You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

.env.example 38KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167
  1. # ------------------------------
  2. # Environment Variables for API service & worker
  3. # ------------------------------
  4. # ------------------------------
  5. # Common Variables
  6. # ------------------------------
  7. # The backend URL of the console API,
  8. # used to concatenate the authorization callback.
  9. # If empty, it is the same domain.
  10. # Example: https://api.console.dify.ai
  11. CONSOLE_API_URL=
  12. # The front-end URL of the console web,
  13. # used to concatenate some front-end addresses and for CORS configuration use.
  14. # If empty, it is the same domain.
  15. # Example: https://console.dify.ai
  16. CONSOLE_WEB_URL=
  17. # Service API Url,
  18. # used to display Service API Base Url to the front-end.
  19. # If empty, it is the same domain.
  20. # Example: https://api.dify.ai
  21. SERVICE_API_URL=
  22. # WebApp API backend Url,
  23. # used to declare the back-end URL for the front-end API.
  24. # If empty, it is the same domain.
  25. # Example: https://api.app.dify.ai
  26. APP_API_URL=
  27. # WebApp Url,
  28. # used to display WebAPP API Base Url to the front-end.
  29. # If empty, it is the same domain.
  30. # Example: https://app.dify.ai
  31. APP_WEB_URL=
  32. # File preview or download Url prefix.
  33. # used to display File preview or download Url to the front-end or as Multi-model inputs;
  34. # Url is signed and has expiration time.
  35. # Setting FILES_URL is required for file processing plugins.
  36. # - For https://example.com, use FILES_URL=https://example.com
  37. # - For http://example.com, use FILES_URL=http://example.com
  38. # Recommendation: use a dedicated domain (e.g., https://upload.example.com).
  39. # Alternatively, use http://<your-ip>:5001 or http://api:5001,
  40. # ensuring port 5001 is externally accessible (see docker-compose.yaml).
  41. FILES_URL=
  42. # INTERNAL_FILES_URL is used for plugin daemon communication within Docker network.
  43. # Set this to the internal Docker service URL for proper plugin file access.
  44. # Example: INTERNAL_FILES_URL=http://api:5001
  45. INTERNAL_FILES_URL=
  46. # ------------------------------
  47. # Server Configuration
  48. # ------------------------------
  49. # The log level for the application.
  50. # Supported values are `DEBUG`, `INFO`, `WARNING`, `ERROR`, `CRITICAL`
  51. LOG_LEVEL=INFO
  52. # Log file path
  53. LOG_FILE=/app/logs/server.log
  54. # Log file max size, the unit is MB
  55. LOG_FILE_MAX_SIZE=20
  56. # Log file max backup count
  57. LOG_FILE_BACKUP_COUNT=5
  58. # Log dateformat
  59. LOG_DATEFORMAT=%Y-%m-%d %H:%M:%S
  60. # Log Timezone
  61. LOG_TZ=UTC
  62. # Debug mode, default is false.
  63. # It is recommended to turn on this configuration for local development
  64. # to prevent some problems caused by monkey patch.
  65. DEBUG=false
  66. # Flask debug mode, it can output trace information at the interface when turned on,
  67. # which is convenient for debugging.
  68. FLASK_DEBUG=false
  69. # Enable request logging, which will log the request and response information.
  70. # And the log level is DEBUG
  71. ENABLE_REQUEST_LOGGING=False
  72. # A secret key that is used for securely signing the session cookie
  73. # and encrypting sensitive information on the database.
  74. # You can generate a strong key using `openssl rand -base64 42`.
  75. SECRET_KEY=sk-9f73s3ljTXVcMT3Blb3ljTqtsKiGHXVcMT3BlbkFJLK7U
  76. # Password for admin user initialization.
  77. # If left unset, admin user will not be prompted for a password
  78. # when creating the initial admin account.
  79. # The length of the password cannot exceed 30 characters.
  80. INIT_PASSWORD=
  81. # Deployment environment.
  82. # Supported values are `PRODUCTION`, `TESTING`. Default is `PRODUCTION`.
  83. # Testing environment. There will be a distinct color label on the front-end page,
  84. # indicating that this environment is a testing environment.
  85. DEPLOY_ENV=PRODUCTION
  86. # Whether to enable the version check policy.
  87. # If set to empty, https://updates.dify.ai will be called for version check.
  88. CHECK_UPDATE_URL=https://updates.dify.ai
  89. # Used to change the OpenAI base address, default is https://api.openai.com/v1.
  90. # When OpenAI cannot be accessed in China, replace it with a domestic mirror address,
  91. # or when a local model provides OpenAI compatible API, it can be replaced.
  92. OPENAI_API_BASE=https://api.openai.com/v1
  93. # When enabled, migrations will be executed prior to application startup
  94. # and the application will start after the migrations have completed.
  95. MIGRATION_ENABLED=true
  96. # File Access Time specifies a time interval in seconds for the file to be accessed.
  97. # The default value is 300 seconds.
  98. FILES_ACCESS_TIMEOUT=300
  99. # Access token expiration time in minutes
  100. ACCESS_TOKEN_EXPIRE_MINUTES=60
  101. # Refresh token expiration time in days
  102. REFRESH_TOKEN_EXPIRE_DAYS=30
  103. # The maximum number of active requests for the application, where 0 means unlimited, should be a non-negative integer.
  104. APP_MAX_ACTIVE_REQUESTS=0
  105. APP_MAX_EXECUTION_TIME=1200
  106. # ------------------------------
  107. # Container Startup Related Configuration
  108. # Only effective when starting with docker image or docker-compose.
  109. # ------------------------------
  110. # API service binding address, default: 0.0.0.0, i.e., all addresses can be accessed.
  111. DIFY_BIND_ADDRESS=0.0.0.0
  112. # API service binding port number, default 5001.
  113. DIFY_PORT=5001
  114. # The number of API server workers, i.e., the number of workers.
  115. # Formula: number of cpu cores x 2 + 1 for sync, 1 for Gevent
  116. # Reference: https://docs.gunicorn.org/en/stable/design.html#how-many-workers
  117. SERVER_WORKER_AMOUNT=1
  118. # Defaults to gevent. If using windows, it can be switched to sync or solo.
  119. SERVER_WORKER_CLASS=gevent
  120. # Default number of worker connections, the default is 10.
  121. SERVER_WORKER_CONNECTIONS=10
  122. # Similar to SERVER_WORKER_CLASS.
  123. # If using windows, it can be switched to sync or solo.
  124. CELERY_WORKER_CLASS=
  125. # Request handling timeout. The default is 200,
  126. # it is recommended to set it to 360 to support a longer sse connection time.
  127. GUNICORN_TIMEOUT=360
  128. # The number of Celery workers. The default is 1, and can be set as needed.
  129. CELERY_WORKER_AMOUNT=
  130. # Flag indicating whether to enable autoscaling of Celery workers.
  131. #
  132. # Autoscaling is useful when tasks are CPU intensive and can be dynamically
  133. # allocated and deallocated based on the workload.
  134. #
  135. # When autoscaling is enabled, the maximum and minimum number of workers can
  136. # be specified. The autoscaling algorithm will dynamically adjust the number
  137. # of workers within the specified range.
