:-120}
|
||||||
PLUGIN_MAX_EXECUTION_TIMEOUT: ${PLUGIN_MAX_EXECUTION_TIMEOUT:-600}
|
PLUGIN_MAX_EXECUTION_TIMEOUT: ${PLUGIN_MAX_EXECUTION_TIMEOUT:-600}
|
||||||
PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
|
PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
|
||||||
@@ -126,6 +173,9 @@ services:
|
|||||||
VOLCENGINE_TOS_ACCESS_KEY: ${PLUGIN_VOLCENGINE_TOS_ACCESS_KEY:-}
|
VOLCENGINE_TOS_ACCESS_KEY: ${PLUGIN_VOLCENGINE_TOS_ACCESS_KEY:-}
|
||||||
VOLCENGINE_TOS_SECRET_KEY: ${PLUGIN_VOLCENGINE_TOS_SECRET_KEY:-}
|
VOLCENGINE_TOS_SECRET_KEY: ${PLUGIN_VOLCENGINE_TOS_SECRET_KEY:-}
|
||||||
VOLCENGINE_TOS_REGION: ${PLUGIN_VOLCENGINE_TOS_REGION:-}
|
VOLCENGINE_TOS_REGION: ${PLUGIN_VOLCENGINE_TOS_REGION:-}
|
||||||
|
THIRD_PARTY_SIGNATURE_VERIFICATION_ENABLED: true
|
||||||
|
THIRD_PARTY_SIGNATURE_VERIFICATION_PUBLIC_KEYS: /app/keys/publickey.pem
|
||||||
|
FORCE_VERIFYING_SIGNATURE: false
|
||||||
ports:
|
ports:
|
||||||
- "${EXPOSE_PLUGIN_DAEMON_PORT:-5002}:${PLUGIN_DAEMON_PORT:-5002}"
|
- "${EXPOSE_PLUGIN_DAEMON_PORT:-5002}:${PLUGIN_DAEMON_PORT:-5002}"
|
||||||
- "${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}:${PLUGIN_DEBUGGING_PORT:-5003}"
|
- "${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}:${PLUGIN_DEBUGGING_PORT:-5003}"
|
||||||
@@ -141,7 +191,12 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- ./ssrf_proxy/squid.conf.template:/etc/squid/squid.conf.template
|
- ./ssrf_proxy/squid.conf.template:/etc/squid/squid.conf.template
|
||||||
- ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh
|
- ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh
|
||||||
entrypoint: [ "sh", "-c", "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]
|
entrypoint:
|
||||||
|
[
|
||||||
|
"sh",
|
||||||
|
"-c",
|
||||||
|
"cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh",
|
||||||
|
]
|
||||||
env_file:
|
env_file:
|
||||||
- ./middleware.env
|
- ./middleware.env
|
||||||
environment:
|
environment:
|
||||||
@@ -160,7 +215,7 @@ services:
|
|||||||
|
|
||||||
# The Weaviate vector store.
|
# The Weaviate vector store.
|
||||||
weaviate:
|
weaviate:
|
||||||
image: semitechnologies/weaviate:1.19.0
|
image: semitechnologies/weaviate:1.27.0
|
||||||
profiles:
|
profiles:
|
||||||
- ""
|
- ""
|
||||||
- weaviate
|
- weaviate
|
||||||
@@ -183,8 +238,10 @@ services:
|
|||||||
AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
|
AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
|
||||||
AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
|
AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
|
||||||
AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
|
AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
|
||||||
|
DISABLE_TELEMETRY: ${WEAVIATE_DISABLE_TELEMETRY:-false}
|
||||||
ports:
|
ports:
|
||||||
- "${EXPOSE_WEAVIATE_PORT:-8080}:8080"
|
- "${EXPOSE_WEAVIATE_PORT:-8080}:8080"
|
||||||
|
- "${EXPOSE_WEAVIATE_GRPC_PORT:-50051}:50051"
|
||||||
|
|
||||||
networks:
|
networks:
|
||||||
# create a network between sandbox, api and ssrf_proxy, and can not access outside.
|
# create a network between sandbox, api and ssrf_proxy, and can not access outside.
|
||||||
|
|||||||
+343
-100
@@ -8,6 +8,7 @@ x-shared-env: &shared-api-worker-env
|
|||||||
CONSOLE_API_URL: ${CONSOLE_API_URL:-}
|
CONSOLE_API_URL: ${CONSOLE_API_URL:-}
|
||||||
CONSOLE_WEB_URL: ${CONSOLE_WEB_URL:-}
|
CONSOLE_WEB_URL: ${CONSOLE_WEB_URL:-}
|
||||||
SERVICE_API_URL: ${SERVICE_API_URL:-}
|
SERVICE_API_URL: ${SERVICE_API_URL:-}
|
||||||
|
TRIGGER_URL: ${TRIGGER_URL:-http://localhost}
|
||||||
APP_API_URL: ${APP_API_URL:-}
|
APP_API_URL: ${APP_API_URL:-}
|
||||||
APP_WEB_URL: ${APP_WEB_URL:-}
|
APP_WEB_URL: ${APP_WEB_URL:-}
|
||||||
FILES_URL: ${FILES_URL:-}
|
FILES_URL: ${FILES_URL:-}
|
||||||
@@ -33,6 +34,7 @@ x-shared-env: &shared-api-worker-env
|
|||||||
FILES_ACCESS_TIMEOUT: ${FILES_ACCESS_TIMEOUT:-300}
|
FILES_ACCESS_TIMEOUT: ${FILES_ACCESS_TIMEOUT:-300}
|
||||||
ACCESS_TOKEN_EXPIRE_MINUTES: ${ACCESS_TOKEN_EXPIRE_MINUTES:-60}
|
ACCESS_TOKEN_EXPIRE_MINUTES: ${ACCESS_TOKEN_EXPIRE_MINUTES:-60}
|
||||||
REFRESH_TOKEN_EXPIRE_DAYS: ${REFRESH_TOKEN_EXPIRE_DAYS:-30}
|
REFRESH_TOKEN_EXPIRE_DAYS: ${REFRESH_TOKEN_EXPIRE_DAYS:-30}
|
||||||
|
APP_DEFAULT_ACTIVE_REQUESTS: ${APP_DEFAULT_ACTIVE_REQUESTS:-0}
|
||||||
APP_MAX_ACTIVE_REQUESTS: ${APP_MAX_ACTIVE_REQUESTS:-0}
|
APP_MAX_ACTIVE_REQUESTS: ${APP_MAX_ACTIVE_REQUESTS:-0}
|
||||||
APP_MAX_EXECUTION_TIME: ${APP_MAX_EXECUTION_TIME:-1200}
|
APP_MAX_EXECUTION_TIME: ${APP_MAX_EXECUTION_TIME:-1200}
|
||||||
DIFY_BIND_ADDRESS: ${DIFY_BIND_ADDRESS:-0.0.0.0}
|
DIFY_BIND_ADDRESS: ${DIFY_BIND_ADDRESS:-0.0.0.0}
|
||||||
@@ -51,9 +53,11 @@ x-shared-env: &shared-api-worker-env
|
|||||||
ENABLE_WEBSITE_JINAREADER: ${ENABLE_WEBSITE_JINAREADER:-true}
|
ENABLE_WEBSITE_JINAREADER: ${ENABLE_WEBSITE_JINAREADER:-true}
|
||||||
ENABLE_WEBSITE_FIRECRAWL: ${ENABLE_WEBSITE_FIRECRAWL:-true}
|
ENABLE_WEBSITE_FIRECRAWL: ${ENABLE_WEBSITE_FIRECRAWL:-true}
|
||||||
ENABLE_WEBSITE_WATERCRAWL: ${ENABLE_WEBSITE_WATERCRAWL:-true}
|
ENABLE_WEBSITE_WATERCRAWL: ${ENABLE_WEBSITE_WATERCRAWL:-true}
|
||||||
|
NEXT_PUBLIC_ENABLE_SINGLE_DOLLAR_LATEX: ${NEXT_PUBLIC_ENABLE_SINGLE_DOLLAR_LATEX:-false}
|
||||||
|
DB_TYPE: ${DB_TYPE:-postgresql}
|
||||||
DB_USERNAME: ${DB_USERNAME:-postgres}
|
DB_USERNAME: ${DB_USERNAME:-postgres}
|
||||||
DB_PASSWORD: ${DB_PASSWORD:-difyai123456}
|
DB_PASSWORD: ${DB_PASSWORD:-difyai123456}
|
||||||
DB_HOST: ${DB_HOST:-db}
|
DB_HOST: ${DB_HOST:-db_postgres}
|
||||||
DB_PORT: ${DB_PORT:-5432}
|
DB_PORT: ${DB_PORT:-5432}
|
||||||
DB_DATABASE: ${DB_DATABASE:-dify}
|
DB_DATABASE: ${DB_DATABASE:-dify}
|
||||||
SQLALCHEMY_POOL_SIZE: ${SQLALCHEMY_POOL_SIZE:-30}
|
SQLALCHEMY_POOL_SIZE: ${SQLALCHEMY_POOL_SIZE:-30}
|
||||||
@@ -62,11 +66,18 @@ x-shared-env: &shared-api-worker-env
|
|||||||
SQLALCHEMY_ECHO: ${SQLALCHEMY_ECHO:-false}
|
SQLALCHEMY_ECHO: ${SQLALCHEMY_ECHO:-false}
|
||||||
SQLALCHEMY_POOL_PRE_PING: ${SQLALCHEMY_POOL_PRE_PING:-false}
|
SQLALCHEMY_POOL_PRE_PING: ${SQLALCHEMY_POOL_PRE_PING:-false}
|
||||||
SQLALCHEMY_POOL_USE_LIFO: ${SQLALCHEMY_POOL_USE_LIFO:-false}
|
SQLALCHEMY_POOL_USE_LIFO: ${SQLALCHEMY_POOL_USE_LIFO:-false}
|
||||||
|
SQLALCHEMY_POOL_TIMEOUT: ${SQLALCHEMY_POOL_TIMEOUT:-30}
|
||||||
POSTGRES_MAX_CONNECTIONS: ${POSTGRES_MAX_CONNECTIONS:-100}
|
POSTGRES_MAX_CONNECTIONS: ${POSTGRES_MAX_CONNECTIONS:-100}
|
||||||
POSTGRES_SHARED_BUFFERS: ${POSTGRES_SHARED_BUFFERS:-128MB}
|
POSTGRES_SHARED_BUFFERS: ${POSTGRES_SHARED_BUFFERS:-128MB}
|
||||||
POSTGRES_WORK_MEM: ${POSTGRES_WORK_MEM:-4MB}
|
POSTGRES_WORK_MEM: ${POSTGRES_WORK_MEM:-4MB}
|
||||||
POSTGRES_MAINTENANCE_WORK_MEM: ${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}
|
POSTGRES_MAINTENANCE_WORK_MEM: ${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}
|
||||||
POSTGRES_EFFECTIVE_CACHE_SIZE: ${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}
|
POSTGRES_EFFECTIVE_CACHE_SIZE: ${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}
|
||||||
|
POSTGRES_STATEMENT_TIMEOUT: ${POSTGRES_STATEMENT_TIMEOUT:-0}
|
||||||
|
POSTGRES_IDLE_IN_TRANSACTION_SESSION_TIMEOUT: ${POSTGRES_IDLE_IN_TRANSACTION_SESSION_TIMEOUT:-0}
|
||||||
|
MYSQL_MAX_CONNECTIONS: ${MYSQL_MAX_CONNECTIONS:-1000}
|
||||||
|
MYSQL_INNODB_BUFFER_POOL_SIZE: ${MYSQL_INNODB_BUFFER_POOL_SIZE:-512M}
|
||||||
|
MYSQL_INNODB_LOG_FILE_SIZE: ${MYSQL_INNODB_LOG_FILE_SIZE:-128M}
|
||||||
|
MYSQL_INNODB_FLUSH_LOG_AT_TRX_COMMIT: ${MYSQL_INNODB_FLUSH_LOG_AT_TRX_COMMIT:-2}
|
||||||
REDIS_HOST: ${REDIS_HOST:-redis}
|
REDIS_HOST: ${REDIS_HOST:-redis}
|
||||||
REDIS_PORT: ${REDIS_PORT:-6379}
|
REDIS_PORT: ${REDIS_PORT:-6379}
|
||||||
REDIS_USERNAME: ${REDIS_USERNAME:-}
|
REDIS_USERNAME: ${REDIS_USERNAME:-}
|
||||||
@@ -95,6 +106,9 @@ x-shared-env: &shared-api-worker-env
|
|||||||
CELERY_SENTINEL_SOCKET_TIMEOUT: ${CELERY_SENTINEL_SOCKET_TIMEOUT:-0.1}
|
CELERY_SENTINEL_SOCKET_TIMEOUT: ${CELERY_SENTINEL_SOCKET_TIMEOUT:-0.1}
|
||||||
WEB_API_CORS_ALLOW_ORIGINS: ${WEB_API_CORS_ALLOW_ORIGINS:-*}
|
WEB_API_CORS_ALLOW_ORIGINS: ${WEB_API_CORS_ALLOW_ORIGINS:-*}
|
||||||
CONSOLE_CORS_ALLOW_ORIGINS: ${CONSOLE_CORS_ALLOW_ORIGINS:-*}
|
CONSOLE_CORS_ALLOW_ORIGINS: ${CONSOLE_CORS_ALLOW_ORIGINS:-*}
|
||||||
|
COOKIE_DOMAIN: ${COOKIE_DOMAIN:-}
|
||||||
|
NEXT_PUBLIC_COOKIE_DOMAIN: ${NEXT_PUBLIC_COOKIE_DOMAIN:-}
|
||||||
|
NEXT_PUBLIC_BATCH_CONCURRENCY: ${NEXT_PUBLIC_BATCH_CONCURRENCY:-5}
|
||||||
STORAGE_TYPE: ${STORAGE_TYPE:-opendal}
|
STORAGE_TYPE: ${STORAGE_TYPE:-opendal}
|
||||||
OPENDAL_SCHEME: ${OPENDAL_SCHEME:-fs}
|
OPENDAL_SCHEME: ${OPENDAL_SCHEME:-fs}
|
||||||
OPENDAL_FS_ROOT: ${OPENDAL_FS_ROOT:-storage}
|
OPENDAL_FS_ROOT: ${OPENDAL_FS_ROOT:-storage}
|
||||||
@@ -121,11 +135,13 @@ x-shared-env: &shared-api-worker-env
|
|||||||
ALIYUN_OSS_REGION: ${ALIYUN_OSS_REGION:-ap-southeast-1}
|
ALIYUN_OSS_REGION: ${ALIYUN_OSS_REGION:-ap-southeast-1}
|
||||||
ALIYUN_OSS_AUTH_VERSION: ${ALIYUN_OSS_AUTH_VERSION:-v4}
|
ALIYUN_OSS_AUTH_VERSION: ${ALIYUN_OSS_AUTH_VERSION:-v4}
|
||||||
ALIYUN_OSS_PATH: ${ALIYUN_OSS_PATH:-your-path}
|
ALIYUN_OSS_PATH: ${ALIYUN_OSS_PATH:-your-path}
|
||||||
|
