You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

.env.example 38KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169
  1. # ------------------------------
  2. # Environment Variables for API service & worker
  3. # ------------------------------
  4. # ------------------------------
  5. # Common Variables
  6. # ------------------------------
  7. # The backend URL of the console API,
  8. # used to concatenate the authorization callback.
  9. # If empty, it is the same domain.
  10. # Example: https://api.console.dify.ai
  11. CONSOLE_API_URL=
  12. # The front-end URL of the console web,
  13. # used to concatenate some front-end addresses and for CORS configuration use.
  14. # If empty, it is the same domain.
  15. # Example: https://console.dify.ai
  16. CONSOLE_WEB_URL=
  17. # Service API Url,
  18. # used to display Service API Base Url to the front-end.
  19. # If empty, it is the same domain.
  20. # Example: https://api.dify.ai
  21. SERVICE_API_URL=
  22. # WebApp API backend Url,
  23. # used to declare the back-end URL for the front-end API.
  24. # If empty, it is the same domain.
  25. # Example: https://api.app.dify.ai
  26. APP_API_URL=
  27. # WebApp Url,
  28. # used to display WebAPP API Base Url to the front-end.
  29. # If empty, it is the same domain.
  30. # Example: https://app.dify.ai
  31. APP_WEB_URL=
  32. # File preview or download Url prefix.
  33. # used to display File preview or download Url to the front-end or as Multi-model inputs;
  34. # Url is signed and has expiration time.
  35. # Setting FILES_URL is required for file processing plugins.
  36. # - For https://example.com, use FILES_URL=https://example.com
  37. # - For http://example.com, use FILES_URL=http://example.com
  38. # Recommendation: use a dedicated domain (e.g., https://upload.example.com).
  39. # Alternatively, use http://<your-ip>:5001 or http://api:5001,
  40. # ensuring port 5001 is externally accessible (see docker-compose.yaml).
  41. FILES_URL=
  42. # INTERNAL_FILES_URL is used for plugin daemon communication within Docker network.
  43. # Set this to the internal Docker service URL for proper plugin file access.
  44. # Example: INTERNAL_FILES_URL=http://api:5001
  45. INTERNAL_FILES_URL=
  46. # ------------------------------
  47. # Server Configuration
  48. # ------------------------------
  49. # The log level for the application.
  50. # Supported values are `DEBUG`, `INFO`, `WARNING`, `ERROR`, `CRITICAL`
  51. LOG_LEVEL=INFO
  52. # Log file path
  53. LOG_FILE=/app/logs/server.log
  54. # Log file max size, the unit is MB
  55. LOG_FILE_MAX_SIZE=20
  56. # Log file max backup count
  57. LOG_FILE_BACKUP_COUNT=5
  58. # Log dateformat
  59. LOG_DATEFORMAT=%Y-%m-%d %H:%M:%S
  60. # Log Timezone
  61. LOG_TZ=UTC
  62. # Debug mode, default is false.
  63. # It is recommended to turn on this configuration for local development
  64. # to prevent some problems caused by monkey patch.
  65. DEBUG=false
  66. # Flask debug mode, it can output trace information at the interface when turned on,
  67. # which is convenient for debugging.
  68. FLASK_DEBUG=false
  69. # Enable request logging, which will log the request and response information.
  70. # And the log level is DEBUG
  71. ENABLE_REQUEST_LOGGING=False
  72. # A secret key that is used for securely signing the session cookie
  73. # and encrypting sensitive information on the database.
  74. # You can generate a strong key using `openssl rand -base64 42`.
  75. SECRET_KEY=sk-9f73s3ljTXVcMT3Blb3ljTqtsKiGHXVcMT3BlbkFJLK7U
  76. # Password for admin user initialization.
  77. # If left unset, admin user will not be prompted for a password
  78. # when creating the initial admin account.
  79. # The length of the password cannot exceed 30 characters.
  80. INIT_PASSWORD=
  81. # Deployment environment.
  82. # Supported values are `PRODUCTION`, `TESTING`. Default is `PRODUCTION`.
  83. # Testing environment. There will be a distinct color label on the front-end page,
  84. # indicating that this environment is a testing environment.
  85. DEPLOY_ENV=PRODUCTION
  86. # Whether to enable the version check policy.
  87. # If set to empty, https://updates.dify.ai will be called for version check.
  88. CHECK_UPDATE_URL=https://updates.dify.ai
  89. # Used to change the OpenAI base address, default is https://api.openai.com/v1.
  90. # When OpenAI cannot be accessed in China, replace it with a domestic mirror address,
  91. # or when a local model provides OpenAI compatible API, it can be replaced.
  92. OPENAI_API_BASE=https://api.openai.com/v1
  93. # When enabled, migrations will be executed prior to application startup
  94. # and the application will start after the migrations have completed.
  95. MIGRATION_ENABLED=true
  96. # File Access Time specifies a time interval in seconds for the file to be accessed.
  97. # The default value is 300 seconds.
  98. FILES_ACCESS_TIMEOUT=300
  99. # Access token expiration time in minutes
  100. ACCESS_TOKEN_EXPIRE_MINUTES=60
  101. # Refresh token expiration time in days
  102. REFRESH_TOKEN_EXPIRE_DAYS=30
  103. # The maximum number of active requests for the application, where 0 means unlimited, should be a non-negative integer.
  104. APP_MAX_ACTIVE_REQUESTS=0
  105. APP_MAX_EXECUTION_TIME=1200
  106. # ------------------------------
  107. # Container Startup Related Configuration
  108. # Only effective when starting with docker image or docker-compose.
  109. # ------------------------------
  110. # API service binding address, default: 0.0.0.0, i.e., all addresses can be accessed.
  111. DIFY_BIND_ADDRESS=0.0.0.0
  112. # API service binding port number, default 5001.
  113. DIFY_PORT=5001
  114. # The number of API server workers, i.e., the number of workers.
  115. # Formula: number of cpu cores x 2 + 1 for sync, 1 for Gevent
  116. # Reference: https://docs.gunicorn.org/en/stable/design.html#how-many-workers
  117. SERVER_WORKER_AMOUNT=1
  118. # Defaults to gevent. If using windows, it can be switched to sync or solo.
  119. SERVER_WORKER_CLASS=gevent
  120. # Default number of worker connections, the default is 10.
  121. SERVER_WORKER_CONNECTIONS=10
  122. # Similar to SERVER_WORKER_CLASS.
  123. # If using windows, it can be switched to sync or solo.
  124. CELERY_WORKER_CLASS=
  125. # Request handling timeout. The default is 200,
  126. # it is recommended to set it to 360 to support a longer sse connection time.
  127. GUNICORN_TIMEOUT=360
  128. # The number of Celery workers. The default is 1, and can be set as needed.
  129. CELERY_WORKER_AMOUNT=
  130. # Flag indicating whether to enable autoscaling of Celery workers.
  131. #
  132. # Autoscaling is useful when tasks are CPU intensive and can be dynamically
  133. # allocated and deallocated based on the workload.
  134. #
  135. # When autoscaling is enabled, the maximum and minimum number of workers can
  136. # be specified. The autoscaling algorithm will dynamically adjust the number
  137. # of workers within the specified range.