  138. #
  139. # Default is false (i.e., autoscaling is disabled).
  140. #
  141. # Example:
  142. # CELERY_AUTO_SCALE=true
  143. CELERY_AUTO_SCALE=false
  144. # The maximum number of Celery workers that can be autoscaled.
  145. # This is optional and only used when autoscaling is enabled.
  146. # Default is not set.
  147. CELERY_MAX_WORKERS=
  148. # The minimum number of Celery workers that can be autoscaled.
  149. # This is optional and only used when autoscaling is enabled.
  150. # Default is not set.
  151. CELERY_MIN_WORKERS=
  152. # API Tool configuration
  153. API_TOOL_DEFAULT_CONNECT_TIMEOUT=10
  154. API_TOOL_DEFAULT_READ_TIMEOUT=60
  155. # -------------------------------
  156. # Datasource Configuration
  157. # --------------------------------
  158. ENABLE_WEBSITE_JINAREADER=true
  159. ENABLE_WEBSITE_FIRECRAWL=true
  160. ENABLE_WEBSITE_WATERCRAWL=true
  161. # ------------------------------
  162. # Database Configuration
  163. # The database uses PostgreSQL. Please use the public schema.
  164. # It is consistent with the configuration in the 'db' service below.
  165. # ------------------------------
  166. DB_USERNAME=postgres
  167. DB_PASSWORD=difyai123456
  168. DB_HOST=db
  169. DB_PORT=5432
  170. DB_DATABASE=dify
  171. # The size of the database connection pool.
  172. # The default is 30 connections, which can be appropriately increased.
  173. SQLALCHEMY_POOL_SIZE=30
  174. # Database connection pool recycling time, the default is 3600 seconds.
  175. SQLALCHEMY_POOL_RECYCLE=3600
  176. # Whether to print SQL, default is false.
  177. SQLALCHEMY_ECHO=false
  178. # If True, will test connections for liveness upon each checkout
  179. SQLALCHEMY_POOL_PRE_PING=false
  180. # Whether to enable the Last in first out option or use default FIFO queue if is false
  181. SQLALCHEMY_POOL_USE_LIFO=false
  182. # Maximum number of connections to the database
  183. # Default is 100
  184. #
  185. # Reference: https://www.postgresql.org/docs/current/runtime-config-connection.html#GUC-MAX-CONNECTIONS
  186. POSTGRES_MAX_CONNECTIONS=100
  187. # Sets the amount of shared memory used for postgres's shared buffers.
  188. # Default is 128MB
  189. # Recommended value: 25% of available memory
  190. # Reference: https://www.postgresql.org/docs/current/runtime-config-resource.html#GUC-SHARED-BUFFERS
  191. POSTGRES_SHARED_BUFFERS=128MB
  192. # Sets the amount of memory used by each database worker for working space.
  193. # Default is 4MB
  194. #
  195. # Reference: https://www.postgresql.org/docs/current/runtime-config-resource.html#GUC-WORK-MEM
  196. POSTGRES_WORK_MEM=4MB
  197. # Sets the amount of memory reserved for maintenance activities.
  198. # Default is 64MB
  199. #
  200. # Reference: https://www.postgresql.org/docs/current/runtime-config-resource.html#GUC-MAINTENANCE-WORK-MEM
  201. POSTGRES_MAINTENANCE_WORK_MEM=64MB
  202. # Sets the planner's assumption about the effective cache size.
  203. # Default is 4096MB
  204. #
  205. # Reference: https://www.postgresql.org/docs/current/runtime-config-query.html#GUC-EFFECTIVE-CACHE-SIZE
  206. POSTGRES_EFFECTIVE_CACHE_SIZE=4096MB
  207. # ------------------------------
  208. # Redis Configuration
  209. # This Redis configuration is used for caching and for pub/sub during conversation.
  210. # ------------------------------
  211. REDIS_HOST=redis
  212. REDIS_PORT=6379
  213. REDIS_USERNAME=
  214. REDIS_PASSWORD=difyai123456
  215. REDIS_USE_SSL=false
  216. REDIS_DB=0
  217. # Whether to use Redis Sentinel mode.
  218. # If set to true, the application will automatically discover and connect to the master node through Sentinel.
  219. REDIS_USE_SENTINEL=false
  220. # List of Redis Sentinel nodes. If Sentinel mode is enabled, provide at least one Sentinel IP and port.
  221. # Format: `<sentinel1_ip>:<sentinel1_port>,<sentinel2_ip>:<sentinel2_port>,<sentinel3_ip>:<sentinel3_port>`
  222. REDIS_SENTINELS=
  223. REDIS_SENTINEL_SERVICE_NAME=
  224. REDIS_SENTINEL_USERNAME=
  225. REDIS_SENTINEL_PASSWORD=
  226. REDIS_SENTINEL_SOCKET_TIMEOUT=0.1
  227. # List of Redis Cluster nodes. If Cluster mode is enabled, provide at least one Cluster IP and port.
  228. # Format: `<Cluster1_ip>:<Cluster1_port>,<Cluster2_ip>:<Cluster2_port>,<Cluster3_ip>:<Cluster3_port>`
  229. REDIS_USE_CLUSTERS=false
  230. REDIS_CLUSTERS=
  231. REDIS_CLUSTERS_PASSWORD=
  232. # ------------------------------
  233. # Celery Configuration
  234. # ------------------------------
  235. # Use redis as the broker, and redis db 1 for celery broker.
  236. # Format as follows: `redis://<redis_username>:<redis_password>@<redis_host>:<redis_port>/<redis_database>`
  237. # Example: redis://:difyai123456@redis:6379/1
  238. # If use Redis Sentinel, format as follows: `sentinel://<sentinel_username>:<sentinel_password>@<sentinel_host>:<sentinel_port>/<redis_database>`
  239. # Example: sentinel://localhost:26379/1;sentinel://localhost:26380/1;sentinel://localhost:26381/1
  240. CELERY_BROKER_URL=redis://:difyai123456@redis:6379/1
  241. CELERY_BACKEND=redis
  242. BROKER_USE_SSL=false
  243. # If you are using Redis Sentinel for high availability, configure the following settings.
  244. CELERY_USE_SENTINEL=false
  245. CELERY_SENTINEL_MASTER_NAME=
  246. CELERY_SENTINEL_PASSWORD=
  247. CELERY_SENTINEL_SOCKET_TIMEOUT=0.1
  248. # ------------------------------
  249. # CORS Configuration
  250. # Used to set the front-end cross-domain access policy.
  251. # ------------------------------
  252. # Specifies the allowed origins for cross-origin requests to the Web API,
  253. # e.g. https://dify.app or * for all origins.
  254. WEB_API_CORS_ALLOW_ORIGINS=*
  255. # Specifies the allowed origins for cross-origin requests to the console API,
  256. # e.g. https://cloud.dify.ai or * for all origins.
  257. CONSOLE_CORS_ALLOW_ORIGINS=*
  258. # ------------------------------
  259. # File Storage Configuration
  260. # ------------------------------
  261. # The type of storage to use for storing user files.
  262. STORAGE_TYPE=opendal
  263. # Apache OpenDAL Configuration
  264. # The configuration for OpenDAL consists of the following format: OPENDAL_<SCHEME_NAME>_<CONFIG_NAME>.