ALIYUN_CLOUDBOX_ID: ${ALIYUN_CLOUDBOX_ID:-your-cloudbox-id}
|
||||||
TENCENT_COS_BUCKET_NAME: ${TENCENT_COS_BUCKET_NAME:-your-bucket-name}
|
TENCENT_COS_BUCKET_NAME: ${TENCENT_COS_BUCKET_NAME:-your-bucket-name}
|
||||||
TENCENT_COS_SECRET_KEY: ${TENCENT_COS_SECRET_KEY:-your-secret-key}
|
TENCENT_COS_SECRET_KEY: ${TENCENT_COS_SECRET_KEY:-your-secret-key}
|
||||||
TENCENT_COS_SECRET_ID: ${TENCENT_COS_SECRET_ID:-your-secret-id}
|
TENCENT_COS_SECRET_ID: ${TENCENT_COS_SECRET_ID:-your-secret-id}
|
||||||
TENCENT_COS_REGION: ${TENCENT_COS_REGION:-your-region}
|
TENCENT_COS_REGION: ${TENCENT_COS_REGION:-your-region}
|
||||||
TENCENT_COS_SCHEME: ${TENCENT_COS_SCHEME:-your-scheme}
|
TENCENT_COS_SCHEME: ${TENCENT_COS_SCHEME:-your-scheme}
|
||||||
|
TENCENT_COS_CUSTOM_DOMAIN: ${TENCENT_COS_CUSTOM_DOMAIN:-your-custom-domain}
|
||||||
OCI_ENDPOINT: ${OCI_ENDPOINT:-https://your-object-storage-namespace.compat.objectstorage.us-ashburn-1.oraclecloud.com}
|
OCI_ENDPOINT: ${OCI_ENDPOINT:-https://your-object-storage-namespace.compat.objectstorage.us-ashburn-1.oraclecloud.com}
|
||||||
OCI_BUCKET_NAME: ${OCI_BUCKET_NAME:-your-bucket-name}
|
OCI_BUCKET_NAME: ${OCI_BUCKET_NAME:-your-bucket-name}
|
||||||
OCI_ACCESS_KEY: ${OCI_ACCESS_KEY:-your-access-key}
|
OCI_ACCESS_KEY: ${OCI_ACCESS_KEY:-your-access-key}
|
||||||
@@ -135,6 +151,7 @@ x-shared-env: &shared-api-worker-env
|
|||||||
HUAWEI_OBS_SECRET_KEY: ${HUAWEI_OBS_SECRET_KEY:-your-secret-key}
|
HUAWEI_OBS_SECRET_KEY: ${HUAWEI_OBS_SECRET_KEY:-your-secret-key}
|
||||||
HUAWEI_OBS_ACCESS_KEY: ${HUAWEI_OBS_ACCESS_KEY:-your-access-key}
|
HUAWEI_OBS_ACCESS_KEY: ${HUAWEI_OBS_ACCESS_KEY:-your-access-key}
|
||||||
HUAWEI_OBS_SERVER: ${HUAWEI_OBS_SERVER:-your-server-url}
|
HUAWEI_OBS_SERVER: ${HUAWEI_OBS_SERVER:-your-server-url}
|
||||||
|
HUAWEI_OBS_PATH_STYLE: ${HUAWEI_OBS_PATH_STYLE:-false}
|
||||||
VOLCENGINE_TOS_BUCKET_NAME: ${VOLCENGINE_TOS_BUCKET_NAME:-your-bucket-name}
|
VOLCENGINE_TOS_BUCKET_NAME: ${VOLCENGINE_TOS_BUCKET_NAME:-your-bucket-name}
|
||||||
VOLCENGINE_TOS_SECRET_KEY: ${VOLCENGINE_TOS_SECRET_KEY:-your-secret-key}
|
VOLCENGINE_TOS_SECRET_KEY: ${VOLCENGINE_TOS_SECRET_KEY:-your-secret-key}
|
||||||
VOLCENGINE_TOS_ACCESS_KEY: ${VOLCENGINE_TOS_ACCESS_KEY:-your-access-key}
|
VOLCENGINE_TOS_ACCESS_KEY: ${VOLCENGINE_TOS_ACCESS_KEY:-your-access-key}
|
||||||
@@ -151,6 +168,18 @@ x-shared-env: &shared-api-worker-env
|
|||||||
VECTOR_INDEX_NAME_PREFIX: ${VECTOR_INDEX_NAME_PREFIX:-Vector_index}
|
VECTOR_INDEX_NAME_PREFIX: ${VECTOR_INDEX_NAME_PREFIX:-Vector_index}
|
||||||
WEAVIATE_ENDPOINT: ${WEAVIATE_ENDPOINT:-http://weaviate:8080}
|
WEAVIATE_ENDPOINT: ${WEAVIATE_ENDPOINT:-http://weaviate:8080}
|
||||||
WEAVIATE_API_KEY: ${WEAVIATE_API_KEY:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}
|
WEAVIATE_API_KEY: ${WEAVIATE_API_KEY:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}
|
||||||
|
WEAVIATE_GRPC_ENDPOINT: ${WEAVIATE_GRPC_ENDPOINT:-grpc://weaviate:50051}
|
||||||
|
WEAVIATE_TOKENIZATION: ${WEAVIATE_TOKENIZATION:-word}
|
||||||
|
OCEANBASE_VECTOR_HOST: ${OCEANBASE_VECTOR_HOST:-oceanbase}
|
||||||
|
OCEANBASE_VECTOR_PORT: ${OCEANBASE_VECTOR_PORT:-2881}
|
||||||
|
OCEANBASE_VECTOR_USER: ${OCEANBASE_VECTOR_USER:-root@test}
|
||||||
|
OCEANBASE_VECTOR_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
||||||
|
OCEANBASE_VECTOR_DATABASE: ${OCEANBASE_VECTOR_DATABASE:-test}
|
||||||
|
OCEANBASE_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
|
||||||
|
OCEANBASE_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
|
||||||
|
OCEANBASE_ENABLE_HYBRID_SEARCH: ${OCEANBASE_ENABLE_HYBRID_SEARCH:-false}
|
||||||
|
OCEANBASE_FULLTEXT_PARSER: ${OCEANBASE_FULLTEXT_PARSER:-ik}
|
||||||
|
SEEKDB_MEMORY_LIMIT: ${SEEKDB_MEMORY_LIMIT:-2G}
|
||||||
QDRANT_URL: ${QDRANT_URL:-http://qdrant:6333}
|
QDRANT_URL: ${QDRANT_URL:-http://qdrant:6333}
|
||||||
QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456}
|
QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456}
|
||||||
QDRANT_CLIENT_TIMEOUT: ${QDRANT_CLIENT_TIMEOUT:-20}
|
QDRANT_CLIENT_TIMEOUT: ${QDRANT_CLIENT_TIMEOUT:-20}
|
||||||
@@ -243,6 +272,13 @@ x-shared-env: &shared-api-worker-env
|
|||||||
ORACLE_WALLET_LOCATION: ${ORACLE_WALLET_LOCATION:-/app/api/storage/wallet}
|
ORACLE_WALLET_LOCATION: ${ORACLE_WALLET_LOCATION:-/app/api/storage/wallet}
|
||||||
ORACLE_WALLET_PASSWORD: ${ORACLE_WALLET_PASSWORD:-dify}
|
ORACLE_WALLET_PASSWORD: ${ORACLE_WALLET_PASSWORD:-dify}
|
||||||
ORACLE_IS_AUTONOMOUS: ${ORACLE_IS_AUTONOMOUS:-false}
|
ORACLE_IS_AUTONOMOUS: ${ORACLE_IS_AUTONOMOUS:-false}
|
||||||
|
ALIBABACLOUD_MYSQL_HOST: ${ALIBABACLOUD_MYSQL_HOST:-127.0.0.1}
|
||||||
|
ALIBABACLOUD_MYSQL_PORT: ${ALIBABACLOUD_MYSQL_PORT:-3306}
|
||||||
|
ALIBABACLOUD_MYSQL_USER: ${ALIBABACLOUD_MYSQL_USER:-root}
|
||||||
|
ALIBABACLOUD_MYSQL_PASSWORD: ${ALIBABACLOUD_MYSQL_PASSWORD:-difyai123456}
|
||||||
|
ALIBABACLOUD_MYSQL_DATABASE: ${ALIBABACLOUD_MYSQL_DATABASE:-dify}
|
||||||
|
ALIBABACLOUD_MYSQL_MAX_CONNECTION: ${ALIBABACLOUD_MYSQL_MAX_CONNECTION:-5}
|
||||||
|
ALIBABACLOUD_MYSQL_HNSW_M: ${ALIBABACLOUD_MYSQL_HNSW_M:-6}
|
||||||
RELYT_HOST: ${RELYT_HOST:-db}
|
RELYT_HOST: ${RELYT_HOST:-db}
|
||||||
RELYT_PORT: ${RELYT_PORT:-5432}
|
RELYT_PORT: ${RELYT_PORT:-5432}
|
||||||
RELYT_USER: ${RELYT_USER:-postgres}
|
RELYT_USER: ${RELYT_USER:-postgres}
|
||||||
@@ -285,6 +321,8 @@ x-shared-env: &shared-api-worker-env
|
|||||||
BAIDU_VECTOR_DB_DATABASE: ${BAIDU_VECTOR_DB_DATABASE:-dify}
|
BAIDU_VECTOR_DB_DATABASE: ${BAIDU_VECTOR_DB_DATABASE:-dify}
|
||||||
BAIDU_VECTOR_DB_SHARD: ${BAIDU_VECTOR_DB_SHARD:-1}
|
BAIDU_VECTOR_DB_SHARD: ${BAIDU_VECTOR_DB_SHARD:-1}
|
||||||
BAIDU_VECTOR_DB_REPLICAS: ${BAIDU_VECTOR_DB_REPLICAS:-3}
|
BAIDU_VECTOR_DB_REPLICAS: ${BAIDU_VECTOR_DB_REPLICAS:-3}
|
||||||
|
BAIDU_VECTOR_DB_INVERTED_INDEX_ANALYZER: ${BAIDU_VECTOR_DB_INVERTED_INDEX_ANALYZER:-DEFAULT_ANALYZER}
|
||||||
|
BAIDU_VECTOR_DB_INVERTED_INDEX_PARSER_MODE: ${BAIDU_VECTOR_DB_INVERTED_INDEX_PARSER_MODE:-COARSE_MODE}
|
||||||
VIKINGDB_ACCESS_KEY: ${VIKINGDB_ACCESS_KEY:-your-ak}
|
VIKINGDB_ACCESS_KEY: ${VIKINGDB_ACCESS_KEY:-your-ak}
|
||||||
VIKINGDB_SECRET_KEY: ${VIKINGDB_SECRET_KEY:-your-sk}
|
VIKINGDB_SECRET_KEY: ${VIKINGDB_SECRET_KEY:-your-sk}
|
||||||
VIKINGDB_REGION: ${VIKINGDB_REGION:-cn-shanghai}
|
VIKINGDB_REGION: ${VIKINGDB_REGION:-cn-shanghai}
|
||||||
@@ -292,18 +330,11 @@ x-shared-env: &shared-api-worker-env
|
|||||||
VIKINGDB_SCHEMA: ${VIKINGDB_SCHEMA:-http}
|
VIKINGDB_SCHEMA: ${VIKINGDB_SCHEMA:-http}
|
||||||
VIKINGDB_CONNECTION_TIMEOUT: ${VIKINGDB_CONNECTION_TIMEOUT:-30}
|
VIKINGDB_CONNECTION_TIMEOUT: ${VIKINGDB_CONNECTION_TIMEOUT:-30}
|
||||||
VIKINGDB_SOCKET_TIMEOUT: ${VIKINGDB_SOCKET_TIMEOUT:-30}
|
VIKINGDB_SOCKET_TIMEOUT: ${VIKINGDB_SOCKET_TIMEOUT:-30}
|
||||||
LINDORM_URL: ${LINDORM_URL:-http://lindorm:30070}
|
LINDORM_URL: ${LINDORM_URL:-http://localhost:30070}
|
||||||
LINDORM_USERNAME: ${LINDORM_USERNAME:-lindorm}
|
LINDORM_USERNAME: ${LINDORM_USERNAME:-admin}
|
||||||
LINDORM_PASSWORD: ${LINDORM_PASSWORD:-lindorm}
|
LINDORM_PASSWORD: ${LINDORM_PASSWORD:-admin}
|
||||||
|
LINDORM_USING_UGC: ${LINDORM_USING_UGC:-True}
|
||||||
LINDORM_QUERY_TIMEOUT: ${LINDORM_QUERY_TIMEOUT:-1}
|
LINDORM_QUERY_TIMEOUT: ${LINDORM_QUERY_TIMEOUT:-1}
|
||||||
OCEANBASE_VECTOR_HOST: ${OCEANBASE_VECTOR_HOST:-oceanbase}
|
|
||||||
OCEANBASE_VECTOR_PORT: ${OCEANBASE_VECTOR_PORT:-2881}
|
|
||||||
OCEANBASE_VECTOR_USER: ${OCEANBASE_VECTOR_USER:-root@test}
|
|
||||||
OCEANBASE_VECTOR_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
|
||||||
OCEANBASE_VECTOR_DATABASE: ${OCEANBASE_VECTOR_DATABASE:-test}
|
|
||||||
OCEANBASE_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
|
|
||||||
OCEANBASE_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
|
|
||||||
OCEANBASE_ENABLE_HYBRID_SEARCH: ${OCEANBASE_ENABLE_HYBRID_SEARCH:-false}
|
|
||||||
OPENGAUSS_HOST: ${OPENGAUSS_HOST:-opengauss}
|
OPENGAUSS_HOST: ${OPENGAUSS_HOST:-opengauss}
|
||||||
OPENGAUSS_PORT: ${OPENGAUSS_PORT:-6600}
|
OPENGAUSS_PORT: ${OPENGAUSS_PORT:-6600}
|
||||||
OPENGAUSS_USER: ${OPENGAUSS_USER:-postgres}
|
OPENGAUSS_USER: ${OPENGAUSS_USER:-postgres}
|
||||||
@@ -334,8 +365,26 @@ x-shared-env: &shared-api-worker-env
|
|||||||
CLICKZETTA_ANALYZER_TYPE: ${CLICKZETTA_ANALYZER_TYPE:-chinese}
|
CLICKZETTA_ANALYZER_TYPE: ${CLICKZETTA_ANALYZER_TYPE:-chinese}
|
||||||
CLICKZETTA_ANALYZER_MODE: ${CLICKZETTA_ANALYZER_MODE:-smart}
|
CLICKZETTA_ANALYZER_MODE: ${CLICKZETTA_ANALYZER_MODE:-smart}
|
||||||
CLICKZETTA_VECTOR_DISTANCE_FUNCTION: ${CLICKZETTA_VECTOR_DISTANCE_FUNCTION:-cosine_distance}
|
CLICKZETTA_VECTOR_DISTANCE_FUNCTION: ${CLICKZETTA_VECTOR_DISTANCE_FUNCTION:-cosine_distance}
|
||||||
|
IRIS_HOST: ${IRIS_HOST:-iris}
|
||||||
|
IRIS_SUPER_SERVER_PORT: ${IRIS_SUPER_SERVER_PORT:-1972}
|
||||||
|
IRIS_WEB_SERVER_PORT: ${IRIS_WEB_SERVER_PORT:-52773}
|
||||||
|
IRIS_USER: ${IRIS_USER:-_SYSTEM}
|
||||||
|
IRIS_PASSWORD: ${IRIS_PASSWORD:-Dify@1234}
|
||||||
|
IRIS_DATABASE: ${IRIS_DATABASE:-USER}
|
||||||
|
IRIS_SCHEMA: ${IRIS_SCHEMA:-dify}
|
||||||
|
IRIS_CONNECTION_URL: ${IRIS_CONNECTION_URL:-}
|
||||||
|