  138. #
  139. # Default is false (i.e., autoscaling is disabled).
  140. #
  141. # Example:
  142. # CELERY_AUTO_SCALE=true
  143. CELERY_AUTO_SCALE=false
  144. # The maximum number of Celery workers that can be autoscaled.
  145. # This is optional and only used when autoscaling is enabled.
  146. # Default is not set.
  147. CELERY_MAX_WORKERS=
  148. # The minimum number of Celery workers that can be autoscaled.
  149. # This is optional and only used when autoscaling is enabled.
  150. # Default is not set.
  151. CELERY_MIN_WORKERS=
  152. # API Tool configuration
  153. API_TOOL_DEFAULT_CONNECT_TIMEOUT=10
  154. API_TOOL_DEFAULT_READ_TIMEOUT=60
  155. # -------------------------------
  156. # Datasource Configuration
  157. # --------------------------------
  158. ENABLE_WEBSITE_JINAREADER=true
  159. ENABLE_WEBSITE_FIRECRAWL=true
  160. ENABLE_WEBSITE_WATERCRAWL=true
  161. # ------------------------------
  162. # Database Configuration
  163. # The database uses PostgreSQL. Please use the public schema.
  164. # It is consistent with the configuration in the 'db' service below.
  165. # ------------------------------
  166. DB_USERNAME=postgres
  167. DB_PASSWORD=difyai123456
  168. DB_HOST=db
  169. DB_PORT=5432
  170. DB_DATABASE=dify
  171. # The size of the database connection pool.
  172. # The default is 30 connections, which can be appropriately increased.
  173. SQLALCHEMY_POOL_SIZE=30
  174. # Database connection pool recycling time, the default is 3600 seconds.
  175. SQLALCHEMY_POOL_RECYCLE=3600
  176. # Whether to print SQL, default is false.
  177. SQLALCHEMY_ECHO=false
  178. # If True, will test connections for liveness upon each checkout
  179. SQLALCHEMY_POOL_PRE_PING=false
  180. # Whether to enable the Last in first out option or use default FIFO queue if is false
  181. SQLALCHEMY_POOL_USE_LIFO=false
  182. # Maximum number of connections to the database
  183. # Default is 100
  184. #
  185. # Reference: https://www.postgresql.org/docs/current/runtime-config-connection.html#GUC-MAX-CONNECTIONS
  186. POSTGRES_MAX_CONNECTIONS=100
  187. # Sets the amount of shared memory used for postgres's shared buffers.
  188. # Default is 128MB
  189. # Recommended value: 25% of available memory
  190. # Reference: https://www.postgresql.org/docs/current/runtime-config-resource.html#GUC-SHARED-BUFFERS
  191. POSTGRES_SHARED_BUFFERS=128MB
  192. # Sets the amount of memory used by each database worker for working space.
  193. # Default is 4MB
  194. #
  195. # Reference: https://www.postgresql.org/docs/current/runtime-config-resource.html#GUC-WORK-MEM
  196. POSTGRES_WORK_MEM=4MB
  197. # Sets the amount of memory reserved for maintenance activities.
  198. # Default is 64MB
  199. #
  200. # Reference: https://www.postgresql.org/docs/current/runtime-config-resource.html#GUC-MAINTENANCE-WORK-MEM
  201. POSTGRES_MAINTENANCE_WORK_MEM=64MB
  202. # Sets the planner's assumption about the effective cache size.
  203. # Default is 4096MB
  204. #
  205. # Reference: https://www.postgresql.org/docs/current/runtime-config-query.html#GUC-EFFECTIVE-CACHE-SIZE
  206. POSTGRES_EFFECTIVE_CACHE_SIZE=4096MB
  207. # ------------------------------
  208. # Redis Configuration
  209. # This Redis configuration is used for caching and for pub/sub during conversation.
  210. # ------------------------------
  211. REDIS_HOST=redis
  212. REDIS_PORT=6379
  213. REDIS_USERNAME=
  214. REDIS_PASSWORD=difyai123456
  215. REDIS_USE_SSL=false
  216. REDIS_DB=0
  217. # Whether to use Redis Sentinel mode.
  218. # If set to true, the application will automatically discover and connect to the master node through Sentinel.
  219. REDIS_USE_SENTINEL=false
  220. # List of Redis Sentinel nodes. If Sentinel mode is enabled, provide at least one Sentinel IP and port.
  221. # Format: `<sentinel1_ip>:<sentinel1_port>,<sentinel2_ip>:<sentinel2_port>,<sentinel3_ip>:<sentinel3_port>`
  222. REDIS_SENTINELS=
  223. REDIS_SENTINEL_SERVICE_NAME=
  224. REDIS_SENTINEL_USERNAME=
  225. REDIS_SENTINEL_PASSWORD=
  226. REDIS_SENTINEL_SOCKET_TIMEOUT=0.1
  227. # List of Redis Cluster nodes. If Cluster mode is enabled, provide at least one Cluster IP and port.
  228. # Format: `<Cluster1_ip>:<Cluster1_port>,<Cluster2_ip>:<Cluster2_port>,<Cluster3_ip>:<Cluster3_port>`
  229. REDIS_USE_CLUSTERS=false
  230. REDIS_CLUSTERS=
  231. REDIS_CLUSTERS_PASSWORD=
  232. # ------------------------------
  233. # Celery Configuration
  234. # ------------------------------
  235. # Use redis as the broker, and redis db 1 for celery broker.
  236. # Format as follows: `redis://<redis_username>:<redis_password>@<redis_host>:<redis_port>/<redis_database>`
  237. # Example: redis://:difyai123456@redis:6379/1
  238. # If use Redis Sentinel, format as follows: `sentinel://<sentinel_username>:<sentinel_password>@<sentinel_host>:<sentinel_port>/<redis_database>`
  239. # Example: sentinel://localhost:26379/1;sentinel://localhost:26380/1;sentinel://localhost:26381/1
  240. CELERY_BROKER_URL=redis://:difyai123456@redis:6379/1
  241. CELERY_BACKEND=redis
  242. BROKER_USE_SSL=false
  243. # If you are using Redis Sentinel for high availability, configure the following settings.
  244. CELERY_USE_SENTINEL=false
  245. CELERY_SENTINEL_MASTER_NAME=
  246. CELERY_SENTINEL_PASSWORD=
  247. CELERY_SENTINEL_SOCKET_TIMEOUT=0.1
  248. # ------------------------------
  249. # CORS Configuration
  250. # Used to set the front-end cross-domain access policy.
  251. # ------------------------------
  252. # Specifies the allowed origins for cross-origin requests to the Web API,
  253. # e.g. https://dify.app or * for all origins.
  254. WEB_API_CORS_ALLOW_ORIGINS=*
  255. # Specifies the allowed origins for cross-origin requests to the console API,
  256. # e.g. https://cloud.dify.ai or * for all origins.
  257. CONSOLE_CORS_ALLOW_ORIGINS=*
  258. # ------------------------------
  259. # File Storage Configuration
  260. # ------------------------------
  261. # The type of storage to use for storing user files.
  262. STORAGE_TYPE=opendal
  263. # Apache OpenDAL Configuration
  264. # The configuration for OpenDAL consists of the following format: OPENDAL_<SCHEME_NAME>_<CONFIG_NAME>.