  265. # You can find all the service configurations (CONFIG_NAME) in the repository at: https://github.com/apache/opendal/tree/main/core/src/services.
  266. # Dify will scan configurations starting with OPENDAL_<SCHEME_NAME> and automatically apply them.
  267. # The scheme name for the OpenDAL storage.
  268. OPENDAL_SCHEME=fs
  269. # Configurations for OpenDAL Local File System.
  270. OPENDAL_FS_ROOT=storage
  271. # S3 Configuration
  272. #
  273. S3_ENDPOINT=
  274. S3_REGION=us-east-1
  275. S3_BUCKET_NAME=difyai
  276. S3_ACCESS_KEY=
  277. S3_SECRET_KEY=
  278. # Whether to use AWS managed IAM roles for authenticating with the S3 service.
  279. # If set to false, the access key and secret key must be provided.
  280. S3_USE_AWS_MANAGED_IAM=false
  281. # Azure Blob Configuration
  282. #
  283. AZURE_BLOB_ACCOUNT_NAME=difyai
  284. AZURE_BLOB_ACCOUNT_KEY=difyai
  285. AZURE_BLOB_CONTAINER_NAME=difyai-container
  286. AZURE_BLOB_ACCOUNT_URL=https://<your_account_name>.blob.core.windows.net
  287. # Google Storage Configuration
  288. #
  289. GOOGLE_STORAGE_BUCKET_NAME=your-bucket-name
  290. GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64=
  291. # The Alibaba Cloud OSS configurations,
  292. #
  293. ALIYUN_OSS_BUCKET_NAME=your-bucket-name
  294. ALIYUN_OSS_ACCESS_KEY=your-access-key
  295. ALIYUN_OSS_SECRET_KEY=your-secret-key
  296. ALIYUN_OSS_ENDPOINT=https://oss-ap-southeast-1-internal.aliyuncs.com
  297. ALIYUN_OSS_REGION=ap-southeast-1
  298. ALIYUN_OSS_AUTH_VERSION=v4
  299. # Don't start with '/'. OSS doesn't support leading slash in object names.
  300. ALIYUN_OSS_PATH=your-path
  301. # Tencent COS Configuration
  302. #
  303. TENCENT_COS_BUCKET_NAME=your-bucket-name
  304. TENCENT_COS_SECRET_KEY=your-secret-key
  305. TENCENT_COS_SECRET_ID=your-secret-id
  306. TENCENT_COS_REGION=your-region
  307. TENCENT_COS_SCHEME=your-scheme
  308. # Oracle Storage Configuration
  309. #
  310. OCI_ENDPOINT=https://your-object-storage-namespace.compat.objectstorage.us-ashburn-1.oraclecloud.com
  311. OCI_BUCKET_NAME=your-bucket-name
  312. OCI_ACCESS_KEY=your-access-key
  313. OCI_SECRET_KEY=your-secret-key
  314. OCI_REGION=us-ashburn-1
  315. # Huawei OBS Configuration
  316. #
  317. HUAWEI_OBS_BUCKET_NAME=your-bucket-name
  318. HUAWEI_OBS_SECRET_KEY=your-secret-key
  319. HUAWEI_OBS_ACCESS_KEY=your-access-key
  320. HUAWEI_OBS_SERVER=your-server-url
  321. # Volcengine TOS Configuration
  322. #
  323. VOLCENGINE_TOS_BUCKET_NAME=your-bucket-name
  324. VOLCENGINE_TOS_SECRET_KEY=your-secret-key
  325. VOLCENGINE_TOS_ACCESS_KEY=your-access-key
  326. VOLCENGINE_TOS_ENDPOINT=your-server-url
  327. VOLCENGINE_TOS_REGION=your-region
  328. # Baidu OBS Storage Configuration
  329. #
  330. BAIDU_OBS_BUCKET_NAME=your-bucket-name
  331. BAIDU_OBS_SECRET_KEY=your-secret-key
  332. BAIDU_OBS_ACCESS_KEY=your-access-key
  333. BAIDU_OBS_ENDPOINT=your-server-url
  334. # Supabase Storage Configuration
  335. #
  336. SUPABASE_BUCKET_NAME=your-bucket-name
  337. SUPABASE_API_KEY=your-access-key
  338. SUPABASE_URL=your-server-url
  339. # ------------------------------
  340. # Vector Database Configuration
  341. # ------------------------------
  342. # The type of vector store to use.
  343. # Supported values are `weaviate`, `qdrant`, `milvus`, `myscale`, `relyt`, `pgvector`, `pgvecto-rs`, `chroma`, `opensearch`, `oracle`, `tencent`, `elasticsearch`, `elasticsearch-ja`, `analyticdb`, `couchbase`, `vikingdb`, `oceanbase`, `opengauss`, `tablestore`,`vastbase`,`tidb`,`tidb_on_qdrant`,`baidu`,`lindorm`,`huawei_cloud`,`upstash`, `matrixone`.
  344. VECTOR_STORE=weaviate
  345. # The Weaviate endpoint URL. Only available when VECTOR_STORE is `weaviate`.
  346. WEAVIATE_ENDPOINT=http://weaviate:8080
  347. WEAVIATE_API_KEY=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih
  348. # The Qdrant endpoint URL. Only available when VECTOR_STORE is `qdrant`.
  349. QDRANT_URL=http://qdrant:6333
  350. QDRANT_API_KEY=difyai123456
  351. QDRANT_CLIENT_TIMEOUT=20
  352. QDRANT_GRPC_ENABLED=false
  353. QDRANT_GRPC_PORT=6334
  354. QDRANT_REPLICATION_FACTOR=1
  355. # Milvus configuration. Only available when VECTOR_STORE is `milvus`.
  356. # The milvus uri.