IRIS_MIN_CONNECTION: ${IRIS_MIN_CONNECTION:-1}
|
||||||
|
IRIS_MAX_CONNECTION: ${IRIS_MAX_CONNECTION:-3}
|
||||||
|
IRIS_TEXT_INDEX: ${IRIS_TEXT_INDEX:-true}
|
||||||
|
IRIS_TEXT_INDEX_LANGUAGE: ${IRIS_TEXT_INDEX_LANGUAGE:-en}
|
||||||
|
IRIS_TIMEZONE: ${IRIS_TIMEZONE:-UTC}
|
||||||
UPLOAD_FILE_SIZE_LIMIT: ${UPLOAD_FILE_SIZE_LIMIT:-15}
|
UPLOAD_FILE_SIZE_LIMIT: ${UPLOAD_FILE_SIZE_LIMIT:-15}
|
||||||
UPLOAD_FILE_BATCH_LIMIT: ${UPLOAD_FILE_BATCH_LIMIT:-5}
|
UPLOAD_FILE_BATCH_LIMIT: ${UPLOAD_FILE_BATCH_LIMIT:-5}
|
||||||
|
UPLOAD_FILE_EXTENSION_BLACKLIST: ${UPLOAD_FILE_EXTENSION_BLACKLIST:-}
|
||||||
|
SINGLE_CHUNK_ATTACHMENT_LIMIT: ${SINGLE_CHUNK_ATTACHMENT_LIMIT:-10}
|
||||||
|
IMAGE_FILE_BATCH_LIMIT: ${IMAGE_FILE_BATCH_LIMIT:-10}
|
||||||
|
ATTACHMENT_IMAGE_FILE_SIZE_LIMIT: ${ATTACHMENT_IMAGE_FILE_SIZE_LIMIT:-2}
|
||||||
|
ATTACHMENT_IMAGE_DOWNLOAD_TIMEOUT: ${ATTACHMENT_IMAGE_DOWNLOAD_TIMEOUT:-60}
|
||||||
ETL_TYPE: ${ETL_TYPE:-dify}
|
ETL_TYPE: ${ETL_TYPE:-dify}
|
||||||
UNSTRUCTURED_API_URL: ${UNSTRUCTURED_API_URL:-}
|
UNSTRUCTURED_API_URL: ${UNSTRUCTURED_API_URL:-}
|
||||||
UNSTRUCTURED_API_KEY: ${UNSTRUCTURED_API_KEY:-}
|
UNSTRUCTURED_API_KEY: ${UNSTRUCTURED_API_KEY:-}
|
||||||
@@ -372,28 +421,36 @@ x-shared-env: &shared-api-worker-env
|
|||||||
INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-4000}
|
INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-4000}
|
||||||
INVITE_EXPIRY_HOURS: ${INVITE_EXPIRY_HOURS:-72}
|
INVITE_EXPIRY_HOURS: ${INVITE_EXPIRY_HOURS:-72}
|
||||||
RESET_PASSWORD_TOKEN_EXPIRY_MINUTES: ${RESET_PASSWORD_TOKEN_EXPIRY_MINUTES:-5}
|
RESET_PASSWORD_TOKEN_EXPIRY_MINUTES: ${RESET_PASSWORD_TOKEN_EXPIRY_MINUTES:-5}
|
||||||
|
EMAIL_REGISTER_TOKEN_EXPIRY_MINUTES: ${EMAIL_REGISTER_TOKEN_EXPIRY_MINUTES:-5}
|
||||||
CHANGE_EMAIL_TOKEN_EXPIRY_MINUTES: ${CHANGE_EMAIL_TOKEN_EXPIRY_MINUTES:-5}
|
CHANGE_EMAIL_TOKEN_EXPIRY_MINUTES: ${CHANGE_EMAIL_TOKEN_EXPIRY_MINUTES:-5}
|
||||||
OWNER_TRANSFER_TOKEN_EXPIRY_MINUTES: ${OWNER_TRANSFER_TOKEN_EXPIRY_MINUTES:-5}
|
OWNER_TRANSFER_TOKEN_EXPIRY_MINUTES: ${OWNER_TRANSFER_TOKEN_EXPIRY_MINUTES:-5}
|
||||||
CODE_EXECUTION_ENDPOINT: ${CODE_EXECUTION_ENDPOINT:-http://sandbox:8194}
|
CODE_EXECUTION_ENDPOINT: ${CODE_EXECUTION_ENDPOINT:-http://sandbox:8194}
|
||||||
CODE_EXECUTION_API_KEY: ${CODE_EXECUTION_API_KEY:-dify-sandbox}
|
CODE_EXECUTION_API_KEY: ${CODE_EXECUTION_API_KEY:-dify-sandbox}
|
||||||
|
CODE_EXECUTION_SSL_VERIFY: ${CODE_EXECUTION_SSL_VERIFY:-True}
|
||||||
|
CODE_EXECUTION_POOL_MAX_CONNECTIONS: ${CODE_EXECUTION_POOL_MAX_CONNECTIONS:-100}
|
||||||
|
CODE_EXECUTION_POOL_MAX_KEEPALIVE_CONNECTIONS: ${CODE_EXECUTION_POOL_MAX_KEEPALIVE_CONNECTIONS:-20}
|
||||||
|
CODE_EXECUTION_POOL_KEEPALIVE_EXPIRY: ${CODE_EXECUTION_POOL_KEEPALIVE_EXPIRY:-5.0}
|
||||||
CODE_MAX_NUMBER: ${CODE_MAX_NUMBER:-9223372036854775807}
|
CODE_MAX_NUMBER: ${CODE_MAX_NUMBER:-9223372036854775807}
|
||||||
CODE_MIN_NUMBER: ${CODE_MIN_NUMBER:--9223372036854775808}
|
CODE_MIN_NUMBER: ${CODE_MIN_NUMBER:--9223372036854775808}
|
||||||
CODE_MAX_DEPTH: ${CODE_MAX_DEPTH:-5}
|
CODE_MAX_DEPTH: ${CODE_MAX_DEPTH:-5}
|
||||||
CODE_MAX_PRECISION: ${CODE_MAX_PRECISION:-20}
|
CODE_MAX_PRECISION: ${CODE_MAX_PRECISION:-20}
|
||||||
CODE_MAX_STRING_LENGTH: ${CODE_MAX_STRING_LENGTH:-80000}
|
CODE_MAX_STRING_LENGTH: ${CODE_MAX_STRING_LENGTH:-400000}
|
||||||
CODE_MAX_STRING_ARRAY_LENGTH: ${CODE_MAX_STRING_ARRAY_LENGTH:-30}
|
CODE_MAX_STRING_ARRAY_LENGTH: ${CODE_MAX_STRING_ARRAY_LENGTH:-30}
|
||||||
CODE_MAX_OBJECT_ARRAY_LENGTH: ${CODE_MAX_OBJECT_ARRAY_LENGTH:-30}
|
CODE_MAX_OBJECT_ARRAY_LENGTH: ${CODE_MAX_OBJECT_ARRAY_LENGTH:-30}
|
||||||
CODE_MAX_NUMBER_ARRAY_LENGTH: ${CODE_MAX_NUMBER_ARRAY_LENGTH:-1000}
|
CODE_MAX_NUMBER_ARRAY_LENGTH: ${CODE_MAX_NUMBER_ARRAY_LENGTH:-1000}
|
||||||
CODE_EXECUTION_CONNECT_TIMEOUT: ${CODE_EXECUTION_CONNECT_TIMEOUT:-10}
|
CODE_EXECUTION_CONNECT_TIMEOUT: ${CODE_EXECUTION_CONNECT_TIMEOUT:-10}
|
||||||
CODE_EXECUTION_READ_TIMEOUT: ${CODE_EXECUTION_READ_TIMEOUT:-60}
|
CODE_EXECUTION_READ_TIMEOUT: ${CODE_EXECUTION_READ_TIMEOUT:-60}
|
||||||
CODE_EXECUTION_WRITE_TIMEOUT: ${CODE_EXECUTION_WRITE_TIMEOUT:-10}
|
CODE_EXECUTION_WRITE_TIMEOUT: ${CODE_EXECUTION_WRITE_TIMEOUT:-10}
|
||||||
TEMPLATE_TRANSFORM_MAX_LENGTH: ${TEMPLATE_TRANSFORM_MAX_LENGTH:-80000}
|
TEMPLATE_TRANSFORM_MAX_LENGTH: ${TEMPLATE_TRANSFORM_MAX_LENGTH:-400000}
|
||||||
WORKFLOW_MAX_EXECUTION_STEPS: ${WORKFLOW_MAX_EXECUTION_STEPS:-500}
|
WORKFLOW_MAX_EXECUTION_STEPS: ${WORKFLOW_MAX_EXECUTION_STEPS:-500}
|
||||||
WORKFLOW_MAX_EXECUTION_TIME: ${WORKFLOW_MAX_EXECUTION_TIME:-1200}
|
WORKFLOW_MAX_EXECUTION_TIME: ${WORKFLOW_MAX_EXECUTION_TIME:-1200}
|
||||||
WORKFLOW_CALL_MAX_DEPTH: ${WORKFLOW_CALL_MAX_DEPTH:-5}
|
WORKFLOW_CALL_MAX_DEPTH: ${WORKFLOW_CALL_MAX_DEPTH:-5}
|
||||||
MAX_VARIABLE_SIZE: ${MAX_VARIABLE_SIZE:-204800}
|
MAX_VARIABLE_SIZE: ${MAX_VARIABLE_SIZE:-204800}
|
||||||
WORKFLOW_PARALLEL_DEPTH_LIMIT: ${WORKFLOW_PARALLEL_DEPTH_LIMIT:-3}
|
|
||||||
WORKFLOW_FILE_UPLOAD_LIMIT: ${WORKFLOW_FILE_UPLOAD_LIMIT:-10}
|
WORKFLOW_FILE_UPLOAD_LIMIT: ${WORKFLOW_FILE_UPLOAD_LIMIT:-10}
|
||||||
|
GRAPH_ENGINE_MIN_WORKERS: ${GRAPH_ENGINE_MIN_WORKERS:-1}
|
||||||
|
GRAPH_ENGINE_MAX_WORKERS: ${GRAPH_ENGINE_MAX_WORKERS:-10}
|
||||||
|
GRAPH_ENGINE_SCALE_UP_THRESHOLD: ${GRAPH_ENGINE_SCALE_UP_THRESHOLD:-3}
|
||||||
|
GRAPH_ENGINE_SCALE_DOWN_IDLE_TIME: ${GRAPH_ENGINE_SCALE_DOWN_IDLE_TIME:-5.0}
|
||||||
WORKFLOW_NODE_EXECUTION_STORAGE: ${WORKFLOW_NODE_EXECUTION_STORAGE:-rdbms}
|
WORKFLOW_NODE_EXECUTION_STORAGE: ${WORKFLOW_NODE_EXECUTION_STORAGE:-rdbms}
|
||||||
CORE_WORKFLOW_EXECUTION_REPOSITORY: ${CORE_WORKFLOW_EXECUTION_REPOSITORY:-core.repositories.sqlalchemy_workflow_execution_repository.SQLAlchemyWorkflowExecutionRepository}
|
CORE_WORKFLOW_EXECUTION_REPOSITORY: ${CORE_WORKFLOW_EXECUTION_REPOSITORY:-core.repositories.sqlalchemy_workflow_execution_repository.SQLAlchemyWorkflowExecutionRepository}
|
||||||
CORE_WORKFLOW_NODE_EXECUTION_REPOSITORY: ${CORE_WORKFLOW_NODE_EXECUTION_REPOSITORY:-core.repositories.sqlalchemy_workflow_node_execution_repository.SQLAlchemyWorkflowNodeExecutionRepository}
|
CORE_WORKFLOW_NODE_EXECUTION_REPOSITORY: ${CORE_WORKFLOW_NODE_EXECUTION_REPOSITORY:-core.repositories.sqlalchemy_workflow_node_execution_repository.SQLAlchemyWorkflowNodeExecutionRepository}
|
||||||
@@ -402,9 +459,21 @@ x-shared-env: &shared-api-worker-env
|
|||||||
WORKFLOW_LOG_CLEANUP_ENABLED: ${WORKFLOW_LOG_CLEANUP_ENABLED:-false}
|
WORKFLOW_LOG_CLEANUP_ENABLED: ${WORKFLOW_LOG_CLEANUP_ENABLED:-false}
|
||||||
WORKFLOW_LOG_RETENTION_DAYS: ${WORKFLOW_LOG_RETENTION_DAYS:-30}
|
WORKFLOW_LOG_RETENTION_DAYS: ${WORKFLOW_LOG_RETENTION_DAYS:-30}
|
||||||
WORKFLOW_LOG_CLEANUP_BATCH_SIZE: ${WORKFLOW_LOG_CLEANUP_BATCH_SIZE:-100}
|
WORKFLOW_LOG_CLEANUP_BATCH_SIZE: ${WORKFLOW_LOG_CLEANUP_BATCH_SIZE:-100}
|
||||||
|
ALIYUN_SLS_ACCESS_KEY_ID: ${ALIYUN_SLS_ACCESS_KEY_ID:-}
|
||||||
|
ALIYUN_SLS_ACCESS_KEY_SECRET: ${ALIYUN_SLS_ACCESS_KEY_SECRET:-}
|
||||||
|
ALIYUN_SLS_ENDPOINT: ${ALIYUN_SLS_ENDPOINT:-}
|
||||||
|
ALIYUN_SLS_REGION: ${ALIYUN_SLS_REGION:-}
|
||||||
|
ALIYUN_SLS_PROJECT_NAME: ${ALIYUN_SLS_PROJECT_NAME:-}
|
||||||
|
ALIYUN_SLS_LOGSTORE_TTL: ${ALIYUN_SLS_LOGSTORE_TTL:-365}
|
||||||
|
LOGSTORE_DUAL_WRITE_ENABLED: ${LOGSTORE_DUAL_WRITE_ENABLED:-false}
|
||||||
|
LOGSTORE_DUAL_READ_ENABLED: ${LOGSTORE_DUAL_READ_ENABLED:-true}
|
||||||
HTTP_REQUEST_NODE_MAX_BINARY_SIZE: ${HTTP_REQUEST_NODE_MAX_BINARY_SIZE:-10485760}
|
HTTP_REQUEST_NODE_MAX_BINARY_SIZE: ${HTTP_REQUEST_NODE_MAX_BINARY_SIZE:-10485760}
|
||||||
HTTP_REQUEST_NODE_MAX_TEXT_SIZE: ${HTTP_REQUEST_NODE_MAX_TEXT_SIZE:-1048576}
|
HTTP_REQUEST_NODE_MAX_TEXT_SIZE: ${HTTP_REQUEST_NODE_MAX_TEXT_SIZE:-1048576}
|
||||||
HTTP_REQUEST_NODE_SSL_VERIFY: ${HTTP_REQUEST_NODE_SSL_VERIFY:-True}
|
HTTP_REQUEST_NODE_SSL_VERIFY: ${HTTP_REQUEST_NODE_SSL_VERIFY:-True}
|
||||||
|
HTTP_REQUEST_MAX_CONNECT_TIMEOUT: ${HTTP_REQUEST_MAX_CONNECT_TIMEOUT:-10}
|
||||||
|
HTTP_REQUEST_MAX_READ_TIMEOUT: ${HTTP_REQUEST_MAX_READ_TIMEOUT:-600}
|
||||||
|
HTTP_REQUEST_MAX_WRITE_TIMEOUT: ${HTTP_REQUEST_MAX_WRITE_TIMEOUT:-600}
|
||||||
|
WEBHOOK_REQUEST_BODY_MAX_SIZE: ${WEBHOOK_REQUEST_BODY_MAX_SIZE:-10485760}
|
||||||
RESPECT_XFORWARD_HEADERS_ENABLED: ${RESPECT_XFORWARD_HEADERS_ENABLED:-false}
|
RESPECT_XFORWARD_HEADERS_ENABLED: ${RESPECT_XFORWARD_HEADERS_ENABLED:-false}
|
||||||
SSRF_PROXY_HTTP_URL: ${SSRF_PROXY_HTTP_URL:-http://ssrf_proxy:3128}
|
SSRF_PROXY_HTTP_URL: ${SSRF_PROXY_HTTP_URL:-http://ssrf_proxy:3128}
|
||||||
SSRF_PROXY_HTTPS_URL: ${SSRF_PROXY_HTTPS_URL:-http://ssrf_proxy:3128}
|
SSRF_PROXY_HTTPS_URL: ${SSRF_PROXY_HTTPS_URL:-http://ssrf_proxy:3128}
|
||||||
@@ -415,10 +484,8 @@ x-shared-env: &shared-api-worker-env
|
|||||||
TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
|
TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
|
||||||
ALLOW_UNSAFE_DATA_SCHEME: ${ALLOW_UNSAFE_DATA_SCHEME:-false}
|
ALLOW_UNSAFE_DATA_SCHEME: ${ALLOW_UNSAFE_DATA_SCHEME:-false}
|
||||||
MAX_TREE_DEPTH: ${MAX_TREE_DEPTH:-50}
|
MAX_TREE_DEPTH: ${MAX_TREE_DEPTH:-50}
|
||||||
POSTGRES_USER: ${POSTGRES_USER:-${DB_USERNAME}}
|
|
||||||