  265. # You can find all the service configurations (CONFIG_NAME) in the repository at: https://github.com/apache/opendal/tree/main/core/src/services.
  266. # Dify will scan configurations starting with OPENDAL_<SCHEME_NAME> and automatically apply them.
  267. # The scheme name for the OpenDAL storage.
  268. OPENDAL_SCHEME=fs
  269. # Configurations for OpenDAL Local File System.
  270. OPENDAL_FS_ROOT=storage
  271. # S3 Configuration
  272. #
  273. S3_ENDPOINT=
  274. S3_REGION=us-east-1
  275. S3_BUCKET_NAME=difyai
  276. S3_ACCESS_KEY=
  277. S3_SECRET_KEY=
  278. # Whether to use AWS managed IAM roles for authenticating with the S3 service.
  279. # If set to false, the access key and secret key must be provided.
  280. S3_USE_AWS_MANAGED_IAM=false
  281. # Azure Blob Configuration
  282. #
  283. AZURE_BLOB_ACCOUNT_NAME=difyai
  284. AZURE_BLOB_ACCOUNT_KEY=difyai
  285. AZURE_BLOB_CONTAINER_NAME=difyai-container
  286. AZURE_BLOB_ACCOUNT_URL=https://<your_account_name>.blob.core.windows.net
  287. # Google Storage Configuration
  288. #
  289. GOOGLE_STORAGE_BUCKET_NAME=your-bucket-name
  290. GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64=
  291. # The Alibaba Cloud OSS configurations,
  292. #
  293. ALIYUN_OSS_BUCKET_NAME=your-bucket-name
  294. ALIYUN_OSS_ACCESS_KEY=your-access-key
  295. ALIYUN_OSS_SECRET_KEY=your-secret-key
  296. ALIYUN_OSS_ENDPOINT=https://oss-ap-southeast-1-internal.aliyuncs.com
  297. ALIYUN_OSS_REGION=ap-southeast-1
  298. ALIYUN_OSS_AUTH_VERSION=v4
  299. # Don't start with '/'. OSS doesn't support leading slash in object names.
  300. ALIYUN_OSS_PATH=your-path
  301. # Tencent COS Configuration
  302. #
  303. TENCENT_COS_BUCKET_NAME=your-bucket-name
  304. TENCENT_COS_SECRET_KEY=your-secret-key
  305. TENCENT_COS_SECRET_ID=your-secret-id
  306. TENCENT_COS_REGION=your-region
  307. TENCENT_COS_SCHEME=your-scheme
  308. # Oracle Storage Configuration
  309. #
  310. OCI_ENDPOINT=https://your-object-storage-namespace.compat.objectstorage.us-ashburn-1.oraclecloud.com
  311. OCI_BUCKET_NAME=your-bucket-name
  312. OCI_ACCESS_KEY=your-access-key
  313. OCI_SECRET_KEY=your-secret-key
  314. OCI_REGION=us-ashburn-1
  315. # Huawei OBS Configuration
  316. #
  317. HUAWEI_OBS_BUCKET_NAME=your-bucket-name
  318. HUAWEI_OBS_SECRET_KEY=your-secret-key
  319. HUAWEI_OBS_ACCESS_KEY=your-access-key
  320. HUAWEI_OBS_SERVER=your-server-url
  321. # Volcengine TOS Configuration
  322. #
  323. VOLCENGINE_TOS_BUCKET_NAME=your-bucket-name
  324. VOLCENGINE_TOS_SECRET_KEY=your-secret-key
  325. VOLCENGINE_TOS_ACCESS_KEY=your-access-key
  326. VOLCENGINE_TOS_ENDPOINT=your-server-url
  327. VOLCENGINE_TOS_REGION=your-region
  328. # Baidu OBS Storage Configuration
  329. #
  330. BAIDU_OBS_BUCKET_NAME=your-bucket-name
  331. BAIDU_OBS_SECRET_KEY=your-secret-key
  332. BAIDU_OBS_ACCESS_KEY=your-access-key
  333. BAIDU_OBS_ENDPOINT=your-server-url
  334. # Supabase Storage Configuration
  335. #
  336. SUPABASE_BUCKET_NAME=your-bucket-name
  337. SUPABASE_API_KEY=your-access-key
  338. SUPABASE_URL=your-server-url
  339. # ------------------------------
  340. # Vector Database Configuration
  341. # ------------------------------
  342. # The type of vector store to use.
  343. # Supported values are `weaviate`, `qdrant`, `milvus`, `myscale`, `relyt`, `pgvector`, `pgvecto-rs`, `chroma`, `opensearch`, `oracle`, `tencent`, `elasticsearch`, `elasticsearch-ja`, `analyticdb`, `couchbase`, `vikingdb`, `oceanbase`, `opengauss`, `tablestore`,`vastbase`,`tidb`,`tidb_on_qdrant`,`baidu`,`lindorm`,`huawei_cloud`,`upstash`, `matrixone`.
  344. VECTOR_STORE=weaviate
  345. # Prefix used to create collection name in vector database
  346. VECTOR_INDEX_NAME_PREFIX=Vector_index
  347. # The Weaviate endpoint URL. Only available when VECTOR_STORE is `weaviate`.
  348. WEAVIATE_ENDPOINT=http://weaviate:8080
  349. WEAVIATE_API_KEY=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih
  350. # The Qdrant endpoint URL. Only available when VECTOR_STORE is `qdrant`.
  351. QDRANT_URL=http://qdrant:6333
  352. QDRANT_API_KEY=difyai123456
  353. QDRANT_CLIENT_TIMEOUT=20
  354. QDRANT_GRPC_ENABLED=false
  355. QDRANT_GRPC_PORT=6334
  356. QDRANT_REPLICATION_FACTOR=1
  357. # Milvus configuration. Only available when VECTOR_STORE is `milvus`.
  358. # The milvus uri.