  357. MILVUS_URI=http://host.docker.internal:19530
  358. MILVUS_DATABASE=
  359. MILVUS_TOKEN=
  360. MILVUS_USER=
  361. MILVUS_PASSWORD=
  362. MILVUS_ENABLE_HYBRID_SEARCH=False
  363. MILVUS_ANALYZER_PARAMS=
  364. # MyScale configuration, only available when VECTOR_STORE is `myscale`
  365. # For multi-language support, please set MYSCALE_FTS_PARAMS with referring to:
  366. # https://myscale.com/docs/en/text-search/#understanding-fts-index-parameters
  367. MYSCALE_HOST=myscale
  368. MYSCALE_PORT=8123
  369. MYSCALE_USER=default
  370. MYSCALE_PASSWORD=
  371. MYSCALE_DATABASE=dify
  372. MYSCALE_FTS_PARAMS=
  373. # Couchbase configurations, only available when VECTOR_STORE is `couchbase`
  374. # The connection string must include hostname defined in the docker-compose file (couchbase-server in this case)
  375. COUCHBASE_CONNECTION_STRING=couchbase://couchbase-server
  376. COUCHBASE_USER=Administrator
  377. COUCHBASE_PASSWORD=password
  378. COUCHBASE_BUCKET_NAME=Embeddings
  379. COUCHBASE_SCOPE_NAME=_default
  380. # pgvector configurations, only available when VECTOR_STORE is `pgvector`
  381. PGVECTOR_HOST=pgvector
  382. PGVECTOR_PORT=5432
  383. PGVECTOR_USER=postgres
  384. PGVECTOR_PASSWORD=difyai123456
  385. PGVECTOR_DATABASE=dify
  386. PGVECTOR_MIN_CONNECTION=1
  387. PGVECTOR_MAX_CONNECTION=5
  388. PGVECTOR_PG_BIGM=false
  389. PGVECTOR_PG_BIGM_VERSION=1.2-20240606
  390. # vastbase configurations, only available when VECTOR_STORE is `vastbase`
  391. VASTBASE_HOST=vastbase
  392. VASTBASE_PORT=5432
  393. VASTBASE_USER=dify
  394. VASTBASE_PASSWORD=Difyai123456
  395. VASTBASE_DATABASE=dify
  396. VASTBASE_MIN_CONNECTION=1
  397. VASTBASE_MAX_CONNECTION=5
  398. # pgvecto-rs configurations, only available when VECTOR_STORE is `pgvecto-rs`
  399. PGVECTO_RS_HOST=pgvecto-rs
  400. PGVECTO_RS_PORT=5432
  401. PGVECTO_RS_USER=postgres
  402. PGVECTO_RS_PASSWORD=difyai123456
  403. PGVECTO_RS_DATABASE=dify
  404. # analyticdb configurations, only available when VECTOR_STORE is `analyticdb`
  405. ANALYTICDB_KEY_ID=your-ak
  406. ANALYTICDB_KEY_SECRET=your-sk
  407. ANALYTICDB_REGION_ID=cn-hangzhou
  408. ANALYTICDB_INSTANCE_ID=gp-ab123456
  409. ANALYTICDB_ACCOUNT=testaccount
  410. ANALYTICDB_PASSWORD=testpassword
  411. ANALYTICDB_NAMESPACE=dify
  412. ANALYTICDB_NAMESPACE_PASSWORD=difypassword
  413. ANALYTICDB_HOST=gp-test.aliyuncs.com
  414. ANALYTICDB_PORT=5432
  415. ANALYTICDB_MIN_CONNECTION=1
  416. ANALYTICDB_MAX_CONNECTION=5
  417. # TiDB vector configurations, only available when VECTOR_STORE is `tidb_vector`
  418. TIDB_VECTOR_HOST=tidb
  419. TIDB_VECTOR_PORT=4000
  420. TIDB_VECTOR_USER=
  421. TIDB_VECTOR_PASSWORD=
  422. TIDB_VECTOR_DATABASE=dify
  423. # Matrixone vector configurations.
  424. MATRIXONE_HOST=matrixone
  425. MATRIXONE_PORT=6001
  426. MATRIXONE_USER=dump
  427. MATRIXONE_PASSWORD=111
  428. MATRIXONE_DATABASE=dify
  429. # Tidb on qdrant configuration, only available when VECTOR_STORE is `tidb_on_qdrant`
  430. TIDB_ON_QDRANT_URL=http://127.0.0.1
  431. TIDB_ON_QDRANT_API_KEY=dify
  432. TIDB_ON_QDRANT_CLIENT_TIMEOUT=20
  433. TIDB_ON_QDRANT_GRPC_ENABLED=false
  434. TIDB_ON_QDRANT_GRPC_PORT=6334
  435. TIDB_PUBLIC_KEY=dify
  436. TIDB_PRIVATE_KEY=dify
  437. TIDB_API_URL=http://127.0.0.1
  438. TIDB_IAM_API_URL=http://127.0.0.1
  439. TIDB_REGION=regions/aws-us-east-1
  440. TIDB_PROJECT_ID=dify
  441. TIDB_SPEND_LIMIT=100
  442. # Chroma configuration, only available when VECTOR_STORE is `chroma`
  443. CHROMA_HOST=127.0.0.1
  444. CHROMA_PORT=8000
  445. CHROMA_TENANT=default_tenant
  446. CHROMA_DATABASE=default_database
  447. CHROMA_AUTH_PROVIDER=chromadb.auth.token_authn.TokenAuthClientProvider
  448. CHROMA_AUTH_CREDENTIALS=
  449. # Oracle configuration, only available when VECTOR_STORE is `oracle`
  450. ORACLE_USER=dify
  451. ORACLE_PASSWORD=dify
  452. ORACLE_DSN=oracle:1521/FREEPDB1
  453. ORACLE_CONFIG_DIR=/app/api/storage/wallet
  454. ORACLE_WALLET_LOCATION=/app/api/storage/wallet
  455. ORACLE_WALLET_PASSWORD=dify
  456. ORACLE_IS_AUTONOMOUS=false
  457. # relyt configurations, only available when VECTOR_STORE is `relyt`
  458. RELYT_HOST=db
  459. RELYT_PORT=5432
  460. RELYT_USER=postgres
  461. RELYT_PASSWORD=difyai123456
  462. RELYT_DATABASE=postgres
  463. # open search configuration, only available when VECTOR_STORE is `opensearch`
  464. OPENSEARCH_HOST=opensearch
  465. OPENSEARCH_PORT=9200
  466. OPENSEARCH_SECURE=true
  467. OPENSEARCH_VERIFY_CERTS=true
  468. OPENSEARCH_AUTH_METHOD=basic
  469. OPENSEARCH_USER=admin
  470. OPENSEARCH_PASSWORD=admin
  471. # If using AWS managed IAM, e.g. Managed Cluster or OpenSearch Serverless
  472. OPENSEARCH_AWS_REGION=ap-southeast-1
  473. OPENSEARCH_AWS_SERVICE=aoss
  474. # tencent vector configurations, only available when VECTOR_STORE is `tencent`
  475. TENCENT_VECTOR_DB_URL=http://127.0.0.1
  476. TENCENT_VECTOR_DB_API_KEY=dify
  477. TENCENT_VECTOR_DB_TIMEOUT=30
  478. TENCENT_VECTOR_DB_USERNAME=dify
  479. TENCENT_VECTOR_DB_DATABASE=dify
  480. TENCENT_VECTOR_DB_SHARD=1
  481. TENCENT_VECTOR_DB_REPLICAS=2
  482. TENCENT_VECTOR_DB_ENABLE_HYBRID_SEARCH=false
  483. # ElasticSearch configuration, only available when VECTOR_STORE is `elasticsearch`
  484. ELASTICSEARCH_HOST=0.0.0.0
  485. ELASTICSEARCH_PORT=9200
  486. ELASTICSEARCH_USERNAME=elastic
  487. ELASTICSEARCH_PASSWORD=elastic
  488. KIBANA_PORT=5601
  489. # baidu vector configurations, only available when VECTOR_STORE is `baidu`
  490. BAIDU_VECTOR_DB_ENDPOINT=http://127.0.0.1:5287
  491. BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS=30000
  492. BAIDU_VECTOR_DB_ACCOUNT=root
  493. BAIDU_VECTOR_DB_API_KEY=dify
  494. BAIDU_VECTOR_DB_DATABASE=dify
  495. BAIDU_VECTOR_DB_SHARD=1
  496. BAIDU_VECTOR_DB_REPLICAS=3
  497. # VikingDB configurations, only available when VECTOR_STORE is `vikingdb`
  498. VIKINGDB_ACCESS_KEY=your-ak
  499. VIKINGDB_SECRET_KEY=your-sk
  500. VIKINGDB_REGION=cn-shanghai
