Docker Compose国内镜像一键部署dify

克隆代码

git clone https://github.com/langgenius/dify.git

进入docker目录

cd docker

修改.env部分

# 将环境模版文件变量重命名
cp .env.example .env
# 修改 .env,修改nginx的host和端口,避免端口冲突
NGINX_SERVER_NAME=192.168.1.223
NGINX_PORT=1880
NGINX_SSL_PORT=1443
EXPOSE_NGINX_PORT=1880
EXPOSE_NGINX_SSL_PORT=1443# 修改default.conf.template 中http://plugin_daemon:5002 ,这是调试地址
root@app:~/dify# grep "5002" nginx/conf.d/default.confproxy_pass http://localhost:5002;

dify.yaml国内镜像文件如下

# ==================================================================
# WARNING: This file is auto-generated by generate_docker_compose
# Do not modify this file directly. Instead, update the .env.example
# or docker-compose-template.yaml and regenerate this file.
# ==================================================================x-shared-env: &shared-api-worker-envCONSOLE_API_URL: ${CONSOLE_API_URL:-}CONSOLE_WEB_URL: ${CONSOLE_WEB_URL:-}SERVICE_API_URL: ${SERVICE_API_URL:-}APP_API_URL: ${APP_API_URL:-}APP_WEB_URL: ${APP_WEB_URL:-}FILES_URL: ${FILES_URL:-}LOG_LEVEL: ${LOG_LEVEL:-INFO}LOG_FILE: ${LOG_FILE:-/app/logs/server.log}LOG_FILE_MAX_SIZE: ${LOG_FILE_MAX_SIZE:-20}LOG_FILE_BACKUP_COUNT: ${LOG_FILE_BACKUP_COUNT:-5}LOG_DATEFORMAT: ${LOG_DATEFORMAT:-%Y-%m-%d %H:%M:%S}LOG_TZ: ${LOG_TZ:-UTC}DEBUG: ${DEBUG:-false}FLASK_DEBUG: ${FLASK_DEBUG:-false}SECRET_KEY: ${SECRET_KEY:-sk-9f73s3ljTXVcMT3Blb3ljTqtsKiGHXVcMT3BlbkFJLK7U}INIT_PASSWORD: ${INIT_PASSWORD:-}DEPLOY_ENV: ${DEPLOY_ENV:-PRODUCTION}CHECK_UPDATE_URL: ${CHECK_UPDATE_URL:-https://updates.dify.ai}OPENAI_API_BASE: ${OPENAI_API_BASE:-https://api.openai.com/v1}MIGRATION_ENABLED: ${MIGRATION_ENABLED:-true}FILES_ACCESS_TIMEOUT: ${FILES_ACCESS_TIMEOUT:-300}ACCESS_TOKEN_EXPIRE_MINUTES: ${ACCESS_TOKEN_EXPIRE_MINUTES:-60}REFRESH_TOKEN_EXPIRE_DAYS: ${REFRESH_TOKEN_EXPIRE_DAYS:-30}APP_MAX_ACTIVE_REQUESTS: ${APP_MAX_ACTIVE_REQUESTS:-0}APP_MAX_EXECUTION_TIME: ${APP_MAX_EXECUTION_TIME:-1200}DIFY_BIND_ADDRESS: ${DIFY_BIND_ADDRESS:-0.0.0.0}DIFY_PORT: ${DIFY_PORT:-5001}SERVER_WORKER_AMOUNT: ${SERVER_WORKER_AMOUNT:-1}SERVER_WORKER_CLASS: ${SERVER_WORKER_CLASS:-gevent}SERVER_WORKER_CONNECTIONS: ${SERVER_WORKER_CONNECTIONS:-10}CELERY_WORKER_CLASS: ${CELERY_WORKER_CLASS:-}GUNICORN_TIMEOUT: ${GUNICORN_TIMEOUT:-360}CELERY_WORKER_AMOUNT: ${CELERY_WORKER_AMOUNT:-}CELERY_AUTO_SCALE: ${CELERY_AUTO_SCALE:-false}CELERY_MAX_WORKERS: ${CELERY_MAX_WORKERS:-}CELERY_MIN_WORKERS: ${CELERY_MIN_WORKERS:-}API_TOOL_DEFAULT_CONNECT_TIMEOUT: ${API_TOOL_DEFAULT_CONNECT_TIMEOUT:-10}API_TOOL_DEFAULT_READ_TIMEOUT: ${API_TOOL_DEFAULT_READ_TIMEOUT:-60}DB_USERNAME: ${DB_USERNAME:-postgres}DB_PASSWORD: ${DB_PASSWORD:-difyai123456}DB_HOST: ${DB_HOST:-db}DB_PORT: ${DB_PORT:-5432}DB_DATABASE: ${DB_DATABASE:-dify}SQLALCHEMY_POOL_SIZE: ${SQLALCHEMY_POOL_SIZE:-30}SQLALCHEMY_POOL_RECYCLE: ${SQLALCHEMY_POOL_RECYCLE:-3600}SQLALCHEMY_ECHO: ${SQLALCHEMY_ECHO:-false}POSTGRES_MAX_CONNECTIONS: ${POSTGRES_MAX_CONNECTIONS:-100}POSTGRES_SHARED_BUFFERS: ${POSTGRES_SHARED_BUFFERS:-128MB}POSTGRES_WORK_MEM: ${POSTGRES_WORK_MEM:-4MB}POSTGRES_MAINTENANCE_WORK_MEM: ${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}POSTGRES_EFFECTIVE_CACHE_SIZE: ${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}REDIS_HOST: ${REDIS_HOST:-redis}REDIS_PORT: ${REDIS_PORT:-6379}REDIS_USERNAME: ${REDIS_USERNAME:-}REDIS_PASSWORD: ${REDIS_PASSWORD:-difyai123456}REDIS_USE_SSL: ${REDIS_USE_SSL:-false}REDIS_DB: ${REDIS_DB:-0}REDIS_USE_SENTINEL: ${REDIS_USE_SENTINEL:-false}REDIS_SENTINELS: ${REDIS_SENTINELS:-}REDIS_SENTINEL_SERVICE_NAME: ${REDIS_SENTINEL_SERVICE_NAME:-}REDIS_SENTINEL_USERNAME: ${REDIS_SENTINEL_USERNAME:-}REDIS_SENTINEL_PASSWORD: ${REDIS_SENTINEL_PASSWORD:-}REDIS_SENTINEL_SOCKET_TIMEOUT: ${REDIS_SENTINEL_SOCKET_TIMEOUT:-0.1}REDIS_USE_CLUSTERS: ${REDIS_USE_CLUSTERS:-false}REDIS_CLUSTERS: ${REDIS_CLUSTERS:-}REDIS_CLUSTERS_PASSWORD: ${REDIS_CLUSTERS_PASSWORD:-}CELERY_BROKER_URL: ${CELERY_BROKER_URL:-redis://:difyai123456@redis:6379/1}BROKER_USE_SSL: ${BROKER_USE_SSL:-false}CELERY_USE_SENTINEL: ${CELERY_USE_SENTINEL:-false}CELERY_SENTINEL_MASTER_NAME: ${CELERY_SENTINEL_MASTER_NAME:-}CELERY_SENTINEL_SOCKET_TIMEOUT: ${CELERY_SENTINEL_SOCKET_TIMEOUT:-0.1}WEB_API_CORS_ALLOW_ORIGINS: ${WEB_API_CORS_ALLOW_ORIGINS:-*}CONSOLE_CORS_ALLOW_ORIGINS: ${CONSOLE_CORS_ALLOW_ORIGINS:-*}STORAGE_TYPE: ${STORAGE_TYPE:-opendal}OPENDAL_SCHEME: ${OPENDAL_SCHEME:-fs}OPENDAL_FS_ROOT: ${OPENDAL_FS_ROOT:-storage}S3_ENDPOINT: ${S3_ENDPOINT:-}S3_REGION: ${S3_REGION:-us-east-1}S3_BUCKET_NAME: ${S3_BUCKET_NAME:-difyai}S3_ACCESS_KEY: ${S3_ACCESS_KEY:-}S3_SECRET_KEY: ${S3_SECRET_KEY:-}S3_USE_AWS_MANAGED_IAM: ${S3_USE_AWS_MANAGED_IAM:-false}AZURE_BLOB_ACCOUNT_NAME: ${AZURE_BLOB_ACCOUNT_NAME:-difyai}AZURE_BLOB_ACCOUNT_KEY: ${AZURE_BLOB_ACCOUNT_KEY:-difyai}AZURE_BLOB_CONTAINER_NAME: ${AZURE_BLOB_CONTAINER_NAME:-difyai-container}AZURE_BLOB_ACCOUNT_URL: ${AZURE_BLOB_ACCOUNT_URL:-https://<your_account_name>.blob.core.windows.net}GOOGLE_STORAGE_BUCKET_NAME: ${GOOGLE_STORAGE_BUCKET_NAME:-your-bucket-name}GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64: ${GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64:-}ALIYUN_OSS_BUCKET_NAME: ${ALIYUN_OSS_BUCKET_NAME:-your-bucket-name}ALIYUN_OSS_ACCESS_KEY: ${ALIYUN_OSS_ACCESS_KEY:-your-access-key}ALIYUN_OSS_SECRET_KEY: ${ALIYUN_OSS_SECRET_KEY:-your-secret-key}ALIYUN_OSS_ENDPOINT: ${ALIYUN_OSS_ENDPOINT:-https://oss-ap-southeast-1-internal.aliyuncs.com}ALIYUN_OSS_REGION: ${ALIYUN_OSS_REGION:-ap-southeast-1}ALIYUN_OSS_AUTH_VERSION: ${ALIYUN_OSS_AUTH_VERSION:-v4}ALIYUN_OSS_PATH: ${ALIYUN_OSS_PATH:-your-path}TENCENT_COS_BUCKET_NAME: ${TENCENT_COS_BUCKET_NAME:-your-bucket-name}TENCENT_COS_SECRET_KEY: ${TENCENT_COS_SECRET_KEY:-your-secret-key}TENCENT_COS_SECRET_ID: ${TENCENT_COS_SECRET_ID:-your-secret-id}TENCENT_COS_REGION: ${TENCENT_COS_REGION:-your-region}TENCENT_COS_SCHEME: ${TENCENT_COS_SCHEME:-your-scheme}OCI_ENDPOINT: ${OCI_ENDPOINT:-https://objectstorage.us-ashburn-1.oraclecloud.com}OCI_BUCKET_NAME: ${OCI_BUCKET_NAME:-your-bucket-name}OCI_ACCESS_KEY: ${OCI_ACCESS_KEY:-your-access-key}OCI_SECRET_KEY: ${OCI_SECRET_KEY:-your-secret-key}OCI_REGION: ${OCI_REGION:-us-ashburn-1}HUAWEI_OBS_BUCKET_NAME: ${HUAWEI_OBS_BUCKET_NAME:-your-bucket-name}HUAWEI_OBS_SECRET_KEY: ${HUAWEI_OBS_SECRET_KEY:-your-secret-key}HUAWEI_OBS_ACCESS_KEY: ${HUAWEI_OBS_ACCESS_KEY:-your-access-key}HUAWEI_OBS_SERVER: ${HUAWEI_OBS_SERVER:-your-server-url}VOLCENGINE_TOS_BUCKET_NAME: ${VOLCENGINE_TOS_BUCKET_NAME:-your-bucket-name}VOLCENGINE_TOS_SECRET_KEY: ${VOLCENGINE_TOS_SECRET_KEY:-your-secret-key}VOLCENGINE_TOS_ACCESS_KEY: ${VOLCENGINE_TOS_ACCESS_KEY:-your-access-key}VOLCENGINE_TOS_ENDPOINT: ${VOLCENGINE_TOS_ENDPOINT:-your-server-url}VOLCENGINE_TOS_REGION: ${VOLCENGINE_TOS_REGION:-your-region}BAIDU_OBS_BUCKET_NAME: ${BAIDU_OBS_BUCKET_NAME:-your-bucket-name}BAIDU_OBS_SECRET_KEY: ${BAIDU_OBS_SECRET_KEY:-your-secret-key}BAIDU_OBS_ACCESS_KEY: ${BAIDU_OBS_ACCESS_KEY:-your-access-key}BAIDU_OBS_ENDPOINT: ${BAIDU_OBS_ENDPOINT:-your-server-url}SUPABASE_BUCKET_NAME: ${SUPABASE_BUCKET_NAME:-your-bucket-name}SUPABASE_API_KEY: ${SUPABASE_API_KEY:-your-access-key}SUPABASE_URL: ${SUPABASE_URL:-your-server-url}VECTOR_STORE: ${VECTOR_STORE:-weaviate}WEAVIATE_ENDPOINT: ${WEAVIATE_ENDPOINT:-http://weaviate:8080}WEAVIATE_API_KEY: ${WEAVIATE_API_KEY:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}QDRANT_URL: ${QDRANT_URL:-http://qdrant:6333}QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456}QDRANT_CLIENT_TIMEOUT: ${QDRANT_CLIENT_TIMEOUT:-20}QDRANT_GRPC_ENABLED: ${QDRANT_GRPC_ENABLED:-false}QDRANT_GRPC_PORT: ${QDRANT_GRPC_PORT:-6334}MILVUS_URI: ${MILVUS_URI:-http://127.0.0.1:19530}MILVUS_TOKEN: ${MILVUS_TOKEN:-}MILVUS_USER: ${MILVUS_USER:-root}MILVUS_PASSWORD: ${MILVUS_PASSWORD:-Milvus}MILVUS_ENABLE_HYBRID_SEARCH: ${MILVUS_ENABLE_HYBRID_SEARCH:-False}MYSCALE_HOST: ${MYSCALE_HOST:-myscale}MYSCALE_PORT: ${MYSCALE_PORT:-8123}MYSCALE_USER: ${MYSCALE_USER:-default}MYSCALE_PASSWORD: ${MYSCALE_PASSWORD:-}MYSCALE_DATABASE: ${MYSCALE_DATABASE:-dify}MYSCALE_FTS_PARAMS: ${MYSCALE_FTS_PARAMS:-}COUCHBASE_CONNECTION_STRING: ${COUCHBASE_CONNECTION_STRING:-couchbase://couchbase-server}COUCHBASE_USER: ${COUCHBASE_USER:-Administrator}COUCHBASE_PASSWORD: ${COUCHBASE_PASSWORD:-password}COUCHBASE_BUCKET_NAME: ${COUCHBASE_BUCKET_NAME:-Embeddings}COUCHBASE_SCOPE_NAME: ${COUCHBASE_SCOPE_NAME:-_default}PGVECTOR_HOST: ${PGVECTOR_HOST:-pgvector}PGVECTOR_PORT: ${PGVECTOR_PORT:-5432}PGVECTOR_USER: ${PGVECTOR_USER:-postgres}PGVECTOR_PASSWORD: ${PGVECTOR_PASSWORD:-difyai123456}PGVECTOR_DATABASE: ${PGVECTOR_DATABASE:-dify}PGVECTOR_MIN_CONNECTION: ${PGVECTOR_MIN_CONNECTION:-1}PGVECTOR_MAX_CONNECTION: ${PGVECTOR_MAX_CONNECTION:-5}PGVECTO_RS_HOST: ${PGVECTO_RS_HOST:-pgvecto-rs}PGVECTO_RS_PORT: ${PGVECTO_RS_PORT:-5432}PGVECTO_RS_USER: ${PGVECTO_RS_USER:-postgres}PGVECTO_RS_PASSWORD: ${PGVECTO_RS_PASSWORD:-difyai123456}PGVECTO_RS_DATABASE: ${PGVECTO_RS_DATABASE:-dify}ANALYTICDB_KEY_ID: ${ANALYTICDB_KEY_ID:-your-ak}ANALYTICDB_KEY_SECRET: ${ANALYTICDB_KEY_SECRET:-your-sk}ANALYTICDB_REGION_ID: ${ANALYTICDB_REGION_ID:-cn-hangzhou}ANALYTICDB_INSTANCE_ID: ${ANALYTICDB_INSTANCE_ID:-gp-ab123456}ANALYTICDB_ACCOUNT: ${ANALYTICDB_ACCOUNT:-testaccount}ANALYTICDB_PASSWORD: ${ANALYTICDB_PASSWORD:-testpassword}ANALYTICDB_NAMESPACE: ${ANALYTICDB_NAMESPACE:-dify}ANALYTICDB_NAMESPACE_PASSWORD: ${ANALYTICDB_NAMESPACE_PASSWORD:-difypassword}ANALYTICDB_HOST: ${ANALYTICDB_HOST:-gp-test.aliyuncs.com}ANALYTICDB_PORT: ${ANALYTICDB_PORT:-5432}ANALYTICDB_MIN_CONNECTION: ${ANALYTICDB_MIN_CONNECTION:-1}ANALYTICDB_MAX_CONNECTION: ${ANALYTICDB_MAX_CONNECTION:-5}TIDB_VECTOR_HOST: ${TIDB_VECTOR_HOST:-tidb}TIDB_VECTOR_PORT: ${TIDB_VECTOR_PORT:-4000}TIDB_VECTOR_USER: ${TIDB_VECTOR_USER:-}TIDB_VECTOR_PASSWORD: ${TIDB_VECTOR_PASSWORD:-}TIDB_VECTOR_DATABASE: ${TIDB_VECTOR_DATABASE:-dify}TIDB_ON_QDRANT_URL: ${TIDB_ON_QDRANT_URL:-http://127.0.0.1}TIDB_ON_QDRANT_API_KEY: ${TIDB_ON_QDRANT_API_KEY:-dify}TIDB_ON_QDRANT_CLIENT_TIMEOUT: ${TIDB_ON_QDRANT_CLIENT_TIMEOUT:-20}TIDB_ON_QDRANT_GRPC_ENABLED: ${TIDB_ON_QDRANT_GRPC_ENABLED:-false}TIDB_ON_QDRANT_GRPC_PORT: ${TIDB_ON_QDRANT_GRPC_PORT:-6334}TIDB_PUBLIC_KEY: ${TIDB_PUBLIC_KEY:-dify}TIDB_PRIVATE_KEY: ${TIDB_PRIVATE_KEY:-dify}TIDB_API_URL: ${TIDB_API_URL:-http://127.0.0.1}TIDB_IAM_API_URL: ${TIDB_IAM_API_URL:-http://127.0.0.1}TIDB_REGION: ${TIDB_REGION:-regions/aws-us-east-1}TIDB_PROJECT_ID: ${TIDB_PROJECT_ID:-dify}TIDB_SPEND_LIMIT: ${TIDB_SPEND_LIMIT:-100}CHROMA_HOST: ${CHROMA_HOST:-127.0.0.1}CHROMA_PORT: ${CHROMA_PORT:-8000}CHROMA_TENANT: ${CHROMA_TENANT:-default_tenant}CHROMA_DATABASE: ${CHROMA_DATABASE:-default_database}CHROMA_AUTH_PROVIDER: ${CHROMA_AUTH_PROVIDER:-chromadb.auth.token_authn.TokenAuthClientProvider}CHROMA_AUTH_CREDENTIALS: ${CHROMA_AUTH_CREDENTIALS:-}ORACLE_HOST: ${ORACLE_HOST:-oracle}ORACLE_PORT: ${ORACLE_PORT:-1521}ORACLE_USER: ${ORACLE_USER:-dify}ORACLE_PASSWORD: ${ORACLE_PASSWORD:-dify}ORACLE_DATABASE: ${ORACLE_DATABASE:-FREEPDB1}RELYT_HOST: ${RELYT_HOST:-db}RELYT_PORT: ${RELYT_PORT:-5432}RELYT_USER: ${RELYT_USER:-postgres}RELYT_PASSWORD: ${RELYT_PASSWORD:-difyai123456}RELYT_DATABASE: ${RELYT_DATABASE:-postgres}OPENSEARCH_HOST: ${OPENSEARCH_HOST:-opensearch}OPENSEARCH_PORT: ${OPENSEARCH_PORT:-9200}OPENSEARCH_USER: ${OPENSEARCH_USER:-admin}OPENSEARCH_PASSWORD: ${OPENSEARCH_PASSWORD:-admin}OPENSEARCH_SECURE: ${OPENSEARCH_SECURE:-true}TENCENT_VECTOR_DB_URL: ${TENCENT_VECTOR_DB_URL:-http://127.0.0.1}TENCENT_VECTOR_DB_API_KEY: ${TENCENT_VECTOR_DB_API_KEY:-dify}TENCENT_VECTOR_DB_TIMEOUT: ${TENCENT_VECTOR_DB_TIMEOUT:-30}TENCENT_VECTOR_DB_USERNAME: ${TENCENT_VECTOR_DB_USERNAME:-dify}TENCENT_VECTOR_DB_DATABASE: ${TENCENT_VECTOR_DB_DATABASE:-dify}TENCENT_VECTOR_DB_SHARD: ${TENCENT_VECTOR_DB_SHARD:-1}TENCENT_VECTOR_DB_REPLICAS: ${TENCENT_VECTOR_DB_REPLICAS:-2}ELASTICSEARCH_HOST: ${ELASTICSEARCH_HOST:-0.0.0.0}ELASTICSEARCH_PORT: ${ELASTICSEARCH_PORT:-9200}ELASTICSEARCH_USERNAME: ${ELASTICSEARCH_USERNAME:-elastic}ELASTICSEARCH_PASSWORD: ${ELASTICSEARCH_PASSWORD:-elastic}KIBANA_PORT: ${KIBANA_PORT:-5601}BAIDU_VECTOR_DB_ENDPOINT: ${BAIDU_VECTOR_DB_ENDPOINT:-http://127.0.0.1:5287}BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS: ${BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS:-30000}BAIDU_VECTOR_DB_ACCOUNT: ${BAIDU_VECTOR_DB_ACCOUNT:-root}BAIDU_VECTOR_DB_API_KEY: ${BAIDU_VECTOR_DB_API_KEY:-dify}BAIDU_VECTOR_DB_DATABASE: ${BAIDU_VECTOR_DB_DATABASE:-dify}BAIDU_VECTOR_DB_SHARD: ${BAIDU_VECTOR_DB_SHARD:-1}BAIDU_VECTOR_DB_REPLICAS: ${BAIDU_VECTOR_DB_REPLICAS:-3}VIKINGDB_ACCESS_KEY: ${VIKINGDB_ACCESS_KEY:-your-ak}VIKINGDB_SECRET_KEY: ${VIKINGDB_SECRET_KEY:-your-sk}VIKINGDB_REGION: ${VIKINGDB_REGION:-cn-shanghai}VIKINGDB_HOST: ${VIKINGDB_HOST:-api-vikingdb.xxx.volces.com}VIKINGDB_SCHEMA: ${VIKINGDB_SCHEMA:-http}VIKINGDB_CONNECTION_TIMEOUT: ${VIKINGDB_CONNECTION_TIMEOUT:-30}VIKINGDB_SOCKET_TIMEOUT: ${VIKINGDB_SOCKET_TIMEOUT:-30}LINDORM_URL: ${LINDORM_URL:-http://lindorm:30070}LINDORM_USERNAME: ${LINDORM_USERNAME:-lindorm}LINDORM_PASSWORD: ${LINDORM_PASSWORD:-lindorm}OCEANBASE_VECTOR_HOST: ${OCEANBASE_VECTOR_HOST:-oceanbase}OCEANBASE_VECTOR_PORT: ${OCEANBASE_VECTOR_PORT:-2881}OCEANBASE_VECTOR_USER: ${OCEANBASE_VECTOR_USER:-root@test}OCEANBASE_VECTOR_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}OCEANBASE_VECTOR_DATABASE: ${OCEANBASE_VECTOR_DATABASE:-test}OCEANBASE_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}OCEANBASE_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}UPSTASH_VECTOR_URL: ${UPSTASH_VECTOR_URL:-https://xxx-vector.upstash.io}UPSTASH_VECTOR_TOKEN: ${UPSTASH_VECTOR_TOKEN:-dify}UPLOAD_FILE_SIZE_LIMIT: ${UPLOAD_FILE_SIZE_LIMIT:-15}UPLOAD_FILE_BATCH_LIMIT: ${UPLOAD_FILE_BATCH_LIMIT:-5}ETL_TYPE: ${ETL_TYPE:-dify}UNSTRUCTURED_API_URL: ${UNSTRUCTURED_API_URL:-}UNSTRUCTURED_API_KEY: ${UNSTRUCTURED_API_KEY:-}SCARF_NO_ANALYTICS: ${SCARF_NO_ANALYTICS:-true}PROMPT_GENERATION_MAX_TOKENS: ${PROMPT_GENERATION_MAX_TOKENS:-512}CODE_GENERATION_MAX_TOKENS: ${CODE_GENERATION_MAX_TOKENS:-1024}MULTIMODAL_SEND_FORMAT: ${MULTIMODAL_SEND_FORMAT:-base64}UPLOAD_IMAGE_FILE_SIZE_LIMIT: ${UPLOAD_IMAGE_FILE_SIZE_LIMIT:-10}UPLOAD_VIDEO_FILE_SIZE_LIMIT: ${UPLOAD_VIDEO_FILE_SIZE_LIMIT:-100}UPLOAD_AUDIO_FILE_SIZE_LIMIT: ${UPLOAD_AUDIO_FILE_SIZE_LIMIT:-50}SENTRY_DSN: ${SENTRY_DSN:-}API_SENTRY_DSN: ${API_SENTRY_DSN:-}API_SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}API_SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}WEB_SENTRY_DSN: ${WEB_SENTRY_DSN:-}NOTION_INTEGRATION_TYPE: ${NOTION_INTEGRATION_TYPE:-public}NOTION_CLIENT_SECRET: ${NOTION_CLIENT_SECRET:-}NOTION_CLIENT_ID: ${NOTION_CLIENT_ID:-}NOTION_INTERNAL_SECRET: ${NOTION_INTERNAL_SECRET:-}MAIL_TYPE: ${MAIL_TYPE:-resend}MAIL_DEFAULT_SEND_FROM: ${MAIL_DEFAULT_SEND_FROM:-}RESEND_API_URL: ${RESEND_API_URL:-https://api.resend.com}RESEND_API_KEY: ${RESEND_API_KEY:-your-resend-api-key}SMTP_SERVER: ${SMTP_SERVER:-}SMTP_PORT: ${SMTP_PORT:-465}SMTP_USERNAME: ${SMTP_USERNAME:-}SMTP_PASSWORD: ${SMTP_PASSWORD:-}SMTP_USE_TLS: ${SMTP_USE_TLS:-true}SMTP_OPPORTUNISTIC_TLS: ${SMTP_OPPORTUNISTIC_TLS:-false}INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-4000}INVITE_EXPIRY_HOURS: ${INVITE_EXPIRY_HOURS:-72}RESET_PASSWORD_TOKEN_EXPIRY_MINUTES: ${RESET_PASSWORD_TOKEN_EXPIRY_MINUTES:-5}CODE_EXECUTION_ENDPOINT: ${CODE_EXECUTION_ENDPOINT:-http://sandbox:8194}CODE_EXECUTION_API_KEY: ${CODE_EXECUTION_API_KEY:-dify-sandbox}CODE_MAX_NUMBER: ${CODE_MAX_NUMBER:-9223372036854775807}CODE_MIN_NUMBER: ${CODE_MIN_NUMBER:--9223372036854775808}CODE_MAX_DEPTH: ${CODE_MAX_DEPTH:-5}CODE_MAX_PRECISION: ${CODE_MAX_PRECISION:-20}CODE_MAX_STRING_LENGTH: ${CODE_MAX_STRING_LENGTH:-80000}CODE_MAX_STRING_ARRAY_LENGTH: ${CODE_MAX_STRING_ARRAY_LENGTH:-30}CODE_MAX_OBJECT_ARRAY_LENGTH: ${CODE_MAX_OBJECT_ARRAY_LENGTH:-30}CODE_MAX_NUMBER_ARRAY_LENGTH: ${CODE_MAX_NUMBER_ARRAY_LENGTH:-1000}CODE_EXECUTION_CONNECT_TIMEOUT: ${CODE_EXECUTION_CONNECT_TIMEOUT:-10}CODE_EXECUTION_READ_TIMEOUT: ${CODE_EXECUTION_READ_TIMEOUT:-60}CODE_EXECUTION_WRITE_TIMEOUT: ${CODE_EXECUTION_WRITE_TIMEOUT:-10}TEMPLATE_TRANSFORM_MAX_LENGTH: ${TEMPLATE_TRANSFORM_MAX_LENGTH:-80000}WORKFLOW_MAX_EXECUTION_STEPS: ${WORKFLOW_MAX_EXECUTION_STEPS:-500}WORKFLOW_MAX_EXECUTION_TIME: ${WORKFLOW_MAX_EXECUTION_TIME:-1200}WORKFLOW_CALL_MAX_DEPTH: ${WORKFLOW_CALL_MAX_DEPTH:-5}MAX_VARIABLE_SIZE: ${MAX_VARIABLE_SIZE:-204800}WORKFLOW_PARALLEL_DEPTH_LIMIT: ${WORKFLOW_PARALLEL_DEPTH_LIMIT:-3}WORKFLOW_FILE_UPLOAD_LIMIT: ${WORKFLOW_FILE_UPLOAD_LIMIT:-10}HTTP_REQUEST_NODE_MAX_BINARY_SIZE: ${HTTP_REQUEST_NODE_MAX_BINARY_SIZE:-10485760}HTTP_REQUEST_NODE_MAX_TEXT_SIZE: ${HTTP_REQUEST_NODE_MAX_TEXT_SIZE:-1048576}SSRF_PROXY_HTTP_URL: ${SSRF_PROXY_HTTP_URL:-http://ssrf_proxy:3128}SSRF_PROXY_HTTPS_URL: ${SSRF_PROXY_HTTPS_URL:-http://ssrf_proxy:3128}TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}PGUSER: ${PGUSER:-${DB_USERNAME}}POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-${DB_PASSWORD}}POSTGRES_DB: ${POSTGRES_DB:-${DB_DATABASE}}PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}SANDBOX_API_KEY: ${SANDBOX_API_KEY:-dify-sandbox}SANDBOX_GIN_MODE: ${SANDBOX_GIN_MODE:-release}SANDBOX_WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15}SANDBOX_ENABLE_NETWORK: ${SANDBOX_ENABLE_NETWORK:-true}SANDBOX_HTTP_PROXY: ${SANDBOX_HTTP_PROXY:-http://ssrf_proxy:3128}SANDBOX_HTTPS_PROXY: ${SANDBOX_HTTPS_PROXY:-http://ssrf_proxy:3128}SANDBOX_PORT: ${SANDBOX_PORT:-8194}WEAVIATE_PERSISTENCE_DATA_PATH: ${WEAVIATE_PERSISTENCE_DATA_PATH:-/var/lib/weaviate}WEAVIATE_QUERY_DEFAULTS_LIMIT: ${WEAVIATE_QUERY_DEFAULTS_LIMIT:-25}WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: ${WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED:-true}WEAVIATE_DEFAULT_VECTORIZER_MODULE: ${WEAVIATE_DEFAULT_VECTORIZER_MODULE:-none}WEAVIATE_CLUSTER_HOSTNAME: ${WEAVIATE_CLUSTER_HOSTNAME:-node1}WEAVIATE_AUTHENTICATION_APIKEY_ENABLED: ${WEAVIATE_AUTHENTICATION_APIKEY_ENABLED:-true}WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS: ${WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}WEAVIATE_AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}WEAVIATE_AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456}CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}CHROMA_IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}ORACLE_PWD: ${ORACLE_PWD:-Dify123456}ORACLE_CHARACTERSET: ${ORACLE_CHARACTERSET:-AL32UTF8}ETCD_AUTO_COMPACTION_MODE: ${ETCD_AUTO_COMPACTION_MODE:-revision}ETCD_AUTO_COMPACTION_RETENTION: ${ETCD_AUTO_COMPACTION_RETENTION:-1000}ETCD_QUOTA_BACKEND_BYTES: ${ETCD_QUOTA_BACKEND_BYTES:-4294967296}ETCD_SNAPSHOT_COUNT: ${ETCD_SNAPSHOT_COUNT:-50000}MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-minioadmin}MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-minioadmin}ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}MILVUS_AUTHORIZATION_ENABLED: ${MILVUS_AUTHORIZATION_ENABLED:-true}PGVECTOR_PGUSER: ${PGVECTOR_PGUSER:-postgres}PGVECTOR_POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}PGVECTOR_POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}PGVECTOR_PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}OPENSEARCH_DISCOVERY_TYPE: ${OPENSEARCH_DISCOVERY_TYPE:-single-node}OPENSEARCH_BOOTSTRAP_MEMORY_LOCK: ${OPENSEARCH_BOOTSTRAP_MEMORY_LOCK:-true}OPENSEARCH_JAVA_OPTS_MIN: ${OPENSEARCH_JAVA_OPTS_MIN:-512m}OPENSEARCH_JAVA_OPTS_MAX: ${OPENSEARCH_JAVA_OPTS_MAX:-1024m}OPENSEARCH_INITIAL_ADMIN_PASSWORD: ${OPENSEARCH_INITIAL_ADMIN_PASSWORD:-Qazwsxedc!@#123}OPENSEARCH_MEMLOCK_SOFT: ${OPENSEARCH_MEMLOCK_SOFT:--1}OPENSEARCH_MEMLOCK_HARD: ${OPENSEARCH_MEMLOCK_HARD:--1}OPENSEARCH_NOFILE_SOFT: ${OPENSEARCH_NOFILE_SOFT:-65536}OPENSEARCH_NOFILE_HARD: ${OPENSEARCH_NOFILE_HARD:-65536}NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false}NGINX_PORT: ${NGINX_PORT:-80}NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443}NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3}NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-15M}NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}NGINX_PROXY_READ_TIMEOUT: ${NGINX_PROXY_READ_TIMEOUT:-3600s}NGINX_PROXY_SEND_TIMEOUT: ${NGINX_PROXY_SEND_TIMEOUT:-3600s}NGINX_ENABLE_CERTBOT_CHALLENGE: ${NGINX_ENABLE_CERTBOT_CHALLENGE:-false}CERTBOT_EMAIL: ${CERTBOT_EMAIL:-your_email@example.com}CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-your_domain.com}CERTBOT_OPTIONS: ${CERTBOT_OPTIONS:-}SSRF_HTTP_PORT: ${SSRF_HTTP_PORT:-3128}SSRF_COREDUMP_DIR: ${SSRF_COREDUMP_DIR:-/var/spool/squid}SSRF_REVERSE_PROXY_PORT: ${SSRF_REVERSE_PROXY_PORT:-8194}SSRF_SANDBOX_HOST: ${SSRF_SANDBOX_HOST:-sandbox}SSRF_DEFAULT_TIME_OUT: ${SSRF_DEFAULT_TIME_OUT:-5}SSRF_DEFAULT_CONNECT_TIME_OUT: ${SSRF_DEFAULT_CONNECT_TIME_OUT:-5}SSRF_DEFAULT_READ_TIME_OUT: ${SSRF_DEFAULT_READ_TIME_OUT:-5}SSRF_DEFAULT_WRITE_TIME_OUT: ${SSRF_DEFAULT_WRITE_TIME_OUT:-5}EXPOSE_NGINX_PORT: ${EXPOSE_NGINX_PORT:-80}EXPOSE_NGINX_SSL_PORT: ${EXPOSE_NGINX_SSL_PORT:-443}POSITION_TOOL_PINS: ${POSITION_TOOL_PINS:-}POSITION_TOOL_INCLUDES: ${POSITION_TOOL_INCLUDES:-}POSITION_TOOL_EXCLUDES: ${POSITION_TOOL_EXCLUDES:-}POSITION_PROVIDER_PINS: ${POSITION_PROVIDER_PINS:-}POSITION_PROVIDER_INCLUDES: ${POSITION_PROVIDER_INCLUDES:-}POSITION_PROVIDER_EXCLUDES: ${POSITION_PROVIDER_EXCLUDES:-}CSP_WHITELIST: ${CSP_WHITELIST:-}CREATE_TIDB_SERVICE_JOB_ENABLED: ${CREATE_TIDB_SERVICE_JOB_ENABLED:-false}MAX_SUBMIT_COUNT: ${MAX_SUBMIT_COUNT:-100}TOP_K_MAX_VALUE: ${TOP_K_MAX_VALUE:-10}services:# API serviceapi:#image: langgenius/dify-api:0.15.3image: swr.cn-southwest-2.myhuaweicloud.com/llody/langgenius/dify-api:0.15.3restart: alwaysenvironment:# Use the shared environment variables.<<: *shared-api-worker-env# Startup mode, 'api' starts the API server.MODE: apiSENTRY_DSN: ${API_SENTRY_DSN:-}SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}depends_on:- db- redisvolumes:# Mount the storage directory to the container, for storing user files.- ./volumes/app/storage:/app/api/storagenetworks:- ssrf_proxy_network- default# worker service# The Celery worker for processing the queue.worker:#image: langgenius/dify-api:0.15.3image: swr.cn-southwest-2.myhuaweicloud.com/llody/langgenius/dify-api:0.15.3restart: alwaysenvironment:# Use the shared environment variables.<<: *shared-api-worker-env# Startup mode, 'worker' starts the Celery worker for processing the queue.MODE: workerSENTRY_DSN: ${API_SENTRY_DSN:-}SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}depends_on:- db- redisvolumes:# Mount the storage directory to the container, for storing user files.- ./volumes/app/storage:/app/api/storagenetworks:- ssrf_proxy_network- default# Frontend web application.web:#image: langgenius/dify-web:0.15.3image: swr.cn-southwest-2.myhuaweicloud.com/llody/langgenius/dify-web:0.15.3restart: alwaysenvironment:CONSOLE_API_URL: ${CONSOLE_API_URL:-}APP_API_URL: ${APP_API_URL:-}SENTRY_DSN: ${WEB_SENTRY_DSN:-}NEXT_TELEMETRY_DISABLED: ${NEXT_TELEMETRY_DISABLED:-0}TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}CSP_WHITELIST: ${CSP_WHITELIST:-}TOP_K_MAX_VALUE: ${TOP_K_MAX_VALUE:-}INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-}# The postgres database.db:#image: postgres:15-alpineimage: swr.cn-southwest-2.myhuaweicloud.com/llody/postgres:15-alpinerestart: alwaysenvironment:PGUSER: ${PGUSER:-postgres}POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-difyai123456}POSTGRES_DB: ${POSTGRES_DB:-dify}PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}command: >postgres -c 'max_connections=${POSTGRES_MAX_CONNECTIONS:-100}'-c 'shared_buffers=${POSTGRES_SHARED_BUFFERS:-128MB}'-c 'work_mem=${POSTGRES_WORK_MEM:-4MB}'-c 'maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}'-c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}'volumes:- ./volumes/db/data:/var/lib/postgresql/datahealthcheck:test: [ 'CMD', 'pg_isready' ]interval: 1stimeout: 3sretries: 30# The redis cache.redis:#image: redis:6-alpineimage: swr.cn-southwest-2.myhuaweicloud.com/llody/redis:6-alpinerestart: alwaysenvironment:REDISCLI_AUTH: ${REDIS_PASSWORD:-difyai123456}volumes:# Mount the redis data directory to the container.- ./volumes/redis/data:/data# Set the redis password when startup redis server.command: redis-server --requirepass ${REDIS_PASSWORD:-difyai123456}healthcheck:test: [ 'CMD', 'redis-cli', 'ping' ]# The DifySandboxsandbox:#image: langgenius/dify-sandbox:0.2.10image: swr.cn-southwest-2.myhuaweicloud.com/llody/langgenius/dify-sandbox:0.2.10restart: alwaysenvironment:# The DifySandbox configurations# Make sure you are changing this key for your deployment with a strong key.# You can generate a strong key using `openssl rand -base64 42`.API_KEY: ${SANDBOX_API_KEY:-dify-sandbox}GIN_MODE: ${SANDBOX_GIN_MODE:-release}WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15}ENABLE_NETWORK: ${SANDBOX_ENABLE_NETWORK:-true}HTTP_PROXY: ${SANDBOX_HTTP_PROXY:-http://ssrf_proxy:3128}HTTPS_PROXY: ${SANDBOX_HTTPS_PROXY:-http://ssrf_proxy:3128}SANDBOX_PORT: ${SANDBOX_PORT:-8194}volumes:- ./volumes/sandbox/dependencies:/dependencieshealthcheck:test: [ 'CMD', 'curl', '-f', 'http://localhost:8194/health' ]networks:- ssrf_proxy_network# ssrf_proxy server# for more information, please refer to# https://docs.dify.ai/learn-more/faq/install-faq#id-18.