  359. MILVUS_URI=http://host.docker.internal:19530
  360. MILVUS_DATABASE=
  361. MILVUS_TOKEN=
  362. MILVUS_USER=
  363. MILVUS_PASSWORD=
  364. MILVUS_ENABLE_HYBRID_SEARCH=False
  365. MILVUS_ANALYZER_PARAMS=
  366. # MyScale configuration, only available when VECTOR_STORE is `myscale`
  367. # For multi-language support, please set MYSCALE_FTS_PARAMS with referring to:
  368. # https://myscale.com/docs/en/text-search/#understanding-fts-index-parameters
  369. MYSCALE_HOST=myscale
  370. MYSCALE_PORT=8123
  371. MYSCALE_USER=default
  372. MYSCALE_PASSWORD=
  373. MYSCALE_DATABASE=dify
  374. MYSCALE_FTS_PARAMS=
  375. # Couchbase configurations, only available when VECTOR_STORE is `couchbase`
  376. # The connection string must include hostname defined in the docker-compose file (couchbase-server in this case)
  377. COUCHBASE_CONNECTION_STRING=couchbase://couchbase-server
  378. COUCHBASE_USER=Administrator
  379. COUCHBASE_PASSWORD=password
  380. COUCHBASE_BUCKET_NAME=Embeddings
  381. COUCHBASE_SCOPE_NAME=_default
  382. # pgvector configurations, only available when VECTOR_STORE is `pgvector`
  383. PGVECTOR_HOST=pgvector
  384. PGVECTOR_PORT=5432
  385. PGVECTOR_USER=postgres
  386. PGVECTOR_PASSWORD=difyai123456
  387. PGVECTOR_DATABASE=dify
  388. PGVECTOR_MIN_CONNECTION=1
  389. PGVECTOR_MAX_CONNECTION=5
  390. PGVECTOR_PG_BIGM=false
  391. PGVECTOR_PG_BIGM_VERSION=1.2-20240606
  392. # vastbase configurations, only available when VECTOR_STORE is `vastbase`
  393. VASTBASE_HOST=vastbase
  394. VASTBASE_PORT=5432
  395. VASTBASE_USER=dify
  396. VASTBASE_PASSWORD=Difyai123456
  397. VASTBASE_DATABASE=dify
  398. VASTBASE_MIN_CONNECTION=1
  399. VASTBASE_MAX_CONNECTION=5
  400. # pgvecto-rs configurations, only available when VECTOR_STORE is `pgvecto-rs`
  401. PGVECTO_RS_HOST=pgvecto-rs
  402. PGVECTO_RS_PORT=5432
  403. PGVECTO_RS_USER=postgres
  404. PGVECTO_RS_PASSWORD=difyai123456
  405. PGVECTO_RS_DATABASE=dify
  406. # analyticdb configurations, only available when VECTOR_STORE is `analyticdb`
  407. ANALYTICDB_KEY_ID=your-ak
  408. ANALYTICDB_KEY_SECRET=your-sk
  409. ANALYTICDB_REGION_ID=cn-hangzhou
  410. ANALYTICDB_INSTANCE_ID=gp-ab123456
  411. ANALYTICDB_ACCOUNT=testaccount
  412. ANALYTICDB_PASSWORD=testpassword
  413. ANALYTICDB_NAMESPACE=dify
  414. ANALYTICDB_NAMESPACE_PASSWORD=difypassword
  415. ANALYTICDB_HOST=gp-test.aliyuncs.com
  416. ANALYTICDB_PORT=5432
  417. ANALYTICDB_MIN_CONNECTION=1
  418. ANALYTICDB_MAX_CONNECTION=5
  419. # TiDB vector configurations, only available when VECTOR_STORE is `tidb_vector`
  420. TIDB_VECTOR_HOST=tidb
  421. TIDB_VECTOR_PORT=4000
  422. TIDB_VECTOR_USER=
  423. TIDB_VECTOR_PASSWORD=
  424. TIDB_VECTOR_DATABASE=dify
  425. # Matrixone vector configurations.
  426. MATRIXONE_HOST=matrixone
  427. MATRIXONE_PORT=6001
  428. MATRIXONE_USER=dump
  429. MATRIXONE_PASSWORD=111
  430. MATRIXONE_DATABASE=dify
  431. # Tidb on qdrant configuration, only available when VECTOR_STORE is `tidb_on_qdrant`
  432. TIDB_ON_QDRANT_URL=http://127.0.0.1
  433. TIDB_ON_QDRANT_API_KEY=dify
  434. TIDB_ON_QDRANT_CLIENT_TIMEOUT=20
  435. TIDB_ON_QDRANT_GRPC_ENABLED=false
  436. TIDB_ON_QDRANT_GRPC_PORT=6334
  437. TIDB_PUBLIC_KEY=dify
  438. TIDB_PRIVATE_KEY=dify
  439. TIDB_API_URL=http://127.0.0.1
  440. TIDB_IAM_API_URL=http://127.0.0.1
  441. TIDB_REGION=regions/aws-us-east-1
  442. TIDB_PROJECT_ID=dify
  443. TIDB_SPEND_LIMIT=100
  444. # Chroma configuration, only available when VECTOR_STORE is `chroma`
  445. CHROMA_HOST=127.0.0.1
  446. CHROMA_PORT=8000
  447. CHROMA_TENANT=default_tenant
  448. CHROMA_DATABASE=default_database
  449. CHROMA_AUTH_PROVIDER=chromadb.auth.token_authn.TokenAuthClientProvider
  450. CHROMA_AUTH_CREDENTIALS=
  451. # Oracle configuration, only available when VECTOR_STORE is `oracle`
  452. ORACLE_USER=dify
  453. ORACLE_PASSWORD=dify
  454. ORACLE_DSN=oracle:1521/FREEPDB1
  455. ORACLE_CONFIG_DIR=/app/api/storage/wallet
  456. ORACLE_WALLET_LOCATION=/app/api/storage/wallet
  457. ORACLE_WALLET_PASSWORD=dify
  458. ORACLE_IS_AUTONOMOUS=false
  459. # relyt configurations, only available when VECTOR_STORE is `relyt`
  460. RELYT_HOST=db
  461. RELYT_PORT=5432
  462. RELYT_USER=postgres
  463. RELYT_PASSWORD=difyai123456
  464. RELYT_DATABASE=postgres
  465. # open search configuration, only available when VECTOR_STORE is `opensearch`
  466. OPENSEARCH_HOST=opensearch
  467. OPENSEARCH_PORT=9200
  468. OPENSEARCH_SECURE=true
  469. OPENSEARCH_VERIFY_CERTS=true
  470. OPENSEARCH_AUTH_METHOD=basic
  471. OPENSEARCH_USER=admin
  472. OPENSEARCH_PASSWORD=admin
  473. # If using AWS managed IAM, e.g. Managed Cluster or OpenSearch Serverless
  474. OPENSEARCH_AWS_REGION=ap-southeast-1
  475. OPENSEARCH_AWS_SERVICE=aoss
  476. # tencent vector configurations, only available when VECTOR_STORE is `tencent`
  477. TENCENT_VECTOR_DB_URL=http://127.0.0.1
  478. TENCENT_VECTOR_DB_API_KEY=dify
  479. TENCENT_VECTOR_DB_TIMEOUT=30
  480. TENCENT_VECTOR_DB_USERNAME=dify
  481. TENCENT_VECTOR_DB_DATABASE=dify
  482. TENCENT_VECTOR_DB_SHARD=1
  483. TENCENT_VECTOR_DB_REPLICAS=2
  484. TENCENT_VECTOR_DB_ENABLE_HYBRID_SEARCH=false
  485. # ElasticSearch configuration, only available when VECTOR_STORE is `elasticsearch`
  486. ELASTICSEARCH_HOST=0.0.0.0
  487. ELASTICSEARCH_PORT=9200
  488. ELASTICSEARCH_USERNAME=elastic
  489. ELASTICSEARCH_PASSWORD=elastic
  490. KIBANA_PORT=5601
  491. # baidu vector configurations, only available when VECTOR_STORE is `baidu`
  492. BAIDU_VECTOR_DB_ENDPOINT=http://127.0.0.1:5287
  493. BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS=30000
  494. BAIDU_VECTOR_DB_ACCOUNT=root
  495. BAIDU_VECTOR_DB_API_KEY=dify
  496. BAIDU_VECTOR_DB_DATABASE=dify
  497. BAIDU_VECTOR_DB_SHARD=1
  498. BAIDU_VECTOR_DB_REPLICAS=3
  499. # VikingDB configurations, only available when VECTOR_STORE is `vikingdb`
  500. VIKINGDB_ACCESS_KEY=your-ak
  501. VIKINGDB_SECRET_KEY=your-sk
  502. VIKINGDB_REGION=cn-shanghai