  501. VIKINGDB_HOST=api-vikingdb.xxx.volces.com
  502. VIKINGDB_SCHEMA=http
  503. VIKINGDB_CONNECTION_TIMEOUT=30
  504. VIKINGDB_SOCKET_TIMEOUT=30
  505. # Lindorm configuration, only available when VECTOR_STORE is `lindorm`
  506. LINDORM_URL=http://lindorm:30070
  507. LINDORM_USERNAME=lindorm
  508. LINDORM_PASSWORD=lindorm
  509. LINDORM_QUERY_TIMEOUT=1
  510. # OceanBase Vector configuration, only available when VECTOR_STORE is `oceanbase`
  511. OCEANBASE_VECTOR_HOST=oceanbase
  512. OCEANBASE_VECTOR_PORT=2881
  513. OCEANBASE_VECTOR_USER=root@test
  514. OCEANBASE_VECTOR_PASSWORD=difyai123456
  515. OCEANBASE_VECTOR_DATABASE=test
  516. OCEANBASE_CLUSTER_NAME=difyai
  517. OCEANBASE_MEMORY_LIMIT=6G
  518. OCEANBASE_ENABLE_HYBRID_SEARCH=false
  519. # opengauss configurations, only available when VECTOR_STORE is `opengauss`
  520. OPENGAUSS_HOST=opengauss
  521. OPENGAUSS_PORT=6600
  522. OPENGAUSS_USER=postgres
  523. OPENGAUSS_PASSWORD=Dify@123
  524. OPENGAUSS_DATABASE=dify
  525. OPENGAUSS_MIN_CONNECTION=1
  526. OPENGAUSS_MAX_CONNECTION=5
  527. OPENGAUSS_ENABLE_PQ=false
  528. # huawei cloud search service vector configurations, only available when VECTOR_STORE is `huawei_cloud`
  529. HUAWEI_CLOUD_HOSTS=https://127.0.0.1:9200
  530. HUAWEI_CLOUD_USER=admin
  531. HUAWEI_CLOUD_PASSWORD=admin
  532. # Upstash Vector configuration, only available when VECTOR_STORE is `upstash`
  533. UPSTASH_VECTOR_URL=https://xxx-vector.upstash.io
  534. UPSTASH_VECTOR_TOKEN=dify
  535. # TableStore Vector configuration
  536. # (only used when VECTOR_STORE is tablestore)
  537. TABLESTORE_ENDPOINT=https://instance-name.cn-hangzhou.ots.aliyuncs.com
  538. TABLESTORE_INSTANCE_NAME=instance-name
  539. TABLESTORE_ACCESS_KEY_ID=xxx
  540. TABLESTORE_ACCESS_KEY_SECRET=xxx
  541. # ------------------------------
  542. # Knowledge Configuration
  543. # ------------------------------
  544. # Upload file size limit, default 15M.
  545. UPLOAD_FILE_SIZE_LIMIT=15
  546. # The maximum number of files that can be uploaded at a time, default 5.
  547. UPLOAD_FILE_BATCH_LIMIT=5
  548. # ETL type, support: `dify`, `Unstructured`
  549. # `dify` Dify's proprietary file extraction scheme
  550. # `Unstructured` Unstructured.io file extraction scheme
  551. ETL_TYPE=dify
  552. # Unstructured API path and API key, needs to be configured when ETL_TYPE is Unstructured
  553. # Or using Unstructured for document extractor node for pptx.
  554. # For example: http://unstructured:8000/general/v0/general
  555. UNSTRUCTURED_API_URL=
  556. UNSTRUCTURED_API_KEY=
  557. SCARF_NO_ANALYTICS=true
  558. # ------------------------------
  559. # Model Configuration
  560. # ------------------------------
  561. # The maximum number of tokens allowed for prompt generation.
  562. # This setting controls the upper limit of tokens that can be used by the LLM
  563. # when generating a prompt in the prompt generation tool.
  564. # Default: 512 tokens.
  565. PROMPT_GENERATION_MAX_TOKENS=512
  566. # The maximum number of tokens allowed for code generation.
  567. # This setting controls the upper limit of tokens that can be used by the LLM
  568. # when generating code in the code generation tool.
  569. # Default: 1024 tokens.
  570. CODE_GENERATION_MAX_TOKENS=1024
  571. # Enable or disable plugin based token counting. If disabled, token counting will return 0.
  572. # This can improve performance by skipping token counting operations.
  573. # Default: false (disabled).
  574. PLUGIN_BASED_TOKEN_COUNTING_ENABLED=false
  575. # ------------------------------
  576. # Multi-modal Configuration
  577. # ------------------------------
  578. # The format of the image/video/audio/document sent when the multi-modal model is input,
  579. # the default is base64, optional url.
  580. # The delay of the call in url mode will be lower than that in base64 mode.
  581. # It is generally recommended to use the more compatible base64 mode.
  582. # If configured as url, you need to configure FILES_URL as an externally accessible address so that the multi-modal model can access the image/video/audio/document.
  583. MULTIMODAL_SEND_FORMAT=base64
  584. # Upload image file size limit, default 10M.
  585. UPLOAD_IMAGE_FILE_SIZE_LIMIT=10
  586. # Upload video file size limit, default 100M.
  587. UPLOAD_VIDEO_FILE_SIZE_LIMIT=100
  588. # Upload audio file size limit, default 50M.
  589. UPLOAD_AUDIO_FILE_SIZE_LIMIT=50
  590. # ------------------------------
  591. # Sentry Configuration
  592. # Used for application monitoring and error log tracking.
  593. # ------------------------------
  594. SENTRY_DSN=
  595. # API Service Sentry DSN address, default is empty, when empty,
  596. # all monitoring information is not reported to Sentry.
  597. # If not set, Sentry error reporting will be disabled.
  598. API_SENTRY_DSN=
  599. # API Service The reporting ratio of Sentry events, if it is 0.01, it is 1%.
  600. API_SENTRY_TRACES_SAMPLE_RATE=1.0
  601. # API Service The reporting ratio of Sentry profiles, if it is 0.01, it is 1%.
  602. API_SENTRY_PROFILES_SAMPLE_RATE=1.0
  603. # Web Service Sentry DSN address, default is empty, when empty,
  604. # all monitoring information is not reported to Sentry.
  605. # If not set, Sentry error reporting will be disabled.
  606. WEB_SENTRY_DSN=
  607. # ------------------------------
  608. # Notion Integration Configuration
  609. # Variables can be obtained by applying for Notion integration: https://www.notion.so/my-integrations
  610. # ------------------------------
  611. # Configure as "public" or "internal".
  612. # Since Notion's OAuth redirect URL only supports HTTPS,
  613. # if deploying locally, please use Notion's internal integration.
  614. NOTION_INTEGRATION_TYPE=public
  615. # Notion OAuth client secret (used for public integration type)
  616. NOTION_CLIENT_SECRET=
  617. # Notion OAuth client id (used for public integration type)
  618. NOTION_CLIENT_ID=
  619. # Notion internal integration secret.
