.env.example 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667
  1. # ------------------------------
  2. # Environment Variables for API service & worker
  3. # ------------------------------
  4. # ------------------------------
  5. # Common Variables
  6. # ------------------------------
  7. # The backend URL of the console API,
  8. # used to concatenate the authorization callback.
  9. # If empty, it is the same domain.
  10. # Example: https://api.console.dify.ai
  11. CONSOLE_API_URL=
  12. # The front-end URL of the console web,
  13. # used to concatenate some front-end addresses and for CORS configuration use.
  14. # If empty, it is the same domain.
  15. # Example: https://console.dify.ai
  16. CONSOLE_WEB_URL=
  17. # Service API Url,
  18. # used to display Service API Base Url to the front-end.
  19. # If empty, it is the same domain.
  20. # Example: https://api.dify.ai
  21. SERVICE_API_URL=
  22. # WebApp API backend Url,
  23. # used to declare the back-end URL for the front-end API.
  24. # If empty, it is the same domain.
  25. # Example: https://api.app.dify.ai
  26. APP_API_URL=
  27. # WebApp Url,
  28. # used to display WebAPP API Base Url to the front-end.
  29. # If empty, it is the same domain.
  30. # Example: https://app.dify.ai
  31. APP_WEB_URL=
  32. # File preview or download Url prefix.
  33. # used to display File preview or download Url to the front-end or as Multi-model inputs;
  34. # Url is signed and has expiration time.
  35. FILES_URL=
  36. # ------------------------------
  37. # Server Configuration
  38. # ------------------------------
  39. # The log level for the application.
  40. # Supported values are `DEBUG`, `INFO`, `WARNING`, `ERROR`, `CRITICAL`
  41. LOG_LEVEL=INFO
  42. # Debug mode, default is false.
  43. # It is recommended to turn on this configuration for local development
  44. # to prevent some problems caused by monkey patch.
  45. DEBUG=false
  46. # Flask debug mode, it can output trace information at the interface when turned on,
  47. # which is convenient for debugging.
  48. FLASK_DEBUG=false
  49. # A secretkey that is used for securely signing the session cookie
  50. # and encrypting sensitive information on the database.
  51. # You can generate a strong key using `openssl rand -base64 42`.
  52. SECRET_KEY=sk-9f73s3ljTXVcMT3Blb3ljTqtsKiGHXVcMT3BlbkFJLK7U
  53. # Password for admin user initialization.
  54. # If left unset, admin user will not be prompted for a password
  55. # when creating the initial admin account.
  56. INIT_PASSWORD=
  57. # Deployment environment.
  58. # Supported values are `PRODUCTION`, `TESTING`. Default is `PRODUCTION`.
  59. # Testing environment. There will be a distinct color label on the front-end page,
  60. # indicating that this environment is a testing environment.
  61. DEPLOY_ENV=PRODUCTION
  62. # Whether to enable the version check policy.
  63. # If set to empty, https://updates.dify.ai will not be called for version check.
  64. CHECK_UPDATE_URL=https://updates.dify.ai
  65. # Used to change the OpenAI base address, default is https://api.openai.com/v1.
  66. # When OpenAI cannot be accessed in China, replace it with a domestic mirror address,
  67. # or when a local model provides OpenAI compatible API, it can be replaced.
  68. OPENAI_API_BASE=https://api.openai.com/v1
  69. # When enabled, migrations will be executed prior to application startup
  70. # and the application will start after the migrations have completed.
  71. MIGRATION_ENABLED=true
  72. # File Access Time specifies a time interval in seconds for the file to be accessed.
  73. # The default value is 300 seconds.
  74. FILES_ACCESS_TIMEOUT=300
  75. # The maximum number of active requests for the application, where 0 means unlimited, should be a non-negative integer.
  76. APP_MAX_ACTIVE_REQUESTS=0
  77. # ------------------------------
  78. # Container Startup Related Configuration
  79. # Only effective when starting with docker image or docker-compose.
  80. # ------------------------------
  81. # API service binding address, default: 0.0.0.0, i.e., all addresses can be accessed.
  82. DIFY_BIND_ADDRESS=0.0.0.0
  83. # API service binding port number, default 5001.
  84. DIFY_PORT=5001
  85. # The number of API server workers, i.e., the number of gevent workers.
  86. # Formula: number of cpu cores x 2 + 1
  87. # Reference: https://docs.gunicorn.org/en/stable/design.html#how-many-workers
  88. SERVER_WORKER_AMOUNT=
  89. # Defaults to gevent. If using windows, it can be switched to sync or solo.