  503. VIKINGDB_HOST=api-vikingdb.xxx.volces.com
  504. VIKINGDB_SCHEMA=http
  505. VIKINGDB_CONNECTION_TIMEOUT=30
  506. VIKINGDB_SOCKET_TIMEOUT=30
  507. # Lindorm configuration, only available when VECTOR_STORE is `lindorm`
  508. LINDORM_URL=http://lindorm:30070
  509. LINDORM_USERNAME=lindorm
  510. LINDORM_PASSWORD=lindorm
  511. LINDORM_QUERY_TIMEOUT=1
  512. # OceanBase Vector configuration, only available when VECTOR_STORE is `oceanbase`
  513. OCEANBASE_VECTOR_HOST=oceanbase
  514. OCEANBASE_VECTOR_PORT=2881
  515. OCEANBASE_VECTOR_USER=root@test
  516. OCEANBASE_VECTOR_PASSWORD=difyai123456
  517. OCEANBASE_VECTOR_DATABASE=test
  518. OCEANBASE_CLUSTER_NAME=difyai
  519. OCEANBASE_MEMORY_LIMIT=6G
  520. OCEANBASE_ENABLE_HYBRID_SEARCH=false
  521. # opengauss configurations, only available when VECTOR_STORE is `opengauss`
  522. OPENGAUSS_HOST=opengauss
  523. OPENGAUSS_PORT=6600
  524. OPENGAUSS_USER=postgres
  525. OPENGAUSS_PASSWORD=Dify@123
  526. OPENGAUSS_DATABASE=dify
  527. OPENGAUSS_MIN_CONNECTION=1
  528. OPENGAUSS_MAX_CONNECTION=5
  529. OPENGAUSS_ENABLE_PQ=false
  530. # huawei cloud search service vector configurations, only available when VECTOR_STORE is `huawei_cloud`
  531. HUAWEI_CLOUD_HOSTS=https://127.0.0.1:9200
  532. HUAWEI_CLOUD_USER=admin
  533. HUAWEI_CLOUD_PASSWORD=admin
  534. # Upstash Vector configuration, only available when VECTOR_STORE is `upstash`
  535. UPSTASH_VECTOR_URL=https://xxx-vector.upstash.io
  536. UPSTASH_VECTOR_TOKEN=dify
  537. # TableStore Vector configuration
  538. # (only used when VECTOR_STORE is tablestore)
  539. TABLESTORE_ENDPOINT=https://instance-name.cn-hangzhou.ots.aliyuncs.com
  540. TABLESTORE_INSTANCE_NAME=instance-name
  541. TABLESTORE_ACCESS_KEY_ID=xxx
  542. TABLESTORE_ACCESS_KEY_SECRET=xxx
  543. # ------------------------------
  544. # Knowledge Configuration
  545. # ------------------------------
  546. # Upload file size limit, default 15M.
  547. UPLOAD_FILE_SIZE_LIMIT=15
  548. # The maximum number of files that can be uploaded at a time, default 5.
  549. UPLOAD_FILE_BATCH_LIMIT=5
  550. # ETL type, support: `dify`, `Unstructured`
  551. # `dify` Dify's proprietary file extraction scheme
  552. # `Unstructured` Unstructured.io file extraction scheme
  553. ETL_TYPE=dify
  554. # Unstructured API path and API key, needs to be configured when ETL_TYPE is Unstructured
  555. # Or using Unstructured for document extractor node for pptx.
  556. # For example: http://unstructured:8000/general/v0/general
  557. UNSTRUCTURED_API_URL=
  558. UNSTRUCTURED_API_KEY=
  559. SCARF_NO_ANALYTICS=true
  560. # ------------------------------
  561. # Model Configuration
  562. # ------------------------------
  563. # The maximum number of tokens allowed for prompt generation.
  564. # This setting controls the upper limit of tokens that can be used by the LLM
  565. # when generating a prompt in the prompt generation tool.
  566. # Default: 512 tokens.
  567. PROMPT_GENERATION_MAX_TOKENS=512
  568. # The maximum number of tokens allowed for code generation.
  569. # This setting controls the upper limit of tokens that can be used by the LLM
  570. # when generating code in the code generation tool.
  571. # Default: 1024 tokens.
  572. CODE_GENERATION_MAX_TOKENS=1024
  573. # Enable or disable plugin based token counting. If disabled, token counting will return 0.
  574. # This can improve performance by skipping token counting operations.
  575. # Default: false (disabled).
  576. PLUGIN_BASED_TOKEN_COUNTING_ENABLED=false
  577. # ------------------------------
  578. # Multi-modal Configuration
  579. # ------------------------------
  580. # The format of the image/video/audio/document sent when the multi-modal model is input,
  581. # the default is base64, optional url.
  582. # The delay of the call in url mode will be lower than that in base64 mode.
  583. # It is generally recommended to use the more compatible base64 mode.
  584. # If configured as url, you need to configure FILES_URL as an externally accessible address so that the multi-modal model can access the image/video/audio/document.
  585. MULTIMODAL_SEND_FORMAT=base64
  586. # Upload image file size limit, default 10M.
  587. UPLOAD_IMAGE_FILE_SIZE_LIMIT=10
  588. # Upload video file size limit, default 100M.
  589. UPLOAD_VIDEO_FILE_SIZE_LIMIT=100
  590. # Upload audio file size limit, default 50M.
  591. UPLOAD_AUDIO_FILE_SIZE_LIMIT=50
  592. # ------------------------------
  593. # Sentry Configuration
  594. # Used for application monitoring and error log tracking.
  595. # ------------------------------
  596. SENTRY_DSN=
  597. # API Service Sentry DSN address, default is empty, when empty,
  598. # all monitoring information is not reported to Sentry.
  599. # If not set, Sentry error reporting will be disabled.
  600. API_SENTRY_DSN=
  601. # API Service The reporting ratio of Sentry events, if it is 0.01, it is 1%.
  602. API_SENTRY_TRACES_SAMPLE_RATE=1.0
  603. # API Service The reporting ratio of Sentry profiles, if it is 0.01, it is 1%.
  604. API_SENTRY_PROFILES_SAMPLE_RATE=1.0
  605. # Web Service Sentry DSN address, default is empty, when empty,
  606. # all monitoring information is not reported to Sentry.
  607. # If not set, Sentry error reporting will be disabled.
  608. WEB_SENTRY_DSN=
  609. # ------------------------------
  610. # Notion Integration Configuration
  611. # Variables can be obtained by applying for Notion integration: https://www.notion.so/my-integrations
  612. # ------------------------------
  613. # Configure as "public" or "internal".
  614. # Since Notion's OAuth redirect URL only supports HTTPS,
  615. # if deploying locally, please use Notion's internal integration.
  616. NOTION_INTEGRATION_TYPE=public
  617. # Notion OAuth client secret (used for public integration type)
  618. NOTION_CLIENT_SECRET=
  619. # Notion OAuth client id (used for public integration type)
  620. NOTION_CLIENT_ID=
  621. # Notion internal integration secret.