  620. # If the value of NOTION_INTEGRATION_TYPE is "internal",
  621. # you need to configure this variable.
  622. NOTION_INTERNAL_SECRET=
  623. # ------------------------------
  624. # Mail related configuration
  625. # ------------------------------
  626. # Mail type, support: resend, smtp, sendgrid
  627. MAIL_TYPE=resend
  628. # Default send from email address, if not specified
  629. # If using SendGrid, use the 'from' field for authentication if necessary.
  630. MAIL_DEFAULT_SEND_FROM=
  631. # API-Key for the Resend email provider, used when MAIL_TYPE is `resend`.
  632. RESEND_API_URL=https://api.resend.com
  633. RESEND_API_KEY=your-resend-api-key
  634. # SMTP server configuration, used when MAIL_TYPE is `smtp`
  635. SMTP_SERVER=
  636. SMTP_PORT=465
  637. SMTP_USERNAME=
  638. SMTP_PASSWORD=
  639. SMTP_USE_TLS=true
  640. SMTP_OPPORTUNISTIC_TLS=false
  641. # Sendgid configuration
  642. SENDGRID_API_KEY=
  643. # ------------------------------
  644. # Others Configuration
  645. # ------------------------------
  646. # Maximum length of segmentation tokens for indexing
  647. INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH=4000
  648. # Member invitation link valid time (hours),
  649. # Default: 72.
  650. INVITE_EXPIRY_HOURS=72
  651. # Reset password token valid time (minutes),
  652. RESET_PASSWORD_TOKEN_EXPIRY_MINUTES=5
  653. CHANGE_EMAIL_TOKEN_EXPIRY_MINUTES=5
  654. OWNER_TRANSFER_TOKEN_EXPIRY_MINUTES=5
  655. # The sandbox service endpoint.
  656. CODE_EXECUTION_ENDPOINT=http://sandbox:8194
  657. CODE_EXECUTION_API_KEY=dify-sandbox
  658. CODE_MAX_NUMBER=9223372036854775807
  659. CODE_MIN_NUMBER=-9223372036854775808
  660. CODE_MAX_DEPTH=5
  661. CODE_MAX_PRECISION=20
  662. CODE_MAX_STRING_LENGTH=80000
  663. CODE_MAX_STRING_ARRAY_LENGTH=30
  664. CODE_MAX_OBJECT_ARRAY_LENGTH=30
  665. CODE_MAX_NUMBER_ARRAY_LENGTH=1000
  666. CODE_EXECUTION_CONNECT_TIMEOUT=10
  667. CODE_EXECUTION_READ_TIMEOUT=60
  668. CODE_EXECUTION_WRITE_TIMEOUT=10
  669. TEMPLATE_TRANSFORM_MAX_LENGTH=80000
  670. # Workflow runtime configuration
  671. WORKFLOW_MAX_EXECUTION_STEPS=500
  672. WORKFLOW_MAX_EXECUTION_TIME=1200
  673. WORKFLOW_CALL_MAX_DEPTH=5
  674. MAX_VARIABLE_SIZE=204800
  675. WORKFLOW_PARALLEL_DEPTH_LIMIT=3
  676. WORKFLOW_FILE_UPLOAD_LIMIT=10
  677. # Workflow storage configuration
  678. # Options: rdbms, hybrid
  679. # rdbms: Use only the relational database (default)
  680. # hybrid: Save new data to object storage, read from both object storage and RDBMS
  681. WORKFLOW_NODE_EXECUTION_STORAGE=rdbms
  682. # Repository configuration
  683. # Core workflow execution repository implementation
  684. CORE_WORKFLOW_EXECUTION_REPOSITORY=core.repositories.sqlalchemy_workflow_execution_repository.SQLAlchemyWorkflowExecutionRepository
  685. # Core workflow node execution repository implementation
  686. CORE_WORKFLOW_NODE_EXECUTION_REPOSITORY=core.repositories.sqlalchemy_workflow_node_execution_repository.SQLAlchemyWorkflowNodeExecutionRepository
  687. # API workflow node execution repository implementation
  688. API_WORKFLOW_NODE_EXECUTION_REPOSITORY=repositories.sqlalchemy_api_workflow_node_execution_repository.DifyAPISQLAlchemyWorkflowNodeExecutionRepository
  689. # API workflow run repository implementation
  690. API_WORKFLOW_RUN_REPOSITORY=repositories.sqlalchemy_api_workflow_run_repository.DifyAPISQLAlchemyWorkflowRunRepository
  691. # HTTP request node in workflow configuration
  692. HTTP_REQUEST_NODE_MAX_BINARY_SIZE=10485760
  693. HTTP_REQUEST_NODE_MAX_TEXT_SIZE=1048576
  694. HTTP_REQUEST_NODE_SSL_VERIFY=True
  695. # Respect X-* headers to redirect clients
  696. RESPECT_XFORWARD_HEADERS_ENABLED=false
  697. # SSRF Proxy server HTTP URL
  698. SSRF_PROXY_HTTP_URL=http://ssrf_proxy:3128
  699. # SSRF Proxy server HTTPS URL
  700. SSRF_PROXY_HTTPS_URL=http://ssrf_proxy:3128
  701. # Maximum loop count in the workflow
  702. LOOP_NODE_MAX_COUNT=100
  703. # The maximum number of tools that can be used in the agent.
  704. MAX_TOOLS_NUM=10
  705. # Maximum number of Parallelism branches in the workflow
  706. MAX_PARALLEL_LIMIT=10
  707. # The maximum number of iterations for agent setting
  708. MAX_ITERATIONS_NUM=99
  709. # ------------------------------
  710. # Environment Variables for web Service
  711. # ------------------------------
  712. # The timeout for the text generation in millisecond
  713. TEXT_GENERATION_TIMEOUT_MS=60000
  714. # Allow rendering unsafe URLs which have "data:" scheme.
  715. ALLOW_UNSAFE_DATA_SCHEME=false
  716. # ------------------------------
  717. # Environment Variables for db Service
  718. # ------------------------------
  719. # The name of the default postgres user.
  720. POSTGRES_USER=${DB_USERNAME}
  721. # The password for the default postgres user.
  722. POSTGRES_PASSWORD=${DB_PASSWORD}
  723. # The name of the default postgres database.