  90. SERVER_WORKER_CLASS=
  91. # Similar to SERVER_WORKER_CLASS. Default is gevent.
  92. # If using windows, it can be switched to sync or solo.
  93. CELERY_WORKER_CLASS=
  94. # Request handling timeout. The default is 200,
  95. # it is recommended to set it to 360 to support a longer sse connection time.
  96. GUNICORN_TIMEOUT=360
  97. # The number of Celery workers. The default is 1, and can be set as needed.
  98. CELERY_WORKER_AMOUNT=
  99. # Flag indicating whether to enable autoscaling of Celery workers.
  100. #
  101. # Autoscaling is useful when tasks are CPU intensive and can be dynamically
  102. # allocated and deallocated based on the workload.
  103. #
  104. # When autoscaling is enabled, the maximum and minimum number of workers can
  105. # be specified. The autoscaling algorithm will dynamically adjust the number
  106. # of workers within the specified range.
  107. #
  108. # Default is false (i.e., autoscaling is disabled).
  109. #
  110. # Example:
  111. # CELERY_AUTO_SCALE=true
  112. CELERY_AUTO_SCALE=false
  113. # The maximum number of Celery workers that can be autoscaled.
  114. # This is optional and only used when autoscaling is enabled.
  115. # Default is not set.
  116. CELERY_MAX_WORKERS=
  117. # The minimum number of Celery workers that can be autoscaled.
  118. # This is optional and only used when autoscaling is enabled.
  119. # Default is not set.
  120. CELERY_MIN_WORKERS=
  121. # API Tool configuration
  122. API_TOOL_DEFAULT_CONNECT_TIMEOUT=10
  123. API_TOOL_DEFAULT_READ_TIMEOUT=60
  124. # ------------------------------
  125. # Database Configuration
  126. # The database uses PostgreSQL. Please use the public schema.
  127. # It is consistent with the configuration in the 'db' service below.
  128. # ------------------------------
  129. DB_USERNAME=postgres
  130. DB_PASSWORD=difyai123456
  131. DB_HOST=db
  132. DB_PORT=5432
  133. DB_DATABASE=dify
  134. # The size of the database connection pool.
  135. # The default is 30 connections, which can be appropriately increased.
  136. SQLALCHEMY_POOL_SIZE=30
  137. # Database connection pool recycling time, the default is 3600 seconds.
  138. SQLALCHEMY_POOL_RECYCLE=3600
  139. # Whether to print SQL, default is false.
  140. SQLALCHEMY_ECHO=false
  141. # ------------------------------
  142. # Redis Configuration
  143. # This Redis configuration is used for caching and for pub/sub during conversation.
  144. # ------------------------------
  145. REDIS_HOST=redis
  146. REDIS_PORT=6379
  147. REDIS_USERNAME=
  148. REDIS_PASSWORD=difyai123456
  149. REDIS_USE_SSL=false
  150. # ------------------------------
  151. # Celery Configuration
  152. # ------------------------------
  153. # Use redis as the broker, and redis db 1 for celery broker.
  154. # Format as follows: `redis://<redis_username>:<redis_password>@<redis_host>:<redis_port>/<redis_database>`
  155. # Example: redis://:difyai123456@redis:6379/1
  156. CELERY_BROKER_URL=redis://:difyai123456@redis:6379/1
  157. BROKER_USE_SSL=false
  158. # ------------------------------
  159. # CORS Configuration
  160. # Used to set the front-end cross-domain access policy.
  161. # ------------------------------
  162. # Specifies the allowed origins for cross-origin requests to the Web API,
  163. # e.g. https://dify.app or * for all origins.
  164. WEB_API_CORS_ALLOW_ORIGINS=*
  165. # Specifies the allowed origins for cross-origin requests to the console API,
  166. # e.g. https://cloud.dify.ai or * for all origins.
  167. CONSOLE_CORS_ALLOW_ORIGINS=*
  168. # ------------------------------
  169. # File Storage Configuration
  170. # ------------------------------
  171. # The type of storage to use for storing user files.
  172. # Supported values are `local` and `s3` and `azure-blob` and `google-storage` and `tencent-cos`,
  173. # Default: `local`
  174. STORAGE_TYPE=local
  175. # S3 Configuration
  176. # Whether to use AWS managed IAM roles for authenticating with the S3 service.
  177. # If set to false, the access key and secret key must be provided.
  178. S3_USE_AWS_MANAGED_IAM=false
  179. # The endpoint of the S3 service.
  180. S3_ENDPOINT=
  181. # The region of the S3 service.
  182. S3_REGION=us-east-1
  183. # The name of the S3 bucket to use for storing files.