-why-is-ssrf_proxy-neededssrf_proxy:#image: ubuntu/squid:latestimage: swr.cn-southwest-2.myhuaweicloud.com/llody/ubuntu/squid:latestrestart: alwaysvolumes:- ./ssrf_proxy/squid.conf.template:/etc/squid/squid.conf.template- ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.shentrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]environment:# pls clearly modify the squid env vars to fit your network environment.HTTP_PORT: ${SSRF_HTTP_PORT:-3128}COREDUMP_DIR: ${SSRF_COREDUMP_DIR:-/var/spool/squid}REVERSE_PROXY_PORT: ${SSRF_REVERSE_PROXY_PORT:-8194}SANDBOX_HOST: ${SSRF_SANDBOX_HOST:-sandbox}SANDBOX_PORT: ${SANDBOX_PORT:-8194}networks:- ssrf_proxy_network- default# Certbot service# use `docker-compose --profile certbot up` to start the certbot service.certbot:#image: certbot/certbotimage: swr.cn-southwest-2.myhuaweicloud.com/llody/certbot/certbot:latestprofiles:- certbotvolumes:- ./volumes/certbot/conf:/etc/letsencrypt- ./volumes/certbot/www:/var/www/html- ./volumes/certbot/logs:/var/log/letsencrypt- ./volumes/certbot/conf/live:/etc/letsencrypt/live- ./certbot/update-cert.template.txt:/update-cert.template.txt- ./certbot/docker-entrypoint.sh:/docker-entrypoint.shenvironment:- CERTBOT_EMAIL=${CERTBOT_EMAIL}- CERTBOT_DOMAIN=${CERTBOT_DOMAIN}- CERTBOT_OPTIONS=${CERTBOT_OPTIONS:-}entrypoint: [ '/docker-entrypoint.sh' ]command: [ 'tail', '-f', '/dev/null' ]# The nginx reverse proxy.# used for reverse proxying the API service and Web service.nginx:#image: nginx:latestimage: swr.cn-southwest-2.myhuaweicloud.com/llody/nginx:v1.24.0restart: alwaysvolumes:- ./nginx/nginx.conf.template:/etc/nginx/nginx.conf.template- ./nginx/proxy.conf.template:/etc/nginx/proxy.conf.template- ./nginx/https.conf.template:/etc/nginx/https.conf.template- ./nginx/conf.d:/etc/nginx/conf.d- ./nginx/docker-entrypoint.sh:/docker-entrypoint-mount.sh- ./nginx/ssl:/etc/ssl # cert dir (legacy)- ./volumes/certbot/conf/live:/etc/letsencrypt/live # cert dir (with certbot container)- ./volumes/certbot/conf:/etc/letsencrypt- ./volumes/certbot/www:/var/www/htmlentrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]environment:NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false}NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443}NGINX_PORT: ${NGINX_PORT:-80}# You're required to add your own SSL certificates/keys to the `./nginx/ssl` directory# and modify the env vars below in .env if HTTPS_ENABLED is true.NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3}NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-15M}NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}NGINX_PROXY_READ_TIMEOUT: ${NGINX_PROXY_READ_TIMEOUT:-3600s}NGINX_PROXY_SEND_TIMEOUT: ${NGINX_PROXY_SEND_TIMEOUT:-3600s}NGINX_ENABLE_CERTBOT_CHALLENGE: ${NGINX_ENABLE_CERTBOT_CHALLENGE:-false}CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-}depends_on:- api- webports:- '${EXPOSE_NGINX_PORT:-80}:${NGINX_PORT:-80}'- '${EXPOSE_NGINX_SSL_PORT:-443}:${NGINX_SSL_PORT:-443}'# The Weaviate vector store.weaviate:#image: semitechnologies/weaviate:1.19.0image: swr.cn-southwest-2.myhuaweicloud.com/llody/semitechnologies/weaviate:1.19.0profiles:- ''- weaviaterestart: alwaysvolumes:# Mount the Weaviate data directory to the con tainer.- ./volumes/weaviate:/var/lib/weaviateenvironment:# The Weaviate configurations# You can refer to the [Weaviate](https://weaviate.io/developers/weaviate/config-refs/env-vars) documentation for more information.PERSISTENCE_DATA_PATH: ${WEAVIATE_PERSISTENCE_DATA_PATH:-/var/lib/weaviate}QUERY_DEFAULTS_LIMIT: ${WEAVIATE_QUERY_DEFAULTS_LIMIT:-25}AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: ${WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED:-false}DEFAULT_VECTORIZER_MODULE: ${WEAVIATE_DEFAULT_VECTORIZER_MODULE:-none}CLUSTER_HOSTNAME: ${WEAVIATE_CLUSTER_HOSTNAME:-node1}AUTHENTICATION_APIKEY_ENABLED: ${WEAVIATE_AUTHENTICATION_APIKEY_ENABLED:-true}AUTHENTICATION_APIKEY_ALLOWED_KEYS: ${WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}# Qdrant vector store.# (if used, you need to set VECTOR_STORE to qdrant in the api & worker service.)qdrant:#image: langgenius/qdrant:v1.7.3image: swr.cn-southwest-2.myhuaweicloud.com/llody/langgenius/qdrant:v1.7.3profiles:- qdrantrestart: alwaysvolumes:- ./volumes/qdrant:/qdrant/storageenvironment:QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456}# The Couchbase vector store.couchbase-server:#build: ./couchbase-serverimage: swr.cn-southwest-2.myhuaweicloud.com/llody/couchbase-server:latestprofiles:- couchbaserestart: alwaysenvironment:- CLUSTER_NAME=dify_search- COUCHBASE_ADMINISTRATOR_USERNAME=${COUCHBASE_USER:-Administrator}- COUCHBASE_ADMINISTRATOR_PASSWORD=${COUCHBASE_PASSWORD:-password}- COUCHBASE_BUCKET=${COUCHBASE_BUCKET_NAME:-Embeddings}- COUCHBASE_BUCKET_RAMSIZE=512- COUCHBASE_RAM_SIZE=2048- COUCHBASE_EVENTING_RAM_SIZE=512- COUCHBASE_INDEX_RAM_SIZE=512- COUCHBASE_FTS_RAM_SIZE=1024hostname: couchbase-servercontainer_name: couchbase-serverworking_dir: /opt/couchbasestdin_open: truetty: trueentrypoint: [ "" ]command: sh -c "/opt/couchbase/init/init-cbserver.sh"volumes:- ./volumes/couchbase/data:/opt/couchbase/var/lib/couchbase/datahealthcheck:# ensure bucket was created before proceedingtest: [ "CMD-SHELL", "curl -s -f -u Administrator:password http://localhost:8091/pools/default/buckets | grep -q '\\[{' || exit 1" ]interval: 10sretries: 10start_period: 30stimeout: 10s# The