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-${DB_PASSWORD}}
|
|
||||||
POSTGRES_DB: ${POSTGRES_DB:-${DB_DATABASE}}
|
|
||||||
PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
|
PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
|
||||||
|
MYSQL_HOST_VOLUME: ${MYSQL_HOST_VOLUME:-./volumes/mysql/data}
|
||||||
SANDBOX_API_KEY: ${SANDBOX_API_KEY:-dify-sandbox}
|
SANDBOX_API_KEY: ${SANDBOX_API_KEY:-dify-sandbox}
|
||||||
SANDBOX_GIN_MODE: ${SANDBOX_GIN_MODE:-release}
|
SANDBOX_GIN_MODE: ${SANDBOX_GIN_MODE:-release}
|
||||||
SANDBOX_WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15}
|
SANDBOX_WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15}
|
||||||
@@ -436,6 +503,10 @@ x-shared-env: &shared-api-worker-env
|
|||||||
WEAVIATE_AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
|
WEAVIATE_AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
|
||||||
WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
|
WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
|
||||||
WEAVIATE_AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
|
WEAVIATE_AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
|
||||||
|
WEAVIATE_DISABLE_TELEMETRY: ${WEAVIATE_DISABLE_TELEMETRY:-false}
|
||||||
|
WEAVIATE_ENABLE_TOKENIZER_GSE: ${WEAVIATE_ENABLE_TOKENIZER_GSE:-false}
|
||||||
|
WEAVIATE_ENABLE_TOKENIZER_KAGOME_JA: ${WEAVIATE_ENABLE_TOKENIZER_KAGOME_JA:-false}
|
||||||
|
WEAVIATE_ENABLE_TOKENIZER_KAGOME_KR: ${WEAVIATE_ENABLE_TOKENIZER_KAGOME_KR:-false}
|
||||||
CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456}
|
CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456}
|
||||||
CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
|
CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
|
||||||
CHROMA_IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
|
CHROMA_IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
|
||||||
@@ -469,7 +540,7 @@ x-shared-env: &shared-api-worker-env
|
|||||||
NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443}
|
NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443}
|
||||||
NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
|
NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
|
||||||
NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
|
NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
|
||||||
NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3}
|
NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.2 TLSv1.3}
|
||||||
NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
|
NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
|
||||||
NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-100M}
|
NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-100M}
|
||||||
NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
|
NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
|
||||||
@@ -487,6 +558,9 @@ x-shared-env: &shared-api-worker-env
|
|||||||
SSRF_DEFAULT_CONNECT_TIME_OUT: ${SSRF_DEFAULT_CONNECT_TIME_OUT:-5}
|
SSRF_DEFAULT_CONNECT_TIME_OUT: ${SSRF_DEFAULT_CONNECT_TIME_OUT:-5}
|
||||||
SSRF_DEFAULT_READ_TIME_OUT: ${SSRF_DEFAULT_READ_TIME_OUT:-5}
|
SSRF_DEFAULT_READ_TIME_OUT: ${SSRF_DEFAULT_READ_TIME_OUT:-5}
|
||||||
SSRF_DEFAULT_WRITE_TIME_OUT: ${SSRF_DEFAULT_WRITE_TIME_OUT:-5}
|
SSRF_DEFAULT_WRITE_TIME_OUT: ${SSRF_DEFAULT_WRITE_TIME_OUT:-5}
|
||||||
|
SSRF_POOL_MAX_CONNECTIONS: ${SSRF_POOL_MAX_CONNECTIONS:-100}
|
||||||
|
SSRF_POOL_MAX_KEEPALIVE_CONNECTIONS: ${SSRF_POOL_MAX_KEEPALIVE_CONNECTIONS:-20}
|
||||||
|
SSRF_POOL_KEEPALIVE_EXPIRY: ${SSRF_POOL_KEEPALIVE_EXPIRY:-5.0}
|
||||||
EXPOSE_NGINX_PORT: ${EXPOSE_NGINX_PORT:-80}
|
EXPOSE_NGINX_PORT: ${EXPOSE_NGINX_PORT:-80}
|
||||||
EXPOSE_NGINX_SSL_PORT: ${EXPOSE_NGINX_SSL_PORT:-443}
|
EXPOSE_NGINX_SSL_PORT: ${EXPOSE_NGINX_SSL_PORT:-443}
|
||||||
POSITION_TOOL_PINS: ${POSITION_TOOL_PINS:-}
|
POSITION_TOOL_PINS: ${POSITION_TOOL_PINS:-}
|
||||||
@@ -516,10 +590,12 @@ x-shared-env: &shared-api-worker-env
|
|||||||
MARKETPLACE_ENABLED: ${MARKETPLACE_ENABLED:-true}
|
MARKETPLACE_ENABLED: ${MARKETPLACE_ENABLED:-true}
|
||||||
MARKETPLACE_API_URL: ${MARKETPLACE_API_URL:-https://marketplace.dify.ai}
|
MARKETPLACE_API_URL: ${MARKETPLACE_API_URL:-https://marketplace.dify.ai}
|
||||||
FORCE_VERIFYING_SIGNATURE: ${FORCE_VERIFYING_SIGNATURE:-true}
|
FORCE_VERIFYING_SIGNATURE: ${FORCE_VERIFYING_SIGNATURE:-true}
|
||||||
|
ENFORCE_LANGGENIUS_PLUGIN_SIGNATURES: ${ENFORCE_LANGGENIUS_PLUGIN_SIGNATURES:-true}
|
||||||
PLUGIN_STDIO_BUFFER_SIZE: ${PLUGIN_STDIO_BUFFER_SIZE:-1024}
|
PLUGIN_STDIO_BUFFER_SIZE: ${PLUGIN_STDIO_BUFFER_SIZE:-1024}
|
||||||
PLUGIN_STDIO_MAX_BUFFER_SIZE: ${PLUGIN_STDIO_MAX_BUFFER_SIZE:-5242880}
|
PLUGIN_STDIO_MAX_BUFFER_SIZE: ${PLUGIN_STDIO_MAX_BUFFER_SIZE:-5242880}
|
||||||
PLUGIN_PYTHON_ENV_INIT_TIMEOUT: ${PLUGIN_PYTHON_ENV_INIT_TIMEOUT:-120}
|
PLUGIN_PYTHON_ENV_INIT_TIMEOUT: ${PLUGIN_PYTHON_ENV_INIT_TIMEOUT:-120}
|
||||||
PLUGIN_MAX_EXECUTION_TIMEOUT: ${PLUGIN_MAX_EXECUTION_TIMEOUT:-600}
|
PLUGIN_MAX_EXECUTION_TIMEOUT: ${PLUGIN_MAX_EXECUTION_TIMEOUT:-600}
|
||||||
|
PLUGIN_DAEMON_TIMEOUT: ${PLUGIN_DAEMON_TIMEOUT:-600.0}
|
||||||
PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
|
PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
|
||||||
PLUGIN_STORAGE_TYPE: ${PLUGIN_STORAGE_TYPE:-local}
|
PLUGIN_STORAGE_TYPE: ${PLUGIN_STORAGE_TYPE:-local}
|
||||||
PLUGIN_STORAGE_LOCAL_ROOT: ${PLUGIN_STORAGE_LOCAL_ROOT:-/app/storage}
|
PLUGIN_STORAGE_LOCAL_ROOT: ${PLUGIN_STORAGE_LOCAL_ROOT:-/app/storage}
|
||||||
@@ -568,8 +644,10 @@ x-shared-env: &shared-api-worker-env
|
|||||||
QUEUE_MONITOR_THRESHOLD: ${QUEUE_MONITOR_THRESHOLD:-200}
|
QUEUE_MONITOR_THRESHOLD: ${QUEUE_MONITOR_THRESHOLD:-200}
|
||||||
QUEUE_MONITOR_ALERT_EMAILS: ${QUEUE_MONITOR_ALERT_EMAILS:-}
|
QUEUE_MONITOR_ALERT_EMAILS: ${QUEUE_MONITOR_ALERT_EMAILS:-}
|
||||||
QUEUE_MONITOR_INTERVAL: ${QUEUE_MONITOR_INTERVAL:-30}
|
QUEUE_MONITOR_INTERVAL: ${QUEUE_MONITOR_INTERVAL:-30}
|
||||||
SWAGGER_UI_ENABLED: ${SWAGGER_UI_ENABLED:-true}
|
SWAGGER_UI_ENABLED: ${SWAGGER_UI_ENABLED:-false}
|
||||||
SWAGGER_UI_PATH: ${SWAGGER_UI_PATH:-/swagger-ui.html}
|
SWAGGER_UI_PATH: ${SWAGGER_UI_PATH:-/swagger-ui.html}
|
||||||
|
DSL_EXPORT_ENCRYPT_DATASET_ID: ${DSL_EXPORT_ENCRYPT_DATASET_ID:-true}
|
||||||
|
DATASET_MAX_SEGMENTS_PER_REQUEST: ${DATASET_MAX_SEGMENTS_PER_REQUEST:-0}
|
||||||
ENABLE_CLEAN_EMBEDDING_CACHE_TASK: ${ENABLE_CLEAN_EMBEDDING_CACHE_TASK:-false}
|
ENABLE_CLEAN_EMBEDDING_CACHE_TASK: ${ENABLE_CLEAN_EMBEDDING_CACHE_TASK:-false}
|
||||||
ENABLE_CLEAN_UNUSED_DATASETS_TASK: ${ENABLE_CLEAN_UNUSED_DATASETS_TASK:-false}
|
ENABLE_CLEAN_UNUSED_DATASETS_TASK: ${ENABLE_CLEAN_UNUSED_DATASETS_TASK:-false}
|
||||||
ENABLE_CREATE_TIDB_SERVERLESS_TASK: ${ENABLE_CREATE_TIDB_SERVERLESS_TASK:-false}
|
ENABLE_CREATE_TIDB_SERVERLESS_TASK: ${ENABLE_CREATE_TIDB_SERVERLESS_TASK:-false}
|
||||||
@@ -578,11 +656,45 @@ x-shared-env: &shared-api-worker-env
|
|||||||
ENABLE_MAIL_CLEAN_DOCUMENT_NOTIFY_TASK: ${ENABLE_MAIL_CLEAN_DOCUMENT_NOTIFY_TASK:-false}
|
ENABLE_MAIL_CLEAN_DOCUMENT_NOTIFY_TASK: ${ENABLE_MAIL_CLEAN_DOCUMENT_NOTIFY_TASK:-false}
|
||||||
ENABLE_DATASETS_QUEUE_MONITOR: ${ENABLE_DATASETS_QUEUE_MONITOR:-false}
|
ENABLE_DATASETS_QUEUE_MONITOR: ${ENABLE_DATASETS_QUEUE_MONITOR:-false}
|
||||||
ENABLE_CHECK_UPGRADABLE_PLUGIN_TASK: ${ENABLE_CHECK_UPGRADABLE_PLUGIN_TASK:-true}
|
ENABLE_CHECK_UPGRADABLE_PLUGIN_TASK: ${ENABLE_CHECK_UPGRADABLE_PLUGIN_TASK:-true}
|
||||||
|
ENABLE_WORKFLOW_SCHEDULE_POLLER_TASK: ${ENABLE_WORKFLOW_SCHEDULE_POLLER_TASK:-true}
|
||||||
|
WORKFLOW_SCHEDULE_POLLER_INTERVAL: ${WORKFLOW_SCHEDULE_POLLER_INTERVAL:-1}
|
||||||
|
WORKFLOW_SCHEDULE_POLLER_BATCH_SIZE: ${WORKFLOW_SCHEDULE_POLLER_BATCH_SIZE:-100}
|
||||||
|
WORKFLOW_SCHEDULE_MAX_DISPATCH_PER_TICK: ${WORKFLOW_SCHEDULE_MAX_DISPATCH_PER_TICK:-0}
|
||||||
|
TENANT_ISOLATED_TASK_CONCURRENCY: ${TENANT_ISOLATED_TASK_CONCURRENCY:-1}
|
||||||
|
ANNOTATION_IMPORT_FILE_SIZE_LIMIT: ${ANNOTATION_IMPORT_FILE_SIZE_LIMIT:-2}
|
||||||
|
ANNOTATION_IMPORT_MAX_RECORDS: ${ANNOTATION_IMPORT_MAX_RECORDS:-10000}
|
||||||
|
ANNOTATION_IMPORT_MIN_RECORDS: ${ANNOTATION_IMPORT_MIN_RECORDS:-1}
|
||||||
|
ANNOTATION_IMPORT_RATE_LIMIT_PER_MINUTE: ${ANNOTATION_IMPORT_RATE_LIMIT_PER_MINUTE:-5}
|
||||||
|
ANNOTATION_IMPORT_RATE_LIMIT_PER_HOUR: ${ANNOTATION_IMPORT_RATE_LIMIT_PER_HOUR:-20}
|
||||||
|
ANNOTATION_IMPORT_MAX_CONCURRENT: ${ANNOTATION_IMPORT_MAX_CONCURRENT:-5}
|
||||||
|
AMPLITUDE_API_KEY: ${AMPLITUDE_API_KEY:-}
|
||||||
|
SANDBOX_EXPIRED_RECORDS_CLEAN_GRACEFUL_PERIOD: ${SANDBOX_EXPIRED_RECORDS_CLEAN_GRACEFUL_PERIOD:-21}
|
||||||
|
SANDBOX_EXPIRED_RECORDS_CLEAN_BATCH_SIZE: ${SANDBOX_EXPIRED_RECORDS_CLEAN_BATCH_SIZE:-1000}
|
||||||
|
SANDBOX_EXPIRED_RECORDS_RETENTION_DAYS: ${SANDBOX_EXPIRED_RECORDS_RETENTION_DAYS:-30}
|
||||||
|
|
||||||
services:
|
services:
|
||||||
|
# Init container to fix permissions
|
||||||
|
init_permissions:
|
||||||
|
image: busybox:latest
|
||||||
|
command:
|
||||||
|
- sh
|
||||||
|
- -c
|
||||||
|
- |
|
||||||
|
FLAG_FILE="/app/api/storage/.init_permissions"
|
||||||
|
if [ -f "$${FLAG_FILE}" ]; then
|
||||||
|
echo "Permissions already initialized. Exiting."