  622. # If the value of NOTION_INTEGRATION_TYPE is "internal",
  623. # you need to configure this variable.
  624. NOTION_INTERNAL_SECRET=
  625. # ------------------------------
  626. # Mail related configuration
  627. # ------------------------------
  628. # Mail type, support: resend, smtp, sendgrid
  629. MAIL_TYPE=resend
  630. # Default send from email address, if not specified
  631. # If using SendGrid, use the 'from' field for authentication if necessary.
  632. MAIL_DEFAULT_SEND_FROM=
  633. # API-Key for the Resend email provider, used when MAIL_TYPE is `resend`.
  634. RESEND_API_URL=https://api.resend.com
  635. RESEND_API_KEY=your-resend-api-key
  636. # SMTP server configuration, used when MAIL_TYPE is `smtp`
  637. SMTP_SERVER=
  638. SMTP_PORT=465
  639. SMTP_USERNAME=
  640. SMTP_PASSWORD=
  641. SMTP_USE_TLS=true
  642. SMTP_OPPORTUNISTIC_TLS=false
  643. # Sendgid configuration
  644. SENDGRID_API_KEY=
  645. # ------------------------------
  646. # Others Configuration
  647. # ------------------------------
  648. # Maximum length of segmentation tokens for indexing
  649. INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH=4000
  650. # Member invitation link valid time (hours),
  651. # Default: 72.
  652. INVITE_EXPIRY_HOURS=72
  653. # Reset password token valid time (minutes),
  654. RESET_PASSWORD_TOKEN_EXPIRY_MINUTES=5
  655. CHANGE_EMAIL_TOKEN_EXPIRY_MINUTES=5
  656. OWNER_TRANSFER_TOKEN_EXPIRY_MINUTES=5
  657. # The sandbox service endpoint.
  658. CODE_EXECUTION_ENDPOINT=http://sandbox:8194
  659. CODE_EXECUTION_API_KEY=dify-sandbox
  660. CODE_MAX_NUMBER=9223372036854775807
  661. CODE_MIN_NUMBER=-9223372036854775808
  662. CODE_MAX_DEPTH=5
  663. CODE_MAX_PRECISION=20
  664. CODE_MAX_STRING_LENGTH=80000
  665. CODE_MAX_STRING_ARRAY_LENGTH=30
  666. CODE_MAX_OBJECT_ARRAY_LENGTH=30
  667. CODE_MAX_NUMBER_ARRAY_LENGTH=1000
  668. CODE_EXECUTION_CONNECT_TIMEOUT=10
  669. CODE_EXECUTION_READ_TIMEOUT=60
  670. CODE_EXECUTION_WRITE_TIMEOUT=10
  671. TEMPLATE_TRANSFORM_MAX_LENGTH=80000
  672. # Workflow runtime configuration
  673. WORKFLOW_MAX_EXECUTION_STEPS=500
  674. WORKFLOW_MAX_EXECUTION_TIME=1200
  675. WORKFLOW_CALL_MAX_DEPTH=5
  676. MAX_VARIABLE_SIZE=204800
  677. WORKFLOW_PARALLEL_DEPTH_LIMIT=3
  678. WORKFLOW_FILE_UPLOAD_LIMIT=10
  679. # Workflow storage configuration
  680. # Options: rdbms, hybrid
  681. # rdbms: Use only the relational database (default)
  682. # hybrid: Save new data to object storage, read from both object storage and RDBMS
  683. WORKFLOW_NODE_EXECUTION_STORAGE=rdbms
  684. # Repository configuration
  685. # Core workflow execution repository implementation
  686. CORE_WORKFLOW_EXECUTION_REPOSITORY=core.repositories.sqlalchemy_workflow_execution_repository.SQLAlchemyWorkflowExecutionRepository
  687. # Core workflow node execution repository implementation
  688. CORE_WORKFLOW_NODE_EXECUTION_REPOSITORY=core.repositories.sqlalchemy_workflow_node_execution_repository.SQLAlchemyWorkflowNodeExecutionRepository
  689. # API workflow node execution repository implementation
  690. API_WORKFLOW_NODE_EXECUTION_REPOSITORY=repositories.sqlalchemy_api_workflow_node_execution_repository.DifyAPISQLAlchemyWorkflowNodeExecutionRepository
  691. # API workflow run repository implementation
  692. API_WORKFLOW_RUN_REPOSITORY=repositories.sqlalchemy_api_workflow_run_repository.DifyAPISQLAlchemyWorkflowRunRepository
  693. # HTTP request node in workflow configuration
  694. HTTP_REQUEST_NODE_MAX_BINARY_SIZE=10485760
  695. HTTP_REQUEST_NODE_MAX_TEXT_SIZE=1048576
  696. HTTP_REQUEST_NODE_SSL_VERIFY=True
  697. # Respect X-* headers to redirect clients
  698. RESPECT_XFORWARD_HEADERS_ENABLED=false
  699. # SSRF Proxy server HTTP URL
  700. SSRF_PROXY_HTTP_URL=http://ssrf_proxy:3128
  701. # SSRF Proxy server HTTPS URL
  702. SSRF_PROXY_HTTPS_URL=http://ssrf_proxy:3128
  703. # Maximum loop count in the workflow
  704. LOOP_NODE_MAX_COUNT=100
  705. # The maximum number of tools that can be used in the agent.
  706. MAX_TOOLS_NUM=10
  707. # Maximum number of Parallelism branches in the workflow
  708. MAX_PARALLEL_LIMIT=10
  709. # The maximum number of iterations for agent setting
  710. MAX_ITERATIONS_NUM=99
  711. # ------------------------------
  712. # Environment Variables for web Service
  713. # ------------------------------
  714. # The timeout for the text generation in millisecond
  715. TEXT_GENERATION_TIMEOUT_MS=60000
  716. # Allow rendering unsafe URLs which have "data:" scheme.
  717. ALLOW_UNSAFE_DATA_SCHEME=false
  718. # ------------------------------
  719. # Environment Variables for db Service
  720. # ------------------------------
  721. # The name of the default postgres user.
  722. POSTGRES_USER=${DB_USERNAME}
  723. # The password for the default postgres user.
  724. POSTGRES_PASSWORD=${DB_PASSWORD}
  725. # The name of the default postgres database.