  184. S3_BUCKET_NAME=difyai
  185. # The access key to use for authenticating with the S3 service.
  186. S3_ACCESS_KEY=
  187. # The secret key to use for authenticating with the S3 service.
  188. S3_SECRET_KEY=
  189. # Azure Blob Configuration
  190. # The name of the Azure Blob Storage account to use for storing files.
  191. AZURE_BLOB_ACCOUNT_NAME=difyai
  192. # The access key to use for authenticating with the Azure Blob Storage account.
  193. AZURE_BLOB_ACCOUNT_KEY=difyai
  194. # The name of the Azure Blob Storage container to use for storing files.
  195. AZURE_BLOB_CONTAINER_NAME=difyai-container
  196. # The URL of the Azure Blob Storage account.
  197. AZURE_BLOB_ACCOUNT_URL=https://<your_account_name>.blob.core.windows.net
  198. # Google Storage Configuration
  199. # The name of the Google Storage bucket to use for storing files.
  200. GOOGLE_STORAGE_BUCKET_NAME=your-bucket-name
  201. # The service account JSON key to use for authenticating with the Google Storage service.
  202. GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64=your-google-service-account-json-base64-string
  203. # The Alibaba Cloud OSS configurations,
  204. # only available when STORAGE_TYPE is `aliyun-oss`
  205. ALIYUN_OSS_BUCKET_NAME=your-bucket-name
  206. ALIYUN_OSS_ACCESS_KEY=your-access-key
  207. ALIYUN_OSS_SECRET_KEY=your-secret-key
  208. ALIYUN_OSS_ENDPOINT=https://oss-ap-southeast-1-internal.aliyuncs.com
  209. ALIYUN_OSS_REGION=ap-southeast-1
  210. ALIYUN_OSS_AUTH_VERSION=v4
  211. # Tencent COS Configuration
  212. # The name of the Tencent COS bucket to use for storing files.
  213. TENCENT_COS_BUCKET_NAME=your-bucket-name
  214. # The secret key to use for authenticating with the Tencent COS service.
  215. TENCENT_COS_SECRET_KEY=your-secret-key
  216. # The secret id to use for authenticating with the Tencent COS service.
  217. TENCENT_COS_SECRET_ID=your-secret-id
  218. # The region of the Tencent COS service.
  219. TENCENT_COS_REGION=your-region
  220. # The scheme of the Tencent COS service.
  221. TENCENT_COS_SCHEME=your-scheme
  222. # ------------------------------
  223. # Vector Database Configuration
  224. # ------------------------------
  225. # The type of vector store to use.
  226. # Supported values are `weaviate`, `qdrant`, `milvus`, `myscale`, `relyt`, `pgvector`, `chroma`, `opensearch`, `tidb_vector`, `oracle`, `tencent`.
  227. VECTOR_STORE=weaviate
  228. # The Weaviate endpoint URL. Only available when VECTOR_STORE is `weaviate`.
  229. WEAVIATE_ENDPOINT=http://weaviate:8080
  230. # The Weaviate API key.
  231. WEAVIATE_API_KEY=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih
  232. # The Qdrant endpoint URL. Only available when VECTOR_STORE is `qdrant`.
  233. QDRANT_URL=http://qdrant:6333
  234. # The Qdrant API key.
  235. QDRANT_API_KEY=difyai123456
  236. # The Qdrant client timeout setting.
  237. QDRANT_CLIENT_TIMEOUT=20
  238. # The Qdrant client enable gRPC mode.
  239. QDRANT_GRPC_ENABLED=false
  240. # The Qdrant server gRPC mode PORT.
  241. QDRANT_GRPC_PORT=6334
  242. # Milvus configuration Only available when VECTOR_STORE is `milvus`.
  243. # The milvus host.
  244. MILVUS_HOST=127.0.0.1
  245. # The milvus host.
  246. MILVUS_PORT=19530
  247. # The milvus username.
  248. MILVUS_USER=root
  249. # The milvus password.
  250. MILVUS_PASSWORD=Milvus
  251. # The milvus tls switch.