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
echo "Initializing permissions for /app/api/storage"
|
||||||
|
chown -R 1001:1001 /app/api/storage && touch "$${FLAG_FILE}"
|
||||||
|
echo "Permissions initialized. Exiting."
|
||||||
|
volumes:
|
||||||
|
- ./volumes/app/storage:/app/api/storage
|
||||||
|
restart: "no"
|
||||||
|
|
||||||
# API service
|
# API service
|
||||||
api:
|
api:
|
||||||
image: langgenius/dify-api:1.8.0
|
image: langgenius/dify-api:1.11.2
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
# Use the shared environment variables.
|
# Use the shared environment variables.
|
||||||
@@ -595,10 +707,23 @@ services:
|
|||||||
PLUGIN_REMOTE_INSTALL_HOST: ${EXPOSE_PLUGIN_DEBUGGING_HOST:-localhost}
|
PLUGIN_REMOTE_INSTALL_HOST: ${EXPOSE_PLUGIN_DEBUGGING_HOST:-localhost}
|
||||||
PLUGIN_REMOTE_INSTALL_PORT: ${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}
|
PLUGIN_REMOTE_INSTALL_PORT: ${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}
|
||||||
PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
|
PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
|
||||||
|
PLUGIN_DAEMON_TIMEOUT: ${PLUGIN_DAEMON_TIMEOUT:-600.0}
|
||||||
INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
|
INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
|
||||||
depends_on:
|
depends_on:
|
||||||
db:
|
init_permissions:
|
||||||
|
condition: service_completed_successfully
|
||||||
|
db_postgres:
|
||||||
condition: service_healthy
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
db_mysql:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
oceanbase:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
seekdb:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
redis:
|
redis:
|
||||||
condition: service_started
|
condition: service_started
|
||||||
volumes:
|
volumes:
|
||||||
@@ -609,14 +734,14 @@ services:
|
|||||||
- default
|
- default
|
||||||
|
|
||||||
# worker service
|
# worker service
|
||||||
# The Celery worker for processing the queue.
|
# The Celery worker for processing all queues (dataset, workflow, mail, etc.)
|
||||||
worker:
|
worker:
|
||||||
image: langgenius/dify-api:1.8.0
|
image: langgenius/dify-api:1.11.2
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
# Use the shared environment variables.
|
# Use the shared environment variables.
|
||||||
<<: *shared-api-worker-env
|
<<: *shared-api-worker-env
|
||||||
# Startup mode, 'worker' starts the Celery worker for processing the queue.
|
# Startup mode, 'worker' starts the Celery worker for processing all queues.
|
||||||
MODE: worker
|
MODE: worker
|
||||||
SENTRY_DSN: ${API_SENTRY_DSN:-}
|
SENTRY_DSN: ${API_SENTRY_DSN:-}
|
||||||
SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
|
SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
|
||||||
@@ -624,8 +749,20 @@ services:
|
|||||||
PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
|
PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
|
||||||
INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
|
INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
|
||||||
depends_on:
|
depends_on:
|
||||||
db:
|
init_permissions:
|
||||||
|
condition: service_completed_successfully
|
||||||
|
db_postgres:
|
||||||
condition: service_healthy
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
db_mysql:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
oceanbase:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
seekdb:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
redis:
|
redis:
|
||||||
condition: service_started
|
condition: service_started
|
||||||
volumes:
|
volumes:
|
||||||
@@ -638,7 +775,7 @@ services:
|
|||||||
# worker_beat service
|
# worker_beat service
|
||||||
# Celery beat for scheduling periodic tasks.
|
# Celery beat for scheduling periodic tasks.
|
||||||
worker_beat:
|
worker_beat:
|
||||||
image: langgenius/dify-api:1.8.0
|
image: langgenius/dify-api:1.11.2
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
# Use the shared environment variables.
|
# Use the shared environment variables.
|
||||||
@@ -646,8 +783,20 @@ services:
|
|||||||
# Startup mode, 'worker_beat' starts the Celery beat for scheduling periodic tasks.
|
# Startup mode, 'worker_beat' starts the Celery beat for scheduling periodic tasks.
|
||||||
MODE: beat
|
MODE: beat
|
||||||
depends_on:
|
depends_on:
|
||||||
db:
|
init_permissions:
|
||||||
|
condition: service_completed_successfully
|
||||||
|
db_postgres:
|
||||||
condition: service_healthy
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
db_mysql:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
oceanbase:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
seekdb:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
redis:
|
redis:
|
||||||
condition: service_started
|
condition: service_started
|
||||||
networks:
|
networks:
|
||||||
@@ -656,11 +805,13 @@ services:
|
|||||||
|
|
||||||
# Frontend web application.
|
# Frontend web application.
|
||||||
web:
|
web:
|
||||||
image: langgenius/dify-web:1.8.0
|
image: langgenius/dify-web:1.11.2
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
CONSOLE_API_URL: ${CONSOLE_API_URL:-}
|
CONSOLE_API_URL: ${CONSOLE_API_URL:-}
|
||||||
APP_API_URL: ${APP_API_URL:-}
|
APP_API_URL: ${APP_API_URL:-}
|
||||||
|
AMPLITUDE_API_KEY: ${AMPLITUDE_API_KEY:-}
|
||||||
|
NEXT_PUBLIC_COOKIE_DOMAIN: ${NEXT_PUBLIC_COOKIE_DOMAIN:-}
|
||||||
SENTRY_DSN: ${WEB_SENTRY_DSN:-}
|
SENTRY_DSN: ${WEB_SENTRY_DSN:-}
|
||||||
NEXT_TELEMETRY_DISABLED: ${NEXT_TELEMETRY_DISABLED:-0}
|
NEXT_TELEMETRY_DISABLED: ${NEXT_TELEMETRY_DISABLED:-0}
|
||||||
TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
|
TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
|
||||||
@@ -680,14 +831,17 @@ services:
|
|||||||
ENABLE_WEBSITE_JINAREADER: ${ENABLE_WEBSITE_JINAREADER:-true}
|
ENABLE_WEBSITE_JINAREADER: ${ENABLE_WEBSITE_JINAREADER:-true}
|
||||||
ENABLE_WEBSITE_FIRECRAWL: ${ENABLE_WEBSITE_FIRECRAWL:-true}
|
ENABLE_WEBSITE_FIRECRAWL: ${ENABLE_WEBSITE_FIRECRAWL:-true}
|
||||||
ENABLE_WEBSITE_WATERCRAWL: ${ENABLE_WEBSITE_WATERCRAWL:-true}
|
ENABLE_WEBSITE_WATERCRAWL: ${ENABLE_WEBSITE_WATERCRAWL:-true}
|
||||||
# The postgres database.
|
|
||||||
db:
|
# The PostgreSQL database.
|
||||||
|
db_postgres:
|
||||||
image: postgres:15-alpine
|
image: postgres:15-alpine
|
||||||
|
profiles:
|
||||||
|
- postgresql
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
POSTGRES_USER: ${POSTGRES_USER:-postgres}
|
POSTGRES_USER: ${DB_USERNAME:-postgres}
|
||||||
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-difyai123456}
|
POSTGRES_PASSWORD: ${DB_PASSWORD:-difyai123456}
|
||||||
POSTGRES_DB: ${POSTGRES_DB:-dify}
|
POSTGRES_DB: ${DB_DATABASE:-dify}
|
||||||
PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
|
PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
|
||||||
command: >
|
command: >
|
||||||
postgres -c 'max_connections=${POSTGRES_MAX_CONNECTIONS:-100}'
|
postgres -c 'max_connections=${POSTGRES_MAX_CONNECTIONS:-100}'
|
||||||
@@ -695,24 +849,56 @@ services:
|
|||||||
-c 'work_mem=${POSTGRES_WORK_MEM:-4MB}'
|
-c 'work_mem=${POSTGRES_WORK_MEM:-4MB}'
|
||||||
-c 'maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}'
|
-c 'maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}'
|
||||||
-c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}'
|
-c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}'
|
||||||
|
-c 'statement_timeout=${POSTGRES_STATEMENT_TIMEOUT:-0}'
|
||||||
|
-c 'idle_in_transaction_session_timeout=${POSTGRES_IDLE_IN_TRANSACTION_SESSION_TIMEOUT:-0}'
|
||||||
volumes:
|
volumes:
|
||||||
- ./volumes/db/data:/var/lib/postgresql/data
|
- ./volumes/db/data:/var/lib/postgresql/data
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test:
|
test:
|
||||||
[
|
[
|
||||||
'CMD',
|
"CMD",
|
||||||
'pg_isready',
|
"pg_isready",
|
||||||
'-h',
|
"-h",
|
||||||
'db',
|
"db_postgres",
|
||||||
'-U',
|
"-U",
|
||||||
'${PGUSER:-postgres}',
|
"${DB_USERNAME:-postgres}",
|
||||||
'-d',
|
"-d",
|
||||||
'${POSTGRES_DB:-dify}'
|
"${DB_DATABASE:-dify}"
|
||||||
]
|
]
|
||||||
interval: 1s
|
interval: 1s
|
||||||
timeout: 3s
|
timeout: 3s
|
||||||
retries: 60
|
retries: 60
|
||||||
|
|
||||||
|
# The mysql database.
|
||||||
|
db_mysql:
|
||||||
|
image: mysql:8.0
|
||||||
|
profiles:
|
||||||
|
- mysql
|
||||||
|
restart: always
|
||||||
|
environment:
|
||||||
|
MYSQL_ROOT_PASSWORD: ${DB_PASSWORD:-difyai123456}
|
||||||
|
MYSQL_DATABASE: ${DB_DATABASE:-dify}
|
||||||
|
command: >
|
||||||
|
--max_connections=1000
|
||||||
|
--innodb_buffer_pool_size=${MYSQL_INNODB_BUFFER_POOL_SIZE:-512M}
|
||||||
|
--innodb_log_file_size=${MYSQL_INNODB_LOG_FILE_SIZE:-128M}
|
||||||
|
--innodb_flush_log_at_trx_commit=${MYSQL_INNODB_FLUSH_LOG_AT_TRX_COMMIT:-2}
|
||||||
|
volumes:
|
||||||
|
- ${MYSQL_HOST_VOLUME:-./volumes/mysql/data}:/var/lib/mysql
|
||||||
|
healthcheck:
|
||||||
|
test:
|
||||||
|
[
|
||||||
|
"CMD",
|
||||||
|
"mysqladmin",
|
||||||
|
"ping",
|
||||||
|
"-u",
|
||||||
|
"root",
|
||||||
|
"-p${DB_PASSWORD:-difyai123456}"
|
||||||
|
]