pgvector vector database.pgvector:#image: pgvector/pgvector:pg16image: swr.cn-southwest-2.myhuaweicloud.com/llody/pgvector/pgvector:pg16profiles:- pgvectorrestart: alwaysenvironment:PGUSER: ${PGVECTOR_PGUSER:-postgres}# The password for the default postgres user.POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}# The name of the default postgres database.POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}# postgres data directoryPGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}volumes:- ./volumes/pgvector/data:/var/lib/postgresql/datahealthcheck:test: [ 'CMD', 'pg_isready' ]interval: 1stimeout: 3sretries: 30# pgvecto-rs vector storepgvecto-rs:#image: tensorchord/pgvecto-rs:pg16-v0.3.0image: swr.cn-southwest-2.myhuaweicloud.com/llody/tensorchord/pgvecto-rs:pg16-v0.3.0profiles:- pgvecto-rsrestart: alwaysenvironment:PGUSER: ${PGVECTOR_PGUSER:-postgres}# The password for the default postgres user.POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}# The name of the default postgres database.POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}# postgres data directoryPGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}volumes:- ./volumes/pgvecto_rs/data:/var/lib/postgresql/datahealthcheck:test: [ 'CMD', 'pg_isready' ]interval: 1stimeout: 3sretries: 30# Chroma vector databasechroma:#image: ghcr.io/chroma-core/chroma:0.5.20image: swr.cn-southwest-2.myhuaweicloud.com/llody/chroma-core/chroma:0.5.20profiles:- chromarestart: alwaysvolumes:- ./volumes/chroma:/chroma/chromaenvironment:CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456}CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}# OceanBase vector databaseoceanbase:#image: quay.io/oceanbase/oceanbase-ce:4.3.3.0-100000142024101215image: swr.cn-southwest-2.myhuaweicloud.com/llody/oceanbase/oceanbase-ce:4.3.3.0-100000142024101215profiles:- oceanbaserestart: alwaysvolumes:- ./volumes/oceanbase/data:/root/ob- ./volumes/oceanbase/conf:/root/.obd/cluster- ./volumes/oceanbase/init.d:/root/boot/init.denvironment:OB_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}OB_SYS_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}OB_TENANT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}OB_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}OB_SERVER_IP: '127.0.0.1'# Oracle vector databaseoracle:#image: container-registry.oracle.com/database/free:latestimage: swr.cn-southwest-2.myhuaweicloud.com/llody/container-registry.oracle.com/database/free:latestprofiles:- oraclerestart: alwaysvolumes:- source: oradatatype: volumetarget: /opt/oracle/oradata- ./startupscripts:/opt/oracle/scripts/startupenvironment:ORACLE_PWD: ${ORACLE_PWD:-Dify123456}ORACLE_CHARACTERSET: ${ORACLE_CHARACTERSET:-AL32UTF8}# Milvus vector database servicesetcd:container_name: milvus-etcd#image: quay.io/coreos/etcd:v3.5.5image: swr.cn-southwest-2.myhuaweicloud.com/llody/etcd:v3.5.5profiles:- milvusenvironment:ETCD_AUTO_COMPACTION_MODE: ${ETCD_AUTO_COMPACTION_MODE:-revision}ETCD_AUTO_COMPACTION_RETENTION: ${ETCD_AUTO_COMPACTION_RETENTION:-1000}ETCD_QUOTA_BACKEND_BYTES: ${ETCD_QUOTA_BACKEND_BYTES:-4294967296}ETCD_SNAPSHOT_COUNT: ${ETCD_SNAPSHOT_COUNT:-50000}volumes:- ./volumes/milvus/etcd:/etcdcommand: etcd -advertise-client-urls=http://127.0.0.1:2379 -listen-client-urls http://0.0.0.0:2379 --data-dir /etcdhealthcheck:test: [ 'CMD', 'etcdctl', 'endpoint', 'health' ]interval: 30stimeout: 20sretries: 3networks:- milvusminio:container_name: milvus-minio#image: minio/minio:RELEASE.2023-03-20T20-16-18Zimage: swr.cn-southwest-2.myhuaweicloud.com/llody/minio/minio:RELEASE.2023-03-20T20-16-18Zprofiles:- milvusenvironment:MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-minioadmin}MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-minioadmin}volumes:- ./volumes/milvus/minio:/minio_datacommand: minio server /minio_data --console-address ":9001"healthcheck:test: [ 'CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live' ]interval: 30stimeout: 20sretries: 3networks:- milvusmilvus-standalone:container_name: milvus-standalone#image: milvusdb/milvus:v2.5.0-betaimage: swr.cn-southwest-2.myhuaweicloud.com/llody/milvusdb/milvus:v2.5.0-betaprofiles:- milvuscommand: [ 'milvus', 'run', 'standalone' ]environment:ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}common.security.authorizationEnabled: ${MILVUS_AUTHORIZATION_ENABLED:-true}volumes:- ./volumes/milvus/milvus:/var/lib/milvushealthcheck:test: [ 'CMD', 'curl', '-f', 'http://localhost:9091/healthz' ]interval: 30sstart_period: 90stimeout: 20sretries: 3depends_on:- etcd- minioports:- 19530:19530- 9091:9091networks:- milvus# Opensearch vector databaseopensearch:container_name: opensearch#image: opensearchproject/opensearch:latestimage: swr.cn-southwest-2.myhuaweicloud.com/llody/opensearchproject/opensearch:latestprofiles:- opensearchenvironment:discovery.type: ${OPENSEARCH_DISCOVERY_TYPE:-single-node}bootstrap.memory_lock: ${OPENSEARCH_BOOTSTRAP_MEMORY_LOCK:-true}OPENSEARCH_JAVA_OPTS: -Xms${OPENSEARCH_JAVA_OPTS_MIN:-512m} -Xmx${OPENSEARCH_JAVA_OPTS_MAX:-1024m}OPENSEARCH_INITIAL_ADMIN_PASSWORD: ${OPENSEARCH_INITIAL_ADMIN_PASSWORD:-Qazwsxedc!