  724. POSTGRES_DB=${DB_DATABASE}
  725. # postgres data directory
  726. PGDATA=/var/lib/postgresql/data/pgdata
  727. # ------------------------------
  728. # Environment Variables for sandbox Service
  729. # ------------------------------
  730. # The API key for the sandbox service
  731. SANDBOX_API_KEY=dify-sandbox
  732. # The mode in which the Gin framework runs
  733. SANDBOX_GIN_MODE=release
  734. # The timeout for the worker in seconds
  735. SANDBOX_WORKER_TIMEOUT=15
  736. # Enable network for the sandbox service
  737. SANDBOX_ENABLE_NETWORK=true
  738. # HTTP proxy URL for SSRF protection
  739. SANDBOX_HTTP_PROXY=http://ssrf_proxy:3128
  740. # HTTPS proxy URL for SSRF protection
  741. SANDBOX_HTTPS_PROXY=http://ssrf_proxy:3128
  742. # The port on which the sandbox service runs
  743. SANDBOX_PORT=8194
  744. # ------------------------------
  745. # Environment Variables for weaviate Service
  746. # (only used when VECTOR_STORE is weaviate)
  747. # ------------------------------
  748. WEAVIATE_PERSISTENCE_DATA_PATH=/var/lib/weaviate
  749. WEAVIATE_QUERY_DEFAULTS_LIMIT=25
  750. WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED=true
  751. WEAVIATE_DEFAULT_VECTORIZER_MODULE=none
  752. WEAVIATE_CLUSTER_HOSTNAME=node1
  753. WEAVIATE_AUTHENTICATION_APIKEY_ENABLED=true
  754. WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih
  755. WEAVIATE_AUTHENTICATION_APIKEY_USERS=hello@dify.ai
  756. WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED=true
  757. WEAVIATE_AUTHORIZATION_ADMINLIST_USERS=hello@dify.ai
  758. # ------------------------------
  759. # Environment Variables for Chroma
  760. # (only used when VECTOR_STORE is chroma)
  761. # ------------------------------
  762. # Authentication credentials for Chroma server
  763. CHROMA_SERVER_AUTHN_CREDENTIALS=difyai123456
  764. # Authentication provider for Chroma server
  765. CHROMA_SERVER_AUTHN_PROVIDER=chromadb.auth.token_authn.TokenAuthenticationServerProvider
  766. # Persistence setting for Chroma server
  767. CHROMA_IS_PERSISTENT=TRUE
  768. # ------------------------------
  769. # Environment Variables for Oracle Service
  770. # (only used when VECTOR_STORE is oracle)
  771. # ------------------------------
  772. ORACLE_PWD=Dify123456
  773. ORACLE_CHARACTERSET=AL32UTF8
  774. # ------------------------------
  775. # Environment Variables for milvus Service
  776. # (only used when VECTOR_STORE is milvus)
  777. # ------------------------------
  778. # ETCD configuration for auto compaction mode
  779. ETCD_AUTO_COMPACTION_MODE=revision
  780. # ETCD configuration for auto compaction retention in terms of number of revisions
  781. ETCD_AUTO_COMPACTION_RETENTION=1000
  782. # ETCD configuration for backend quota in bytes
  783. ETCD_QUOTA_BACKEND_BYTES=4294967296
  784. # ETCD configuration for the number of changes before triggering a snapshot
  785. ETCD_SNAPSHOT_COUNT=50000
  786. # MinIO access key for authentication
  787. MINIO_ACCESS_KEY=minioadmin
  788. # MinIO secret key for authentication
  789. MINIO_SECRET_KEY=minioadmin
  790. # ETCD service endpoints
  791. ETCD_ENDPOINTS=etcd:2379
  792. # MinIO service address
  793. MINIO_ADDRESS=minio:9000
  794. # Enable or disable security authorization
  795. MILVUS_AUTHORIZATION_ENABLED=true
  796. # ------------------------------
  797. # Environment Variables for pgvector / pgvector-rs Service
  798. # (only used when VECTOR_STORE is pgvector / pgvector-rs)
  799. # ------------------------------
  800. PGVECTOR_PGUSER=postgres
  801. # The password for the default postgres user.
  802. PGVECTOR_POSTGRES_PASSWORD=difyai123456
  803. # The name of the default postgres database.
  804. PGVECTOR_POSTGRES_DB=dify
  805. # postgres data directory
  806. PGVECTOR_PGDATA=/var/lib/postgresql/data/pgdata
  807. # ------------------------------
  808. # Environment Variables for opensearch
  809. # (only used when VECTOR_STORE is opensearch)
  810. # ------------------------------
  811. OPENSEARCH_DISCOVERY_TYPE=single-node
  812. OPENSEARCH_BOOTSTRAP_MEMORY_LOCK=true
  813. OPENSEARCH_JAVA_OPTS_MIN=512m
  814. OPENSEARCH_JAVA_OPTS_MAX=1024m
  815. OPENSEARCH_INITIAL_ADMIN_PASSWORD=Qazwsxedc!@#123
  816. OPENSEARCH_MEMLOCK_SOFT=-1
  817. OPENSEARCH_MEMLOCK_HARD=-1
  818. OPENSEARCH_NOFILE_SOFT=65536
  819. OPENSEARCH_NOFILE_HARD=65536
  820. # ------------------------------
  821. # Environment Variables for Nginx reverse proxy
  822. # ------------------------------
  823. NGINX_SERVER_NAME=_
  824. NGINX_HTTPS_ENABLED=false
  825. # HTTP port
  826. NGINX_PORT=80
  827. # SSL settings are only applied when HTTPS_ENABLED is true
  828. NGINX_SSL_PORT=443
  829. # if HTTPS_ENABLED is true, you're required to add your own SSL certificates/keys to the `./nginx/ssl` directory
  830. # and modify the env vars below accordingly.
  831. NGINX_SSL_CERT_FILENAME=dify.crt
  832. NGINX_SSL_CERT_KEY_FILENAME=dify.key
  833. NGINX_SSL_PROTOCOLS=TLSv1.1 TLSv1.2 TLSv1.3
  834. # Nginx performance tuning
  835. NGINX_WORKER_PROCESSES=auto
  836. NGINX_CLIENT_MAX_BODY_SIZE=100M
  837. NGINX_KEEPALIVE_TIMEOUT=65
  838. # Proxy settings
  839. NGINX_PROXY_READ_TIMEOUT=3600s
  840. NGINX_PROXY_SEND_TIMEOUT=3600s
  841. # Set true to accept requests for /.well-known/acme-challenge/
  842. NGINX_ENABLE_CERTBOT_CHALLENGE=false
  843. # ------------------------------
  844. # Certbot Configuration
  845. # ------------------------------
  846. # Email address (required to get certificates from Let's Encrypt)
  847. CERTBOT_EMAIL=your_email@example.com
  848. # Domain name
  849. CERTBOT_DOMAIN=your_domain.com
  850. # certbot command options
  851. # i.e: --force-renewal --dry-run --test-cert --debug
  852. CERTBOT_OPTIONS=
  853. # ------------------------------
  854. # Environment Variables for SSRF Proxy
  855. # ------------------------------
  856. SSRF_HTTP_PORT=3128
  857. SSRF_COREDUMP_DIR=/var/spool/squid
  858. SSRF_REVERSE_PROXY_PORT=8194
  859. SSRF_SANDBOX_HOST=sandbox
  860. SSRF_DEFAULT_TIME_OUT=5
  861. SSRF_DEFAULT_CONNECT_TIME_OUT=5
  862. SSRF_DEFAULT_READ_TIME_OUT=5
  863. SSRF_DEFAULT_WRITE_TIME_OUT=5
  864. # ------------------------------
  865. # docker env var for specifying vector db type at startup
  866. # (based on the vector db type, the corresponding docker
  867. # compose profile will be used)
  868. # if you want to use unstructured, add ',unstructured' to the end
  869. # ------------------------------
  870. COMPOSE_PROFILES=${VECTOR_STORE:-weaviate}
  871. # ------------------------------
  872. # Docker Compose Service Expose Host Port Configurations
  873. # ------------------------------
  874. EXPOSE_NGINX_PORT=80
  875. EXPOSE_NGINX_SSL_PORT=443
  876. # ----------------------------------------------------------------------------
  877. # ModelProvider & Tool Position Configuration
  878. # Used to specify the model providers and tools that can be used in the app.