|
||||||
|
interval: 1s
|
||||||
|
timeout: 3s
|
||||||
|
retries: 30
|
||||||
|
|
||||||
# The redis cache.
|
# The redis cache.
|
||||||
redis:
|
redis:
|
||||||
image: redis:6-alpine
|
image: redis:6-alpine
|
||||||
@@ -725,7 +911,11 @@ services:
|
|||||||
# Set the redis password when startup redis server.
|
# Set the redis password when startup redis server.
|
||||||
command: redis-server --requirepass ${REDIS_PASSWORD:-difyai123456}
|
command: redis-server --requirepass ${REDIS_PASSWORD:-difyai123456}
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'redis-cli', 'ping' ]
|
test:
|
||||||
|
[
|
||||||
|
"CMD-SHELL",
|
||||||
|
"redis-cli -a ${REDIS_PASSWORD:-difyai123456} ping | grep -q PONG"
|
||||||
|
]
|
||||||
|
|
||||||
# The DifySandbox
|
# The DifySandbox
|
||||||
sandbox:
|
sandbox:
|
||||||
@@ -747,13 +937,13 @@ services:
|
|||||||
- ./volumes/sandbox/dependencies:/dependencies
|
- ./volumes/sandbox/dependencies:/dependencies
|
||||||
- ./volumes/sandbox/conf:/conf
|
- ./volumes/sandbox/conf:/conf
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'curl', '-f', 'http://localhost:8194/health' ]
|
test: [ "CMD", "curl", "-f", "http://localhost:8194/health" ]
|
||||||
networks:
|
networks:
|
||||||
- ssrf_proxy_network
|
- ssrf_proxy_network
|
||||||
|
|
||||||
# plugin daemon
|
# plugin daemon
|
||||||
plugin_daemon:
|
plugin_daemon:
|
||||||
image: langgenius/dify-plugin-daemon:0.2.0-local
|
image: langgenius/dify-plugin-daemon:0.5.2-local
|
||||||
restart: always
|
restart: always
|
||||||
environment:
|
environment:
|
||||||
# Use the shared environment variables.
|
# Use the shared environment variables.
|
||||||
@@ -807,8 +997,18 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- ./volumes/plugin_daemon:/app/storage
|
- ./volumes/plugin_daemon:/app/storage
|
||||||
depends_on:
|
depends_on:
|
||||||
db:
|
db_postgres:
|
||||||
condition: service_healthy
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
db_mysql:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
oceanbase:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
seekdb:
|
||||||
|
condition: service_healthy
|
||||||
|
required: false
|
||||||
|
|
||||||
# ssrf_proxy server
|
# ssrf_proxy server
|
||||||
# for more information, please refer to
|
# for more information, please refer to
|
||||||
@@ -821,8 +1021,8 @@ services:
|
|||||||
- ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh
|
- ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh
|
||||||
entrypoint:
|
entrypoint:
|
||||||
[
|
[
|
||||||
'sh',
|
"sh",
|
||||||
'-c',
|
"-c",
|
||||||
"cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i
|
"cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i
|
||||||
's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh &&
|
's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh &&
|
||||||
/docker-entrypoint.sh"
|
/docker-entrypoint.sh"
|
||||||
@@ -855,8 +1055,8 @@ services:
|
|||||||
- CERTBOT_EMAIL=${CERTBOT_EMAIL}
|
- CERTBOT_EMAIL=${CERTBOT_EMAIL}
|
||||||
- CERTBOT_DOMAIN=${CERTBOT_DOMAIN}
|
- CERTBOT_DOMAIN=${CERTBOT_DOMAIN}
|
||||||
- CERTBOT_OPTIONS=${CERTBOT_OPTIONS:-}
|
- CERTBOT_OPTIONS=${CERTBOT_OPTIONS:-}
|
||||||
entrypoint: [ '/docker-entrypoint.sh' ]
|
entrypoint: [ "/docker-entrypoint.sh" ]
|
||||||
command: [ 'tail', '-f', '/dev/null' ]
|
command: [ "tail", "-f", "/dev/null" ]
|
||||||
|
|
||||||
# The nginx reverse proxy.
|
# The nginx reverse proxy.
|
||||||
# used for reverse proxying the API service and Web service.
|
# used for reverse proxying the API service and Web service.
|
||||||
@@ -875,8 +1075,8 @@ services:
|
|||||||
- ./volumes/certbot/www:/var/www/html
|
- ./volumes/certbot/www:/var/www/html
|
||||||
entrypoint:
|
entrypoint:
|
||||||
[
|
[
|
||||||
'sh',
|
"sh",
|
||||||
'-c',
|
"-c",
|
||||||
"cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i
|
"cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i
|
||||||
's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh &&
|
's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh &&
|
||||||
/docker-entrypoint.sh"
|
/docker-entrypoint.sh"
|
||||||
@@ -890,7 +1090,7 @@ services:
|
|||||||
# and modify the env vars below in .env if HTTPS_ENABLED is true.
|
# and modify the env vars below in .env if HTTPS_ENABLED is true.
|
||||||
NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
|
NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
|
||||||
NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
|
NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
|
||||||
NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3}
|
NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.2 TLSv1.3}
|
||||||
NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
|
NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
|
||||||
NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-100M}
|
NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-100M}
|
||||||
NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
|
NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
|
||||||
@@ -904,9 +1104,8 @@ services:
|
|||||||
|
|
||||||
# The Weaviate vector store.
|
# The Weaviate vector store.
|
||||||
weaviate:
|
weaviate:
|
||||||
image: semitechnologies/weaviate:1.19.0
|
image: semitechnologies/weaviate:1.27.0
|
||||||
profiles:
|
profiles:
|
||||||
- ''
|
|
||||||
- weaviate
|
- weaviate
|
||||||
restart: always
|
restart: always
|
||||||
volumes:
|
volumes:
|
||||||
@@ -925,11 +1124,68 @@ services:
|
|||||||
AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
|
AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
|
||||||
AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
|
AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
|
||||||
AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
|
AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
|
||||||
|
DISABLE_TELEMETRY: ${WEAVIATE_DISABLE_TELEMETRY:-false}
|
||||||
|
ENABLE_TOKENIZER_GSE: ${WEAVIATE_ENABLE_TOKENIZER_GSE:-false}
|
||||||
|
ENABLE_TOKENIZER_KAGOME_JA: ${WEAVIATE_ENABLE_TOKENIZER_KAGOME_JA:-false}
|
||||||
|
ENABLE_TOKENIZER_KAGOME_KR: ${WEAVIATE_ENABLE_TOKENIZER_KAGOME_KR:-false}
|
||||||
|
|
||||||
|
# OceanBase vector database
|
||||||
|
oceanbase:
|
||||||
|
image: oceanbase/oceanbase-ce:4.3.5-lts
|
||||||
|
profiles:
|
||||||
|
- oceanbase
|
||||||
|
restart: always
|
||||||
|
volumes:
|
||||||
|
- ./volumes/oceanbase/data:/root/ob
|
||||||
|
- ./volumes/oceanbase/conf:/root/.obd/cluster
|
||||||
|
- ./volumes/oceanbase/init.d:/root/boot/init.d
|
||||||
|
environment:
|
||||||
|
OB_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
|
||||||
|
OB_SYS_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
||||||
|
OB_TENANT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
||||||
|
OB_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
|
||||||
|
OB_SERVER_IP: 127.0.0.1
|
||||||
|
MODE: mini
|
||||||
|
LANG: en_US.UTF-8
|
||||||
|
healthcheck:
|
||||||
|
test:
|
||||||
|
[
|
||||||
|
"CMD-SHELL",
|
||||||
|
'obclient -h127.0.0.1 -P2881 -uroot@test
|
||||||
|
-p${OCEANBASE_VECTOR_PASSWORD:-difyai123456} -e "SELECT 1;"'
|
||||||
|
]
|
||||||
|
interval: 10s
|
||||||
|
retries: 30
|
||||||
|
start_period: 30s
|
||||||
|
timeout: 10s
|
||||||
|
|
||||||
|
# seekdb vector database
|
||||||
|
seekdb:
|
||||||
|
image: oceanbase/seekdb:latest
|
||||||
|
profiles:
|
||||||
|
- seekdb
|
||||||
|
restart: always
|
||||||
|
volumes:
|
||||||
|
- ./volumes/seekdb:/var/lib/oceanbase
|
||||||
|
environment:
|
||||||
|
ROOT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
||||||
|
MEMORY_LIMIT: ${SEEKDB_MEMORY_LIMIT:-2G}
|
||||||
|
REPORTER: dify-ai-seekdb
|
||||||
|
healthcheck:
|
||||||
|
test:
|
||||||
|
[
|
||||||
|
"CMD-SHELL",
|
||||||
|
'mysql -h127.0.0.1 -P2881 -uroot
|
||||||
|
-p${OCEANBASE_VECTOR_PASSWORD:-difyai123456} -e "SELECT 1;"'
|
||||||
|
]
|
||||||
|
interval: 5s
|
||||||
|
retries: 60
|
||||||
|
timeout: 5s
|
||||||
|
|
||||||
# Qdrant vector store.
|
# Qdrant vector store.
|
||||||
# (if used, you need to set VECTOR_STORE to qdrant in the api & worker service.)
|
# (if used, you need to set VECTOR_STORE to qdrant in the api & worker service.)
|
||||||
qdrant:
|
qdrant:
|
||||||
image: langgenius/qdrant:v1.7.3
|
image: langgenius/qdrant:v1.8.3
|
||||||
profiles:
|
profiles:
|
||||||
- qdrant
|
- qdrant
|
||||||
restart: always
|
restart: always
|
||||||
@@ -996,9 +1252,9 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- ./volumes/pgvector/data:/var/lib/postgresql/data
|
- ./volumes/pgvector/data:/var/lib/postgresql/data
|
||||||
- ./pgvector/docker-entrypoint.sh:/docker-entrypoint.sh
|
- ./pgvector/docker-entrypoint.sh:/docker-entrypoint.sh
|
||||||
entrypoint: [ '/docker-entrypoint.sh' ]
|
entrypoint: [ "/docker-entrypoint.sh" ]
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'pg_isready' ]
|
test: [ "CMD", "pg_isready" ]
|
||||||
interval: 1s
|
interval: 1s
|
||||||
timeout: 3s
|
timeout: 3s
|
||||||
retries: 30
|
retries: 30
|
||||||
@@ -1020,7 +1276,7 @@ services:
|
|||||||
- ./vastbase/backup:/home/vastbase/backup
|
- ./vastbase/backup:/home/vastbase/backup
|
||||||
- ./vastbase/backup_log:/home/vastbase/backup_log
|
- ./vastbase/backup_log:/home/vastbase/backup_log
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'pg_isready' ]
|
test: [ "CMD", "pg_isready" ]
|
||||||
interval: 1s
|
interval: 1s
|
||||||
timeout: 3s
|
timeout: 3s
|
||||||
retries: 30
|
retries: 30
|
||||||
@@ -1042,7 +1298,7 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- ./volumes/pgvecto_rs/data:/var/lib/postgresql/data
|
- ./volumes/pgvecto_rs/data:/var/lib/postgresql/data
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'pg_isready' ]
|
test: [ "CMD", "pg_isready" ]
|
||||||
interval: 1s
|
interval: 1s
|
||||||
timeout: 3s
|
timeout: 3s
|
||||||
retries: 30
|
retries: 30
|
||||||
@@ -1060,34 +1316,21 @@ services:
|
|||||||
CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
|
CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
|
||||||
IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
|
IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
|
||||||
|
|
||||||
# OceanBase vector database
|
# InterSystems IRIS vector database
|
||||||
oceanbase:
|
iris:
|
||||||
image: oceanbase/oceanbase-ce:4.3.5-lts
|
image: containers.intersystems.com/intersystems/iris-community:2025.3
|
||||||
profiles:
|
profiles:
|
||||||
- oceanbase
|
- iris
|
||||||
restart: always
|
restart: always
|
||||||
|
init: true
|
||||||
volumes:
|
volumes:
|
||||||
- ./volumes/oceanbase/data:/root/ob
|
- ./volumes/iris:/opt/iris
|
||||||
- ./volumes/oceanbase/conf:/root/.obd/cluster
|
- ./iris/iris-init.script:/iris-init.script
|
||||||
- ./volumes/oceanbase/init.d:/root/boot/init.d
|
- ./iris/docker-entrypoint.sh:/custom-entrypoint.sh
|
||||||
|
entrypoint: [ "/custom-entrypoint.sh" ]
|
||||||
|
tty: true
|
||||||
environment:
|
environment:
|
||||||
OB_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
|
TZ: ${IRIS_TIMEZONE:-UTC}
|
||||||
OB_SYS_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
|
||||||
OB_TENANT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
|
||||||
OB_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
|
|
||||||
OB_SERVER_IP: 127.0.0.1
|
|
||||||
MODE: mini
|
|
||||||
healthcheck:
|
|
||||||
test:
|
|
||||||
[
|
|
||||||
'CMD-SHELL',
|
|
||||||
'obclient -h127.0.0.1 -P2881 -uroot@test -p$${OB_TENANT_PASSWORD} -e
|
|
||||||
"SELECT 1;"'
|
|
||||||
]
|
|
||||||
interval: 10s
|
|
||||||
retries: 30
|
|
||||||
start_period: 30s
|
|
||||||
timeout: 10s
|
|
||||||
|
|
||||||
# Oracle vector database
|
# Oracle vector database
|
||||||
oracle:
|
oracle:
|
||||||
@@ -1119,7 +1362,7 @@ services:
|
|||||||
command: etcd -advertise-client-urls=http://127.0.0.1:2379 -listen-client-urls
|
command: etcd -advertise-client-urls=http://127.0.0.1:2379 -listen-client-urls
|
||||||
http://0.0.0.0:2379 --data-dir /etcd
|
http://0.0.0.0:2379 --data-dir /etcd
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'etcdctl', 'endpoint', 'health' ]
|
test: [ "CMD", "etcdctl", "endpoint", "health" ]
|
||||||
interval: 30s
|
interval: 30s
|
||||||
timeout: 20s
|
timeout: 20s
|
||||||
retries: 3
|
retries: 3
|
||||||
@@ -1137,7 +1380,7 @@ services:
|
|||||||
- ./volumes/milvus/minio:/minio_data
|
- ./volumes/milvus/minio:/minio_data
|
||||||
command: minio server /minio_data --console-address ":9001"
|
command: minio server /minio_data --console-address ":9001"
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live' ]
|
test: [ "CMD", "curl", "-f", "http://localhost:9000/minio/health/live" ]
|
||||||
interval: 30s
|
interval: 30s
|
||||||
timeout: 20s
|
timeout: 20s
|
||||||
retries: 3
|
retries: 3
|
||||||
@@ -1145,10 +1388,10 @@ services:
|
|||||||
- milvus
|
- milvus
|
||||||
|
|
||||||
milvus-standalone:
|
milvus-standalone:
|
||||||
image: milvusdb/milvus:v2.5.15
|
image: milvusdb/milvus:v2.6.3
|
||||||
profiles:
|
profiles:
|
||||||
- milvus
|
- milvus
|
||||||
command: [ 'milvus', 'run', 'standalone' ]
|
command: [ "milvus", "run", "standalone" ]
|
||||||
environment:
|
environment:
|
||||||
ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}
|
ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}
|
||||||
MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}
|
MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}
|
||||||
@@ -1156,7 +1399,7 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- ./volumes/milvus/milvus:/var/lib/milvus
|
- ./volumes/milvus/milvus:/var/lib/milvus
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'curl', '-f', 'http://localhost:9091/healthz' ]
|
test: [ "CMD", "curl", "-f", "http://localhost:9091/healthz" ]
|
||||||
interval: 30s
|
interval: 30s
|
||||||
start_period: 90s
|
start_period: 90s
|
||||||
timeout: 20s
|
timeout: 20s
|
||||||
@@ -1263,16 +1506,16 @@ services:
|
|||||||
node.name: dify-es0
|
node.name: dify-es0
|
||||||
discovery.type: single-node
|
discovery.type: single-node
|
||||||
xpack.license.self_generated.type: basic
|
xpack.license.self_generated.type: basic
|
||||||
xpack.security.enabled: 'true'
|
xpack.security.enabled: "true"
|
||||||
xpack.security.enrollment.enabled: 'false'
|
xpack.security.enrollment.enabled: "false"
|
||||||
xpack.security.http.ssl.enabled: 'false'
|
xpack.security.http.ssl.enabled: "false"
|
||||||
deploy:
|
deploy:
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
memory: 2g
|
memory: 2g
|
||||||
entrypoint: [ 'sh', '-c', "sh /docker-entrypoint-mount.sh" ]
|
entrypoint: [ "sh", "-c", "sh /docker-entrypoint-mount.sh" ]
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD', 'curl', '-s', 'http://localhost:9200/_cluster/health?pretty' ]
|
test: [ "CMD", "curl", "-s", "http://localhost:9200/_cluster/health?pretty" ]
|
||||||
interval: 30s
|
interval: 30s
|
||||||
timeout: 10s
|
timeout: 10s
|
||||||
retries: 50
|
retries: 50
|
||||||
@@ -1289,15 +1532,15 @@ services:
|
|||||||
environment:
|
environment:
|
||||||
XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: d1a66dfd-c4d3-4a0a-8290-2abcb83ab3aa
|
XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: d1a66dfd-c4d3-4a0a-8290-2abcb83ab3aa
|
||||||
NO_PROXY: localhost,127.0.0.1,elasticsearch,kibana
|
NO_PROXY: localhost,127.0.0.1,elasticsearch,kibana
|
||||||
XPACK_SECURITY_ENABLED: 'true'
|
XPACK_SECURITY_ENABLED: "true"
|
||||||
XPACK_SECURITY_ENROLLMENT_ENABLED: 'false'
|
XPACK_SECURITY_ENROLLMENT_ENABLED: "false"
|
||||||
XPACK_SECURITY_HTTP_SSL_ENABLED: 'false'
|
XPACK_SECURITY_HTTP_SSL_ENABLED: "false"
|
||||||
XPACK_FLEET_ISAIRGAPPED: 'true'
|
XPACK_FLEET_ISAIRGAPPED: "true"
|
||||||
I18N_LOCALE: zh-CN
|
I18N_LOCALE: zh-CN
|
||||||
SERVER_PORT: '5601'
|
SERVER_PORT: "5601"
|
||||||
ELASTICSEARCH_HOSTS: http://elasticsearch:9200
|
ELASTICSEARCH_HOSTS: http://elasticsearch:9200
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: [ 'CMD-SHELL', 'curl -s http://localhost:5601 >/dev/null || exit 1' ]
|
test: [ "CMD-SHELL", "curl -s http://localhost:5601 >/dev/null || exit 1" ]
|
||||||
interval: 30s
|
interval: 30s
|
||||||
timeout: 10s
|
timeout: 10s
|
||||||
retries: 3
|
retries: 3
|
||||||
|
|||||||
Executable
+38
@@ -0,0 +1,38 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
set -e
|
||||||
|
|
||||||
|
# IRIS configuration flag file
|
||||||
|
IRIS_CONFIG_DONE="/opt/iris/.iris-configured"
|
||||||
|
|
||||||
|
# Function to configure IRIS
|
||||||
|
configure_iris() {
|
||||||
|
echo "Configuring IRIS for first-time setup..."
|
||||||
|
|
||||||
|
# Wait for IRIS to be fully started
|
||||||
|
sleep 5
|
||||||
|
|
||||||
|
# Execute the initialization script
|
||||||
|
iris session IRIS < /iris-init.script
|
||||||
|
|
||||||
|
# Mark configuration as done
|
||||||
|
touch "$IRIS_CONFIG_DONE"
|
||||||
|
|
||||||
|
echo "IRIS configuration completed."
|
||||||
|
}
|
||||||
|
|
||||||
|
# Start IRIS in background for initial configuration if not already configured
|
||||||
|
if [ ! -f "$IRIS_CONFIG_DONE" ]; then
|
||||||
|
echo "First-time IRIS setup detected. Starting IRIS for configuration..."
|
||||||
|
|
||||||
|
# Start IRIS
|
||||||
|
iris start IRIS
|
||||||
|
|
||||||
|
# Configure IRIS
|
||||||
|
configure_iris
|
||||||
|
|
||||||
|
# Stop IRIS
|
||||||
|
iris stop IRIS quietly
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Run the original IRIS entrypoint
|
||||||
|
exec /iris-main "$@"
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
// Switch to the %SYS namespace to modify system settings
|
||||||
|
set $namespace="%SYS"
|
||||||
|
|
||||||
|
// Set predefined user passwords to never expire (default password: SYS)
|
||||||
|
Do ##class(Security.Users).UnExpireUserPasswords("*")
|
||||||
|
|
||||||
|
// Change the default password
|
||||||
|
Do $SYSTEM.Security.ChangePassword("_SYSTEM","Dify@1234")
|
||||||
|
|
||||||
|
// Install the Japanese locale (default is English since the container is Ubuntu-based)
|
||||||
|
// Do ##class(Config.NLS.Locales).Install("jpuw")