@#123}ulimits:memlock:soft: ${OPENSEARCH_MEMLOCK_SOFT:--1}hard: ${OPENSEARCH_MEMLOCK_HARD:--1}nofile:soft: ${OPENSEARCH_NOFILE_SOFT:-65536}hard: ${OPENSEARCH_NOFILE_HARD:-65536}volumes:- ./volumes/opensearch/data:/usr/share/opensearch/datanetworks:- opensearch-netopensearch-dashboards:container_name: opensearch-dashboards#image: opensearchproject/opensearch-dashboards:latestimage: swr.cn-southwest-2.myhuaweicloud.com/llody/opensearchproject/opensearch-dashboards:latestprofiles:- opensearchenvironment:OPENSEARCH_HOSTS: '["https://opensearch:9200"]'volumes:- ./volumes/opensearch/opensearch_dashboards.yml:/usr/share/opensearch-dashboards/config/opensearch_dashboards.ymlnetworks:- opensearch-netdepends_on:- opensearch# MyScale vector databasemyscale:container_name: myscale#image: myscale/myscaledb:1.6.4image: swr.cn-southwest-2.myhuaweicloud.com/llody/myscale/myscaledb:1.6.4profiles:- myscalerestart: alwaystty: truevolumes:- ./volumes/myscale/data:/var/lib/clickhouse- ./volumes/myscale/log:/var/log/clickhouse-server- ./volumes/myscale/config/users.d/custom_users_config.xml:/etc/clickhouse-server/users.d/custom_users_config.xmlports:- ${MYSCALE_PORT:-8123}:${MYSCALE_PORT:-8123}# https://www.elastic.co/guide/en/elasticsearch/reference/current/settings.html# https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html#docker-prod-prerequisiteselasticsearch:#image: docker.elastic.co/elasticsearch/elasticsearch:8.14.3image: swr.cn-southwest-2.myhuaweicloud.com/llody/elasticsearch:8.15.3container_name: elasticsearchprofiles:- elasticsearch- elasticsearch-jarestart: alwaysvolumes:- ./elasticsearch/docker-entrypoint.sh:/docker-entrypoint-mount.sh- dify_es01_data:/usr/share/elasticsearch/dataenvironment:ELASTIC_PASSWORD: ${ELASTICSEARCH_PASSWORD:-elastic}VECTOR_STORE: ${VECTOR_STORE:-}cluster.name: dify-es-clusternode.name: dify-es0discovery.type: single-nodexpack.license.self_generated.type: basicxpack.security.enabled: 'true'xpack.security.enrollment.enabled: 'false'xpack.security.http.ssl.enabled: 'false'ports:- ${ELASTICSEARCH_PORT:-9200}:9200deploy:resources:limits:memory: 2gentrypoint: [ 'sh', '-c', "sh /docker-entrypoint-mount.sh" ]healthcheck:test: [ 'CMD', 'curl', '-s', 'http://localhost:9200/_cluster/health?pretty' ]interval: 30stimeout: 10sretries: 50# https://www.elastic.co/guide/en/kibana/current/docker.html# https://www.elastic.co/guide/en/kibana/current/settings.htmlkibana:#image: docker.elastic.co/kibana/kibana:8.14.3image: swr.cn-southwest-2.myhuaweicloud.com/llody/kibana:8.15.3container_name: kibanaprofiles:- elasticsearchdepends_on:- elasticsearchrestart: alwaysenvironment:XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: d1a66dfd-c4d3-4a0a-8290-2abcb83ab3aaNO_PROXY: localhost,127.0.0.1,elasticsearch,kibanaXPACK_SECURITY_ENABLED: 'true'XPACK_SECURITY_ENROLLMENT_ENABLED: 'false'XPACK_SECURITY_HTTP_SSL_ENABLED: 'false'XPACK_FLEET_ISAIRGAPPED: 'true'I18N_LOCALE: zh-CNSERVER_PORT: '5601'ELASTICSEARCH_HOSTS: http://elasticsearch:9200ports:- ${KIBANA_PORT:-5601}:5601healthcheck:test: [ 'CMD-SHELL', 'curl -s http://localhost:5601 >/dev/null || exit 1' ]interval: 30stimeout: 10sretries: 3# unstructured .# (if used, you need to set ETL_TYPE to Unstructured in the api & worker service.)unstructured:#image: downloads.unstructured.io/unstructured-io/unstructured-api:latestimage: swr.cn-southwest-2.myhuaweicloud.com/llody/unstructured-io/unstructured-api:latestprofiles:- unstructuredrestart: alwaysvolumes:- ./volumes/unstructured:/app/datanetworks:# create a network between sandbox, api and ssrf_proxy, and can not access outside.ssrf_proxy_network:driver: bridgeinternal: truemilvus:driver: bridgeopensearch-net:driver: bridgeinternal: truevolumes:oradata:dify_es01_data:

部署

root@dify:~# docker-compose -p dify -f dify/dify.yaml up -d
[+] Running 9/0✔ Container dify-redis-1       Running                                                                                             0.0s ✔ Container dify-weaviate-1    Running                                                                                             0.0s ✔ Container dify-ssrf_proxy-1  Running                                                                                             0.0s ✔ Container dify-web-1         Running                                                                                             0.0s ✔ Container dify-db-1          Running                                                                                             0.0s ✔ Container dify-worker-1      Running                                                                                             0.0s ✔ Container dify-sandbox-1     Running                                                                                             0.0s ✔ Container dify-api-1         Running                                                                                             0.0s ✔ Container dify-nginx-1       Running                                                                                             0.0s