  879. # ----------------------------------------------------------------------------
  880. # Pin, include, and exclude tools
  881. # Use comma-separated values with no spaces between items.
  882. # Example: POSITION_TOOL_PINS=bing,google
  883. POSITION_TOOL_PINS=
  884. POSITION_TOOL_INCLUDES=
  885. POSITION_TOOL_EXCLUDES=
  886. # Pin, include, and exclude model providers
  887. # Use comma-separated values with no spaces between items.
  888. # Example: POSITION_PROVIDER_PINS=openai,openllm
  889. POSITION_PROVIDER_PINS=
  890. POSITION_PROVIDER_INCLUDES=
  891. POSITION_PROVIDER_EXCLUDES=
  892. # CSP https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
  893. CSP_WHITELIST=
  894. # Enable or disable create tidb service job
  895. CREATE_TIDB_SERVICE_JOB_ENABLED=false
  896. # Maximum number of submitted thread count in a ThreadPool for parallel node execution
  897. MAX_SUBMIT_COUNT=100
  898. # The maximum number of top-k value for RAG.
  899. TOP_K_MAX_VALUE=10
  900. # ------------------------------
  901. # Plugin Daemon Configuration
  902. # ------------------------------
  903. DB_PLUGIN_DATABASE=dify_plugin
  904. EXPOSE_PLUGIN_DAEMON_PORT=5002
  905. PLUGIN_DAEMON_PORT=5002
  906. PLUGIN_DAEMON_KEY=lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi
  907. PLUGIN_DAEMON_URL=http://plugin_daemon:5002
  908. PLUGIN_MAX_PACKAGE_SIZE=52428800
  909. PLUGIN_PPROF_ENABLED=false
  910. PLUGIN_DEBUGGING_HOST=0.0.0.0
  911. PLUGIN_DEBUGGING_PORT=5003
  912. EXPOSE_PLUGIN_DEBUGGING_HOST=localhost
  913. EXPOSE_PLUGIN_DEBUGGING_PORT=5003
  914. # If this key is changed, DIFY_INNER_API_KEY in plugin_daemon service must also be updated or agent node will fail.
  915. PLUGIN_DIFY_INNER_API_KEY=QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1
  916. PLUGIN_DIFY_INNER_API_URL=http://api:5001
  917. ENDPOINT_URL_TEMPLATE=http://localhost/e/{hook_id}
  918. MARKETPLACE_ENABLED=true
  919. MARKETPLACE_API_URL=https://marketplace.dify.ai
  920. FORCE_VERIFYING_SIGNATURE=true
  921. PLUGIN_PYTHON_ENV_INIT_TIMEOUT=120
  922. PLUGIN_MAX_EXECUTION_TIMEOUT=600
  923. # PIP_MIRROR_URL=https://pypi.tuna.tsinghua.edu.cn/simple
  924. PIP_MIRROR_URL=
  925. # https://github.com/langgenius/dify-plugin-daemon/blob/main/.env.example
  926. # Plugin storage type, local aws_s3 tencent_cos azure_blob aliyun_oss volcengine_tos
  927. PLUGIN_STORAGE_TYPE=local
  928. PLUGIN_STORAGE_LOCAL_ROOT=/app/storage
  929. PLUGIN_WORKING_PATH=/app/storage/cwd
  930. PLUGIN_INSTALLED_PATH=plugin
  931. PLUGIN_PACKAGE_CACHE_PATH=plugin_packages
  932. PLUGIN_MEDIA_CACHE_PATH=assets
  933. # Plugin oss bucket
  934. PLUGIN_STORAGE_OSS_BUCKET=
  935. # Plugin oss s3 credentials
  936. PLUGIN_S3_USE_AWS=false
  937. PLUGIN_S3_USE_AWS_MANAGED_IAM=false
  938. PLUGIN_S3_ENDPOINT=
  939. PLUGIN_S3_USE_PATH_STYLE=false
  940. PLUGIN_AWS_ACCESS_KEY=
  941. PLUGIN_AWS_SECRET_KEY=
  942. PLUGIN_AWS_REGION=
  943. # Plugin oss azure blob
  944. PLUGIN_AZURE_BLOB_STORAGE_CONTAINER_NAME=
  945. PLUGIN_AZURE_BLOB_STORAGE_CONNECTION_STRING=
  946. # Plugin oss tencent cos
  947. PLUGIN_TENCENT_COS_SECRET_KEY=
  948. PLUGIN_TENCENT_COS_SECRET_ID=
  949. PLUGIN_TENCENT_COS_REGION=
  950. # Plugin oss aliyun oss
  951. PLUGIN_ALIYUN_OSS_REGION=
  952. PLUGIN_ALIYUN_OSS_ENDPOINT=
  953. PLUGIN_ALIYUN_OSS_ACCESS_KEY_ID=
  954. PLUGIN_ALIYUN_OSS_ACCESS_KEY_SECRET=
  955. PLUGIN_ALIYUN_OSS_AUTH_VERSION=v4
  956. PLUGIN_ALIYUN_OSS_PATH=
  957. # Plugin oss volcengine tos
  958. PLUGIN_VOLCENGINE_TOS_ENDPOINT=
  959. PLUGIN_VOLCENGINE_TOS_ACCESS_KEY=
  960. PLUGIN_VOLCENGINE_TOS_SECRET_KEY=
  961. PLUGIN_VOLCENGINE_TOS_REGION=
  962. # ------------------------------
  963. # OTLP Collector Configuration
  964. # ------------------------------
  965. ENABLE_OTEL=false
  966. OTLP_TRACE_ENDPOINT=
  967. OTLP_METRIC_ENDPOINT=
  968. OTLP_BASE_ENDPOINT=http://localhost:4318
  969. OTLP_API_KEY=
  970. OTEL_EXPORTER_OTLP_PROTOCOL=
  971. OTEL_EXPORTER_TYPE=otlp
  972. OTEL_SAMPLING_RATE=0.1
  973. OTEL_BATCH_EXPORT_SCHEDULE_DELAY=5000
  974. OTEL_MAX_QUEUE_SIZE=2048
  975. OTEL_MAX_EXPORT_BATCH_SIZE=512
  976. OTEL_METRIC_EXPORT_INTERVAL=60000
  977. OTEL_BATCH_EXPORT_TIMEOUT=10000
  978. OTEL_METRIC_EXPORT_TIMEOUT=30000
  979. # Prevent Clickjacking
  980. ALLOW_EMBED=false
  981. # Dataset queue monitor configuration
  982. QUEUE_MONITOR_THRESHOLD=200
  983. # You can configure multiple ones, separated by commas. eg: test1@dify.ai,test2@dify.ai
  984. QUEUE_MONITOR_ALERT_EMAILS=
  985. # Monitor interval in minutes, default is 30 minutes
  986. QUEUE_MONITOR_INTERVAL=30