  252. MILVUS_SECURE=false
  253. # MyScale configuration, only available when VECTOR_STORE is `myscale`
  254. # For multi-language support, please set MYSCALE_FTS_PARAMS with referring to:
  255. # https://myscale.com/docs/en/text-search/#understanding-fts-index-parameters
  256. MYSCALE_HOST=myscale
  257. MYSCALE_PORT=8123
  258. MYSCALE_USER=default
  259. MYSCALE_PASSWORD=
  260. MYSCALE_DATABASE=dify
  261. MYSCALE_FTS_PARAMS=
  262. # pgvector configurations, only available when VECTOR_STORE is `pgvecto-rs or pgvector`
  263. PGVECTOR_HOST=pgvector
  264. PGVECTOR_PORT=5432
  265. PGVECTOR_USER=postgres
  266. PGVECTOR_PASSWORD=difyai123456
  267. PGVECTOR_DATABASE=dify
  268. # TiDB vector configurations, only available when VECTOR_STORE is `tidb`
  269. TIDB_VECTOR_HOST=tidb
  270. TIDB_VECTOR_PORT=4000
  271. TIDB_VECTOR_USER=xxx.root
  272. TIDB_VECTOR_PASSWORD=xxxxxx
  273. TIDB_VECTOR_DATABASE=dify
  274. # Chroma configuration, only available when VECTOR_STORE is `chroma`
  275. CHROMA_HOST=127.0.0.1
  276. CHROMA_PORT=8000
  277. CHROMA_TENANT=default_tenant
  278. CHROMA_DATABASE=default_database
  279. CHROMA_AUTH_PROVIDER=chromadb.auth.token_authn.TokenAuthClientProvider
  280. CHROMA_AUTH_CREDENTIALS=xxxxxx
  281. # Oracle configuration, only available when VECTOR_STORE is `oracle`
  282. ORACLE_HOST=oracle
  283. ORACLE_PORT=1521
  284. ORACLE_USER=dify
  285. ORACLE_PASSWORD=dify
  286. ORACLE_DATABASE=FREEPDB1
  287. # relyt configurations, only available when VECTOR_STORE is `relyt`
  288. RELYT_HOST=db
  289. RELYT_PORT=5432
  290. RELYT_USER=postgres
  291. RELYT_PASSWORD=difyai123456
  292. RELYT_DATABASE=postgres
  293. # open search configuration, only available when VECTOR_STORE is `opensearch`
  294. OPENSEARCH_HOST=opensearch
  295. OPENSEARCH_PORT=9200
  296. OPENSEARCH_USER=admin
  297. OPENSEARCH_PASSWORD=admin
  298. OPENSEARCH_SECURE=true
  299. # tencent vector configurations, only available when VECTOR_STORE is `tencent`
  300. TENCENT_VECTOR_DB_URL=http://127.0.0.1
  301. TENCENT_VECTOR_DB_API_KEY=dify
  302. TENCENT_VECTOR_DB_TIMEOUT=30
  303. TENCENT_VECTOR_DB_USERNAME=dify
  304. TENCENT_VECTOR_DB_DATABASE=dify
  305. TENCENT_VECTOR_DB_SHARD=1
  306. TENCENT_VECTOR_DB_REPLICAS=2
  307. # ------------------------------
  308. # Knowledge Configuration
  309. # ------------------------------
  310. # Upload file size limit, default 15M.
  311. UPLOAD_FILE_SIZE_LIMIT=15
  312. # The maximum number of files that can be uploaded at a time, default 5.
  313. UPLOAD_FILE_BATCH_LIMIT=5
  314. # ETl type, support: `dify`, `Unstructured`
  315. # `dify` Dify's proprietary file extraction scheme
  316. # `Unstructured` Unstructured.io file extraction scheme
  317. ETL_TYPE=dify
  318. # Unstructured API path, needs to be configured when ETL_TYPE is Unstructured.
  319. # For example: http://unstructured:8000/general/v0/general
  320. UNSTRUCTURED_API_URL=
  321. # ------------------------------
  322. # Multi-modal Configuration
  323. # ------------------------------
  324. # The format of the image sent when the multi-modal model is input,
  325. # the default is base64, optional url.
  326. # The delay of the call in url mode will be lower than that in base64 mode.
  327. # It is generally recommended to use the more compatible base64 mode.
  328. # If configured as url, you need to configure FILES_URL as an externally accessible address so that the multi-modal model can access the image.
  329. MULTIMODAL_SEND_IMAGE_FORMAT=base64
  330. # Upload image file size limit, default 10M.
  331. UPLOAD_IMAGE_FILE_SIZE_LIMIT=10
  332. # ------------------------------
  333. # Sentry Configuration
  334. # Used for application monitoring and error log tracking.
  335. # ------------------------------
  336. # API Service Sentry DSN address, default is empty, when empty,
  337. # all monitoring information is not reported to Sentry.
  338. # If not set, Sentry error reporting will be disabled.
  339. API_SENTRY_DSN=
  340. # API Service The reporting ratio of Sentry events, if it is 0.01, it is 1%.