  726. POSTGRES_DB=${DB_DATABASE}
  727. # postgres data directory
  728. PGDATA=/var/lib/postgresql/data/pgdata
  729. # ------------------------------
  730. # Environment Variables for sandbox Service
  731. # ------------------------------
  732. # The API key for the sandbox service
  733. SANDBOX_API_KEY=dify-sandbox
  734. # The mode in which the Gin framework runs
  735. SANDBOX_GIN_MODE=release
  736. # The timeout for the worker in seconds
  737. SANDBOX_WORKER_TIMEOUT=15
  738. # Enable network for the sandbox service
  739. SANDBOX_ENABLE_NETWORK=true
  740. # HTTP proxy URL for SSRF protection
  741. SANDBOX_HTTP_PROXY=http://ssrf_proxy:3128
  742. # HTTPS proxy URL for SSRF protection
  743. SANDBOX_HTTPS_PROXY=http://ssrf_proxy:3128
  744. # The port on which the sandbox service runs
  745. SANDBOX_PORT=8194
  746. # ------------------------------
  747. # Environment Variables for weaviate Service
  748. # (only used when VECTOR_STORE is weaviate)
  749. # ------------------------------
  750. WEAVIATE_PERSISTENCE_DATA_PATH=/var/lib/weaviate
  751. WEAVIATE_QUERY_DEFAULTS_LIMIT=25
  752. WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED=true
  753. WEAVIATE_DEFAULT_VECTORIZER_MODULE=none
  754. WEAVIATE_CLUSTER_HOSTNAME=node1
  755. WEAVIATE_AUTHENTICATION_APIKEY_ENABLED=true
  756. WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih
  757. WEAVIATE_AUTHENTICATION_APIKEY_USERS=hello@dify.ai
  758. WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED=true
  759. WEAVIATE_AUTHORIZATION_ADMINLIST_USERS=hello@dify.ai
  760. # ------------------------------
  761. # Environment Variables for Chroma
  762. # (only used when VECTOR_STORE is chroma)
  763. # ------------------------------
  764. # Authentication credentials for Chroma server
  765. CHROMA_SERVER_AUTHN_CREDENTIALS=difyai123456
  766. # Authentication provider for Chroma server
  767. CHROMA_SERVER_AUTHN_PROVIDER=chromadb.auth.token_authn.TokenAuthenticationServerProvider
  768. # Persistence setting for Chroma server
  769. CHROMA_IS_PERSISTENT=TRUE
  770. # ------------------------------
  771. # Environment Variables for Oracle Service
  772. # (only used when VECTOR_STORE is oracle)
  773. # ------------------------------
  774. ORACLE_PWD=Dify123456
  775. ORACLE_CHARACTERSET=AL32UTF8
  776. # ------------------------------
  777. # Environment Variables for milvus Service
  778. # (only used when VECTOR_STORE is milvus)
  779. # ------------------------------
  780. # ETCD configuration for auto compaction mode
  781. ETCD_AUTO_COMPACTION_MODE=revision
  782. # ETCD configuration for auto compaction retention in terms of number of revisions
  783. ETCD_AUTO_COMPACTION_RETENTION=1000
  784. # ETCD configuration for backend quota in bytes
  785. ETCD_QUOTA_BACKEND_BYTES=4294967296
  786. # ETCD configuration for the number of changes before triggering a snapshot
  787. ETCD_SNAPSHOT_COUNT=50000
  788. # MinIO access key for authentication
  789. MINIO_ACCESS_KEY=minioadmin
  790. # MinIO secret key for authentication
  791. MINIO_SECRET_KEY=minioadmin
  792. # ETCD service endpoints
  793. ETCD_ENDPOINTS=etcd:2379
  794. # MinIO service address
  795. MINIO_ADDRESS=minio:9000
  796. # Enable or disable security authorization
  797. MILVUS_AUTHORIZATION_ENABLED=true
  798. # ------------------------------
  799. # Environment Variables for pgvector / pgvector-rs Service
  800. # (only used when VECTOR_STORE is pgvector / pgvector-rs)
  801. # ------------------------------
  802. PGVECTOR_PGUSER=postgres
  803. # The password for the default postgres user.
  804. PGVECTOR_POSTGRES_PASSWORD=difyai123456
  805. # The name of the default postgres database.
  806. PGVECTOR_POSTGRES_DB=dify
  807. # postgres data directory
  808. PGVECTOR_PGDATA=/var/lib/postgresql/data/pgdata
  809. # ------------------------------
  810. # Environment Variables for opensearch
  811. # (only used when VECTOR_STORE is opensearch)
  812. # ------------------------------
  813. OPENSEARCH_DISCOVERY_TYPE=single-node
  814. OPENSEARCH_BOOTSTRAP_MEMORY_LOCK=true
  815. OPENSEARCH_JAVA_OPTS_MIN=512m
  816. OPENSEARCH_JAVA_OPTS_MAX=1024m
  817. OPENSEARCH_INITIAL_ADMIN_PASSWORD=Qazwsxedc!@#123
  818. OPENSEARCH_MEMLOCK_SOFT=-1
  819. OPENSEARCH_MEMLOCK_HARD=-1
  820. OPENSEARCH_NOFILE_SOFT=65536
  821. OPENSEARCH_NOFILE_HARD=65536
  822. # ------------------------------
  823. # Environment Variables for Nginx reverse proxy
  824. # ------------------------------
  825. NGINX_SERVER_NAME=_
  826. NGINX_HTTPS_ENABLED=false
  827. # HTTP port
  828. NGINX_PORT=80
  829. # SSL settings are only applied when HTTPS_ENABLED is true
  830. NGINX_SSL_PORT=443
  831. # if HTTPS_ENABLED is true, you're required to add your own SSL certificates/keys to the `./nginx/ssl` directory
  832. # and modify the env vars below accordingly.
  833. NGINX_SSL_CERT_FILENAME=dify.crt
  834. NGINX_SSL_CERT_KEY_FILENAME=dify.key
  835. NGINX_SSL_PROTOCOLS=TLSv1.1 TLSv1.2 TLSv1.3
  836. # Nginx performance tuning
  837. NGINX_WORKER_PROCESSES=auto
  838. NGINX_CLIENT_MAX_BODY_SIZE=100M
  839. NGINX_KEEPALIVE_TIMEOUT=65
  840. # Proxy settings
  841. NGINX_PROXY_READ_TIMEOUT=3600s
  842. NGINX_PROXY_SEND_TIMEOUT=3600s
  843. # Set true to accept requests for /.well-known/acme-challenge/
  844. NGINX_ENABLE_CERTBOT_CHALLENGE=false
  845. # ------------------------------
  846. # Certbot Configuration
  847. # ------------------------------
  848. # Email address (required to get certificates from Let's Encrypt)
  849. CERTBOT_EMAIL=your_email@example.com
  850. # Domain name
  851. CERTBOT_DOMAIN=your_domain.com
  852. # certbot command options
  853. # i.e: --force-renewal --dry-run --test-cert --debug
  854. CERTBOT_OPTIONS=
  855. # ------------------------------
  856. # Environment Variables for SSRF Proxy
  857. # ------------------------------
  858. SSRF_HTTP_PORT=3128
  859. SSRF_COREDUMP_DIR=/var/spool/squid
  860. SSRF_REVERSE_PROXY_PORT=8194
  861. SSRF_SANDBOX_HOST=sandbox
  862. SSRF_DEFAULT_TIME_OUT=5
  863. SSRF_DEFAULT_CONNECT_TIME_OUT=5
  864. SSRF_DEFAULT_READ_TIME_OUT=5
  865. SSRF_DEFAULT_WRITE_TIME_OUT=5
  866. # ------------------------------
  867. # docker env var for specifying vector db type at startup
  868. # (based on the vector db type, the corresponding docker
  869. # compose profile will be used)
  870. # if you want to use unstructured, add ',unstructured' to the end
  871. # ------------------------------
  872. COMPOSE_PROFILES=${VECTOR_STORE:-weaviate}
  873. # ------------------------------
  874. # Docker Compose Service Expose Host Port Configurations
  875. # ------------------------------
  876. EXPOSE_NGINX_PORT=80
  877. EXPOSE_NGINX_SSL_PORT=443
  878. # ----------------------------------------------------------------------------
  879. # ModelProvider & Tool Position Configuration
  880. # Used to specify the model providers and tools that can be used in the app.