|
||||||
@@ -1,11 +1,17 @@
|
|||||||
# ------------------------------
|
# ------------------------------
|
||||||
# Environment Variables for db Service
|
# Environment Variables for db Service
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
POSTGRES_USER=postgres
|
# Database Configuration
|
||||||
# The password for the default postgres user.
|
# Database type, supported values are `postgresql` and `mysql`
|
||||||
POSTGRES_PASSWORD=difyai123456
|
DB_TYPE=postgresql
|
||||||
# The name of the default postgres database.
|
# For MySQL, only `root` user is supported for now
|
||||||
POSTGRES_DB=dify
|
DB_USERNAME=postgres
|
||||||
|
DB_PASSWORD=difyai123456
|
||||||
|
DB_HOST=db_postgres
|
||||||
|
DB_PORT=5432
|
||||||
|
DB_DATABASE=dify
|
||||||
|
|
||||||
|
# PostgreSQL Configuration
|
||||||
# postgres data directory
|
# postgres data directory
|
||||||
PGDATA=/var/lib/postgresql/data/pgdata
|
PGDATA=/var/lib/postgresql/data/pgdata
|
||||||
PGDATA_HOST_VOLUME=./volumes/db/data
|
PGDATA_HOST_VOLUME=./volumes/db/data
|
||||||
@@ -40,6 +46,46 @@ POSTGRES_MAINTENANCE_WORK_MEM=64MB
|
|||||||
# Reference: https://www.postgresql.org/docs/current/runtime-config-query.html#GUC-EFFECTIVE-CACHE-SIZE
|
# Reference: https://www.postgresql.org/docs/current/runtime-config-query.html#GUC-EFFECTIVE-CACHE-SIZE
|
||||||
POSTGRES_EFFECTIVE_CACHE_SIZE=4096MB
|
POSTGRES_EFFECTIVE_CACHE_SIZE=4096MB
|
||||||
|
|
||||||
|
# Sets the maximum allowed duration of any statement before termination.
|
||||||
|
# Default is 0 (no timeout).
|
||||||
|
#
|
||||||
|
# Reference: https://www.postgresql.org/docs/current/runtime-config-client.html#GUC-STATEMENT-TIMEOUT
|
||||||
|
# A value of 0 prevents the server from timing out statements.
|
||||||
|
POSTGRES_STATEMENT_TIMEOUT=0
|
||||||
|
|
||||||
|
# Sets the maximum allowed duration of any idle in-transaction session before termination.
|
||||||
|
# Default is 0 (no timeout).
|
||||||
|
#
|
||||||
|
# Reference: https://www.postgresql.org/docs/current/runtime-config-client.html#GUC-IDLE-IN-TRANSACTION-SESSION-TIMEOUT
|
||||||
|
# A value of 0 prevents the server from terminating idle sessions.
|
||||||
|
POSTGRES_IDLE_IN_TRANSACTION_SESSION_TIMEOUT=0
|
||||||
|
|
||||||
|
# MySQL Configuration
|
||||||
|
# MySQL data directory host volume
|
||||||
|
MYSQL_HOST_VOLUME=./volumes/mysql/data
|
||||||
|
|
||||||
|
# MySQL Performance Configuration
|
||||||
|
# Maximum number of connections to MySQL
|
||||||
|
# Default is 1000
|
||||||
|
MYSQL_MAX_CONNECTIONS=1000
|
||||||
|
|
||||||
|
# InnoDB buffer pool size
|
||||||
|
# Default is 512M
|
||||||
|
# Recommended value: 70-80% of available memory for dedicated MySQL server
|
||||||
|
# Reference: https://dev.mysql.com/doc/refman/8.0/en/innodb-parameters.html#sysvar_innodb_buffer_pool_size
|
||||||
|
MYSQL_INNODB_BUFFER_POOL_SIZE=512M
|
||||||
|
|
||||||
|
# InnoDB log file size
|
||||||
|
# Default is 128M
|
||||||
|
# Reference: https://dev.mysql.com/doc/refman/8.0/en/innodb-parameters.html#sysvar_innodb_log_file_size
|
||||||
|
MYSQL_INNODB_LOG_FILE_SIZE=128M
|
||||||
|
|
||||||
|
# InnoDB flush log at transaction commit
|
||||||
|
# Default is 2 (flush to OS cache, sync every second)
|
||||||
|
# Options: 0 (no flush), 1 (flush and sync), 2 (flush to OS cache)
|
||||||
|
# Reference: https://dev.mysql.com/doc/refman/8.0/en/innodb-parameters.html#sysvar_innodb_flush_log_at_trx_commit
|
||||||
|
MYSQL_INNODB_FLUSH_LOG_AT_TRX_COMMIT=2
|
||||||
|
|
||||||
# -----------------------------
|
# -----------------------------
|
||||||
# Environment Variables for redis Service
|
# Environment Variables for redis Service
|
||||||
# -----------------------------
|
# -----------------------------
|
||||||
@@ -77,12 +123,21 @@ WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih
|
|||||||
WEAVIATE_AUTHENTICATION_APIKEY_USERS=hello@dify.ai
|
WEAVIATE_AUTHENTICATION_APIKEY_USERS=hello@dify.ai
|
||||||
WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED=true
|
WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED=true
|
||||||
WEAVIATE_AUTHORIZATION_ADMINLIST_USERS=hello@dify.ai
|
WEAVIATE_AUTHORIZATION_ADMINLIST_USERS=hello@dify.ai
|
||||||
|
WEAVIATE_DISABLE_TELEMETRY=false
|
||||||
WEAVIATE_HOST_VOLUME=./volumes/weaviate
|
WEAVIATE_HOST_VOLUME=./volumes/weaviate
|
||||||
|
|
||||||
|
# ------------------------------
|
||||||
|
# Docker Compose profile configuration
|
||||||
|
# ------------------------------
|
||||||
|
# Loaded automatically when running `docker compose --env-file middleware.env ...`.
|
||||||
|
# Controls which DB/vector services start, so no extra `--profile` flag is needed.
|
||||||
|
COMPOSE_PROFILES=${DB_TYPE:-postgresql},weaviate
|
||||||
|
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
# Docker Compose Service Expose Host Port Configurations
|
# Docker Compose Service Expose Host Port Configurations
|
||||||
# ------------------------------
|
# ------------------------------
|
||||||
EXPOSE_POSTGRES_PORT=5432
|
EXPOSE_POSTGRES_PORT=5432
|
||||||
|
EXPOSE_MYSQL_PORT=3306
|
||||||
EXPOSE_REDIS_PORT=6379
|
EXPOSE_REDIS_PORT=6379
|
||||||
EXPOSE_SANDBOX_PORT=8194
|
EXPOSE_SANDBOX_PORT=8194
|
||||||
EXPOSE_SSRF_PROXY_PORT=3128
|
EXPOSE_SSRF_PROXY_PORT=3128
|
||||||
@@ -158,3 +213,24 @@ PLUGIN_VOLCENGINE_TOS_ENDPOINT=
|
|||||||
PLUGIN_VOLCENGINE_TOS_ACCESS_KEY=
|
PLUGIN_VOLCENGINE_TOS_ACCESS_KEY=
|
||||||
PLUGIN_VOLCENGINE_TOS_SECRET_KEY=
|
PLUGIN_VOLCENGINE_TOS_SECRET_KEY=
|
||||||
PLUGIN_VOLCENGINE_TOS_REGION=
|
PLUGIN_VOLCENGINE_TOS_REGION=
|
||||||
|
|
||||||
|
# ------------------------------
|
||||||
|
# Environment Variables for Aliyun SLS (Simple Log Service)
|
||||||
|
# ------------------------------
|
||||||
|
# Aliyun SLS Access Key ID
|
||||||
|
ALIYUN_SLS_ACCESS_KEY_ID=
|
||||||
|
# Aliyun SLS Access Key Secret
|
||||||
|
ALIYUN_SLS_ACCESS_KEY_SECRET=
|
||||||
|
# Aliyun SLS Endpoint (e.g., cn-hangzhou.log.aliyuncs.com)
|
||||||
|
ALIYUN_SLS_ENDPOINT=
|
||||||
|
# Aliyun SLS Region (e.g., cn-hangzhou)
|
||||||
|
ALIYUN_SLS_REGION=
|
||||||
|
# Aliyun SLS Project Name
|
||||||
|
ALIYUN_SLS_PROJECT_NAME=
|
||||||
|
# Aliyun SLS Logstore TTL (default: 365 days， 3650 for permanent storage)
|
||||||
|
ALIYUN_SLS_LOGSTORE_TTL=365
|
||||||
|
# Enable dual-write to both LogStore and SQL database (default: true)
|
||||||
|
LOGSTORE_DUAL_WRITE_ENABLED=true
|
||||||
|
# Enable dual-read fallback to SQL database when LogStore returns no results (default: true)
|
||||||
|
# Useful for migration scenarios where historical data exists only in SQL database
|
||||||
|
LOGSTORE_DUAL_READ_ENABLED=true
|
||||||
@@ -39,10 +39,17 @@ server {
|
|||||||
proxy_pass http://web:3000;
|
proxy_pass http://web:3000;
|
||||||
include proxy.conf;
|
include proxy.conf;
|
||||||
}
|
}
|
||||||
|
|
||||||
location /mcp {
|
location /mcp {
|
||||||
proxy_pass http://api:5001;
|
proxy_pass http://api:5001;
|
||||||
include proxy.conf;
|
include proxy.conf;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
location /triggers {
|
||||||
|
proxy_pass http://api:5001;
|
||||||
|
include proxy.conf;
|
||||||
|
}
|
||||||
|
|
||||||
# placeholder for acme challenge location
|
# placeholder for acme challenge location
|
||||||
${ACME_CHALLENGE_LOCATION}
|
${ACME_CHALLENGE_LOCATION}
|
||||||
|
|
||||||
|
|||||||
@@ -55,7 +55,8 @@ services:
|
|||||||
- ./volumes/data:/data
|
- ./volumes/data:/data
|
||||||
- ./volumes/logs:/logs
|
- ./volumes/logs:/logs
|
||||||
command:
|
command:
|
||||||
- --config=/tiflash.toml
|
- server
|
||||||
|
- --config-file=/tiflash.toml
|
||||||
depends_on:
|
depends_on:
|
||||||
- "tikv"
|
- "tikv"
|
||||||
- "tidb"
|
- "tidb"
|
||||||
|
|||||||
@@ -1,6 +1,5 @@
|
|||||||
APP_DOMAIN=$(PRIMARY_DOMAIN)
|
APP_DOMAIN=$(PRIMARY_DOMAIN)
|
||||||
APP_RELEASE=v0.28.0
|
APP_RELEASE=v1.2.1
|
||||||
SSL=false
|
|
||||||
|
|
||||||
WEB_REPLICAS=1
|
WEB_REPLICAS=1
|
||||||
SPACE_REPLICAS=1
|
SPACE_REPLICAS=1
|
||||||
@@ -77,6 +76,10 @@ MINIO_ENDPOINT_SSL=0