  881. # ----------------------------------------------------------------------------
  882. # Pin, include, and exclude tools
  883. # Use comma-separated values with no spaces between items.
  884. # Example: POSITION_TOOL_PINS=bing,google
  885. POSITION_TOOL_PINS=
  886. POSITION_TOOL_INCLUDES=
  887. POSITION_TOOL_EXCLUDES=
  888. # Pin, include, and exclude model providers
  889. # Use comma-separated values with no spaces between items.
  890. # Example: POSITION_PROVIDER_PINS=openai,openllm
  891. POSITION_PROVIDER_PINS=
  892. POSITION_PROVIDER_INCLUDES=
  893. POSITION_PROVIDER_EXCLUDES=
  894. # CSP https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
  895. CSP_WHITELIST=
  896. # Enable or disable create tidb service job
  897. CREATE_TIDB_SERVICE_JOB_ENABLED=false
  898. # Maximum number of submitted thread count in a ThreadPool for parallel node execution
  899. MAX_SUBMIT_COUNT=100
  900. # The maximum number of top-k value for RAG.
  901. TOP_K_MAX_VALUE=10
  902. # ------------------------------
  903. # Plugin Daemon Configuration
  904. # ------------------------------
  905. DB_PLUGIN_DATABASE=dify_plugin
  906. EXPOSE_PLUGIN_DAEMON_PORT=5002
  907. PLUGIN_DAEMON_PORT=5002
  908. PLUGIN_DAEMON_KEY=lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi
  909. PLUGIN_DAEMON_URL=http://plugin_daemon:5002
  910. PLUGIN_MAX_PACKAGE_SIZE=52428800
  911. PLUGIN_PPROF_ENABLED=false
  912. PLUGIN_DEBUGGING_HOST=0.0.0.0
  913. PLUGIN_DEBUGGING_PORT=5003
  914. EXPOSE_PLUGIN_DEBUGGING_HOST=localhost
  915. EXPOSE_PLUGIN_DEBUGGING_PORT=5003
  916. # If this key is changed, DIFY_INNER_API_KEY in plugin_daemon service must also be updated or agent node will fail.
  917. PLUGIN_DIFY_INNER_API_KEY=QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1
  918. PLUGIN_DIFY_INNER_API_URL=http://api:5001
  919. ENDPOINT_URL_TEMPLATE=http://localhost/e/{hook_id}
  920. MARKETPLACE_ENABLED=true
  921. MARKETPLACE_API_URL=https://marketplace.dify.ai
  922. FORCE_VERIFYING_SIGNATURE=true
  923. PLUGIN_PYTHON_ENV_INIT_TIMEOUT=120
  924. PLUGIN_MAX_EXECUTION_TIMEOUT=600
  925. # PIP_MIRROR_URL=https://pypi.tuna.tsinghua.edu.cn/simple
  926. PIP_MIRROR_URL=
  927. # https://github.com/langgenius/dify-plugin-daemon/blob/main/.env.example
  928. # Plugin storage type, local aws_s3 tencent_cos azure_blob aliyun_oss volcengine_tos
  929. PLUGIN_STORAGE_TYPE=local
  930. PLUGIN_STORAGE_LOCAL_ROOT=/app/storage
  931. PLUGIN_WORKING_PATH=/app/storage/cwd
  932. PLUGIN_INSTALLED_PATH=plugin
  933. PLUGIN_PACKAGE_CACHE_PATH=plugin_packages
  934. PLUGIN_MEDIA_CACHE_PATH=assets
  935. # Plugin oss bucket
  936. PLUGIN_STORAGE_OSS_BUCKET=
  937. # Plugin oss s3 credentials
  938. PLUGIN_S3_USE_AWS=false
  939. PLUGIN_S3_USE_AWS_MANAGED_IAM=false
  940. PLUGIN_S3_ENDPOINT=
  941. PLUGIN_S3_USE_PATH_STYLE=false
  942. PLUGIN_AWS_ACCESS_KEY=
  943. PLUGIN_AWS_SECRET_KEY=
  944. PLUGIN_AWS_REGION=
  945. # Plugin oss azure blob
  946. PLUGIN_AZURE_BLOB_STORAGE_CONTAINER_NAME=
  947. PLUGIN_AZURE_BLOB_STORAGE_CONNECTION_STRING=
  948. # Plugin oss tencent cos
  949. PLUGIN_TENCENT_COS_SECRET_KEY=
  950. PLUGIN_TENCENT_COS_SECRET_ID=
  951. PLUGIN_TENCENT_COS_REGION=
  952. # Plugin oss aliyun oss
  953. PLUGIN_ALIYUN_OSS_REGION=
  954. PLUGIN_ALIYUN_OSS_ENDPOINT=
  955. PLUGIN_ALIYUN_OSS_ACCESS_KEY_ID=
  956. PLUGIN_ALIYUN_OSS_ACCESS_KEY_SECRET=
  957. PLUGIN_ALIYUN_OSS_AUTH_VERSION=v4
  958. PLUGIN_ALIYUN_OSS_PATH=
  959. # Plugin oss volcengine tos
  960. PLUGIN_VOLCENGINE_TOS_ENDPOINT=
  961. PLUGIN_VOLCENGINE_TOS_ACCESS_KEY=
  962. PLUGIN_VOLCENGINE_TOS_SECRET_KEY=
  963. PLUGIN_VOLCENGINE_TOS_REGION=
  964. # ------------------------------
  965. # OTLP Collector Configuration
  966. # ------------------------------
  967. ENABLE_OTEL=false
  968. OTLP_TRACE_ENDPOINT=
  969. OTLP_METRIC_ENDPOINT=
  970. OTLP_BASE_ENDPOINT=http://localhost:4318
  971. OTLP_API_KEY=
  972. OTEL_EXPORTER_OTLP_PROTOCOL=
  973. OTEL_EXPORTER_TYPE=otlp
  974. OTEL_SAMPLING_RATE=0.1
  975. OTEL_BATCH_EXPORT_SCHEDULE_DELAY=5000
  976. OTEL_MAX_QUEUE_SIZE=2048
  977. OTEL_MAX_EXPORT_BATCH_SIZE=512
  978. OTEL_METRIC_EXPORT_INTERVAL=60000
  979. OTEL_BATCH_EXPORT_TIMEOUT=10000
  980. OTEL_METRIC_EXPORT_TIMEOUT=30000
  981. # Prevent Clickjacking
  982. ALLOW_EMBED=false
  983. # Dataset queue monitor configuration
  984. QUEUE_MONITOR_THRESHOLD=200
  985. # You can configure multiple ones, separated by commas. eg: test1@dify.ai,test2@dify.ai
  986. QUEUE_MONITOR_ALERT_EMAILS=
  987. # Monitor interval in minutes, default is 30 minutes
  988. QUEUE_MONITOR_INTERVAL=30