|
|||||||
|
|
||||||
# API key rate limit
|
# API key rate limit
|
||||||
API_KEY_RATE_LIMIT=60/minute
|
API_KEY_RATE_LIMIT=60/minute
|
||||||
|
|
||||||
|
# Live server environment variables
|
||||||
|
# WARNING: You must set a secure value for LIVE_SERVER_SECRET_KEY in production environments.
|
||||||
|
LIVE_SERVER_SECRET_KEY=
|
||||||
DOCKERHUB_USER=artifacts.plane.so/makeplane
|
DOCKERHUB_USER=artifacts.plane.so/makeplane
|
||||||
PULL_POLICY=if_not_present
|
PULL_POLICY=if_not_present
|
||||||
CUSTOM_BUILD=false
|
CUSTOM_BUILD=false
|
||||||
|
|||||||
@@ -24,7 +24,6 @@ x-aws-s3-env: &aws-s3-env
|
|||||||
AWS_S3_BUCKET_NAME: ${AWS_S3_BUCKET_NAME:-uploads}
|
AWS_S3_BUCKET_NAME: ${AWS_S3_BUCKET_NAME:-uploads}
|
||||||
|
|
||||||
x-proxy-env: &proxy-env
|
x-proxy-env: &proxy-env
|
||||||
SSL: ${SSL:-false}
|
|
||||||
APP_DOMAIN: ${APP_DOMAIN:-localhost}
|
APP_DOMAIN: ${APP_DOMAIN:-localhost}
|
||||||
FILE_SIZE_LIMIT: ${FILE_SIZE_LIMIT:-5242880}
|
FILE_SIZE_LIMIT: ${FILE_SIZE_LIMIT:-5242880}
|
||||||
CERT_EMAIL: ${CERT_EMAIL}
|
CERT_EMAIL: ${CERT_EMAIL}
|
||||||
@@ -47,6 +46,7 @@ x-mq-env:
|
|||||||
|
|
||||||
x-live-env: &live-env
|
x-live-env: &live-env
|
||||||
API_BASE_URL: ${API_BASE_URL:-http://api:8000}
|
API_BASE_URL: ${API_BASE_URL:-http://api:8000}
|
||||||
|
LIVE_SERVER_SECRET_KEY: ${LIVE_SERVER_SECRET_KEY:-2FiJk1U2aiVPEQtzLehYGlTSnTnrs7LW}
|
||||||
|
|
||||||
x-app-env: &app-env
|
x-app-env: &app-env
|
||||||
WEB_URL: ${WEB_URL:-http://localhost}
|
WEB_URL: ${WEB_URL:-http://localhost}
|
||||||
@@ -59,58 +59,59 @@ x-app-env: &app-env
|
|||||||
AMQP_URL: ${AMQP_URL:-amqp://plane:plane@plane-mq:5672/plane}
|
AMQP_URL: ${AMQP_URL:-amqp://plane:plane@plane-mq:5672/plane}
|
||||||
API_KEY_RATE_LIMIT: ${API_KEY_RATE_LIMIT:-60/minute}
|
API_KEY_RATE_LIMIT: ${API_KEY_RATE_LIMIT:-60/minute}
|
||||||
MINIO_ENDPOINT_SSL: ${MINIO_ENDPOINT_SSL:-0}
|
MINIO_ENDPOINT_SSL: ${MINIO_ENDPOINT_SSL:-0}
|
||||||
|
LIVE_SERVER_SECRET_KEY: ${LIVE_SERVER_SECRET_KEY:-2FiJk1U2aiVPEQtzLehYGlTSnTnrs7LW}
|
||||||
|
|
||||||
services:
|
services:
|
||||||
web:
|
web:
|
||||||
image: artifacts.plane.so/makeplane/plane-frontend:${APP_RELEASE:-v0.28.0}
|
image: artifacts.plane.so/makeplane/plane-frontend:${APP_RELEASE:-v1.2.1}
|
||||||
deploy:
|
deploy:
|
||||||
replicas: ${WEB_REPLICAS:-1}
|
replicas: ${WEB_REPLICAS:-1}
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
depends_on:
|
depends_on:
|
||||||
- api
|
- api
|
||||||
- worker
|
- worker
|
||||||
|
|
||||||
space:
|
space:
|
||||||
image: artifacts.plane.so/makeplane/plane-space:${APP_RELEASE:-v0.28.0}
|
image: artifacts.plane.so/makeplane/plane-space:${APP_RELEASE:-v1.2.1}
|
||||||
deploy:
|
deploy:
|
||||||
replicas: ${SPACE_REPLICAS:-1}
|
replicas: ${SPACE_REPLICAS:-1}
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
depends_on:
|
depends_on:
|
||||||
- api
|
- api
|
||||||
- worker
|
- worker
|
||||||
- web
|
- web
|
||||||
|
|
||||||
admin:
|
admin:
|
||||||
image: artifacts.plane.so/makeplane/plane-admin:${APP_RELEASE:-v0.28.0}
|
image: artifacts.plane.so/makeplane/plane-admin:${APP_RELEASE:-v1.2.1}
|
||||||
deploy:
|
deploy:
|
||||||
replicas: ${ADMIN_REPLICAS:-1}
|
replicas: ${ADMIN_REPLICAS:-1}
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
depends_on:
|
depends_on:
|
||||||
- api
|
- api
|
||||||
- web
|
- web
|
||||||
|
|
||||||
live:
|
live:
|
||||||
image: artifacts.plane.so/makeplane/plane-live:${APP_RELEASE:-v0.28.0}
|
image: artifacts.plane.so/makeplane/plane-live:${APP_RELEASE:-v1.2.1}
|
||||||
environment:
|
environment:
|
||||||
<<: [ *live-env ]
|
<<: [ *live-env, *redis-env ]
|
||||||
deploy:
|
deploy:
|
||||||
replicas: ${LIVE_REPLICAS:-1}
|
replicas: ${LIVE_REPLICAS:-1}
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
depends_on:
|
depends_on:
|
||||||
- api
|
- api
|
||||||
- web
|
- web
|
||||||
|
|
||||||
api:
|
api:
|
||||||
image: artifacts.plane.so/makeplane/plane-backend:${APP_RELEASE:-v0.28.0}
|
image: artifacts.plane.so/makeplane/plane-backend:${APP_RELEASE:-v1.2.1}
|
||||||
command: ./bin/docker-entrypoint-api.sh
|
command: ./bin/docker-entrypoint-api.sh
|
||||||
deploy:
|
deploy:
|
||||||
replicas: ${API_REPLICAS:-1}
|
replicas: ${API_REPLICAS:-1}
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
volumes:
|
volumes:
|
||||||
- logs_api:/code/plane/logs
|
- logs_api:/code/plane/logs
|
||||||
environment:
|
environment:
|
||||||
@@ -121,12 +122,12 @@ services:
|
|||||||
- plane-mq
|
- plane-mq
|
||||||
|
|
||||||
worker:
|
worker:
|
||||||
image: artifacts.plane.so/makeplane/plane-backend:${APP_RELEASE:-v0.28.0}
|
image: artifacts.plane.so/makeplane/plane-backend:${APP_RELEASE:-v1.2.1}
|
||||||
command: ./bin/docker-entrypoint-worker.sh
|
command: ./bin/docker-entrypoint-worker.sh
|
||||||
deploy:
|
deploy:
|
||||||
replicas: ${WORKER_REPLICAS:-1}
|
replicas: ${WORKER_REPLICAS:-1}
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
volumes:
|
volumes:
|
||||||
- logs_worker:/code/plane/logs
|
- logs_worker:/code/plane/logs
|
||||||
environment:
|
environment:
|
||||||
@@ -138,12 +139,12 @@ services:
|
|||||||
- plane-mq
|
- plane-mq
|
||||||
|
|
||||||
beat-worker:
|
beat-worker:
|
||||||
image: artifacts.plane.so/makeplane/plane-backend:${APP_RELEASE:-v0.28.0}
|
image: artifacts.plane.so/makeplane/plane-backend:${APP_RELEASE:-v1.2.1}
|
||||||
command: ./bin/docker-entrypoint-beat.sh
|
command: ./bin/docker-entrypoint-beat.sh
|
||||||
deploy:
|
deploy:
|
||||||
replicas: ${BEAT_WORKER_REPLICAS:-1}
|
replicas: ${BEAT_WORKER_REPLICAS:-1}
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
volumes:
|
volumes:
|
||||||
- logs_beat-worker:/code/plane/logs
|
- logs_beat-worker:/code/plane/logs
|
||||||
environment:
|
environment:
|
||||||
@@ -155,7 +156,7 @@ services:
|
|||||||
- plane-mq
|
- plane-mq
|
||||||
|
|
||||||
migrator:
|
migrator:
|
||||||
image: artifacts.plane.so/makeplane/plane-backend:${APP_RELEASE:-v0.28.0}
|
image: artifacts.plane.so/makeplane/plane-backend:${APP_RELEASE:-v1.2.1}
|
||||||
command: ./bin/docker-entrypoint-migrator.sh
|
command: ./bin/docker-entrypoint-migrator.sh
|
||||||
deploy:
|
deploy:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
@@ -176,18 +177,18 @@ services:
|
|||||||
deploy:
|
deploy:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
environment:
|
environment:
|
||||||
<<: *db-env
|
<<: *db-env
|
||||||
volumes:
|
volumes:
|
||||||
- pgdata:/var/lib/postgresql/data
|
- pgdata:/var/lib/postgresql/data
|
||||||
|
|
||||||
plane-redis:
|
plane-redis:
|
||||||
image: valkey/valkey:7.2.5-alpine
|
image: valkey/valkey:7.2.11-alpine
|
||||||
deploy:
|
deploy:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
volumes:
|
volumes:
|
||||||
- redisdata:/data
|
- redisdata:/data
|
||||||
|
|
||||||
@@ -196,7 +197,7 @@ services:
|
|||||||
deploy:
|
deploy:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
environment:
|
environment:
|
||||||
<<: *mq-env
|
<<: *mq-env
|
||||||
volumes:
|
volumes:
|
||||||
@@ -209,7 +210,7 @@ services:
|
|||||||
deploy:
|
deploy:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
environment:
|
environment:
|
||||||
<<: *minio-env
|
<<: *minio-env
|
||||||
volumes:
|
volumes:
|
||||||
@@ -217,20 +218,11 @@ services:
|
|||||||
|
|
||||||
# Comment this if you already have a reverse proxy running
|
# Comment this if you already have a reverse proxy running
|
||||||
proxy:
|
proxy:
|
||||||
image: artifacts.plane.so/makeplane/plane-proxy:${APP_RELEASE:-v0.28.0}
|
image: artifacts.plane.so/makeplane/plane-proxy:${APP_RELEASE:-v1.2.1}
|
||||||
command:
|
|
||||||
[
|
|
||||||
"caddy",
|
|
||||||
"run",
|
|
||||||
"--config",
|
|
||||||
"/etc/caddy/Caddyfile",
|
|
||||||
"--adapter",
|
|
||||||
"caddyfile"
|
|
||||||
]
|
|
||||||
deploy:
|
deploy:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: any
|
||||||
environment:
|
environment:
|
||||||
<<: *proxy-env
|
<<: *proxy-env
|
||||||
volumes:
|
volumes:
|
||||||
|
|||||||
Reference in New Issue
Block a user