  341. API_SENTRY_TRACES_SAMPLE_RATE=1.0
  342. # API Service The reporting ratio of Sentry profiles, if it is 0.01, it is 1%.
  343. API_SENTRY_PROFILES_SAMPLE_RATE=1.0
  344. # Web Service Sentry DSN address, default is empty, when empty,
  345. # all monitoring information is not reported to Sentry.
  346. # If not set, Sentry error reporting will be disabled.
  347. WEB_SENTRY_DSN=
  348. # ------------------------------
  349. # Notion Integration Configuration
  350. # Variables can be obtained by applying for Notion integration: https://www.notion.so/my-integrations
  351. # ------------------------------
  352. # Configure as "public" or "internal".
  353. # Since Notion's OAuth redirect URL only supports HTTPS,
  354. # if deploying locally, please use Notion's internal integration.
  355. NOTION_INTEGRATION_TYPE=public
  356. # Notion OAuth client secret (used for public integration type)
  357. NOTION_CLIENT_SECRET=
  358. # Notion OAuth client id (used for public integration type)
  359. NOTION_CLIENT_ID=
  360. # Notion internal integration secret.
  361. # If the value of NOTION_INTEGRATION_TYPE is "internal",
  362. # you need to configure this variable.
  363. NOTION_INTERNAL_SECRET=
  364. # ------------------------------
  365. # Mail related configuration
  366. # ------------------------------
  367. # Mail type, support: resend, smtp
  368. MAIL_TYPE=resend
  369. # Default send from email address, if not specified
  370. MAIL_DEFAULT_SEND_FROM=
  371. # API-Key for the Resend email provider, used when MAIL_TYPE is `resend`.
  372. RESEND_API_KEY=your-resend-api-key
  373. # SMTP server configuration, used when MAIL_TYPE is `smtp`
  374. SMTP_SERVER=
  375. SMTP_PORT=465
  376. SMTP_USERNAME=
  377. SMTP_PASSWORD=
  378. SMTP_USE_TLS=true
  379. SMTP_OPPORTUNISTIC_TLS=false
  380. # ------------------------------
  381. # Others Configuration
  382. # ------------------------------
  383. # Maximum length of segmentation tokens for indexing
  384. INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH=1000
  385. # Member invitation link valid time (hours),
  386. # Default: 72.
  387. INVITE_EXPIRY_HOURS=72
  388. # Reset password token valid time (hours),
  389. # Default: 24.
  390. RESET_PASSWORD_TOKEN_EXPIRY_HOURS=24
  391. # The sandbox service endpoint.
  392. CODE_EXECUTION_ENDPOINT=http://sandbox:8194
  393. CODE_MAX_NUMBER=9223372036854775807
  394. CODE_MIN_NUMBER=-9223372036854775808
  395. CODE_MAX_STRING_LENGTH=80000
  396. TEMPLATE_TRANSFORM_MAX_LENGTH=80000
  397. CODE_MAX_STRING_ARRAY_LENGTH=30
  398. CODE_MAX_OBJECT_ARRAY_LENGTH=30
  399. CODE_MAX_NUMBER_ARRAY_LENGTH=1000
  400. # SSRF Proxy server HTTP URL
  401. SSRF_PROXY_HTTP_URL=http://ssrf_proxy:3128
  402. # SSRF Proxy server HTTPS URL
  403. SSRF_PROXY_HTTPS_URL=http://ssrf_proxy:3128
  404. # ------------------------------
  405. # Environment Variables for db Service
  406. # ------------------------------
  407. PGUSER=${DB_USERNAME}
  408. # The password for the default postgres user.
  409. POSTGRES_PASSWORD=${DB_PASSWORD}
  410. # The name of the default postgres database.
  411. POSTGRES_DB=${DB_DATABASE}
  412. # postgres data directory
  413. PGDATA=/var/lib/postgresql/data/pgdata
  414. # ------------------------------
  415. # Environment Variables for sandbox Service
  416. # ------------------------------
  417. # The API key for the sandbox service
  418. SANDBOX_API_KEY=dify-sandbox
  419. # The mode in which the Gin framework runs
  420. SANDBOX_GIN_MODE=release
  421. # The timeout for the worker in seconds
  422. SANDBOX_WORKER_TIMEOUT=15
  423. # Enable network for the sandbox service
  424. SANDBOX_ENABLE_NETWORK=true
  425. # HTTP proxy URL for SSRF protection
  426. SANDBOX_HTTP_PROXY=http://ssrf_proxy:3128
  427. # HTTPS proxy URL for SSRF protection
  428. SANDBOX_HTTPS_PROXY=http://ssrf_proxy:3128
  429. # The port on which the sandbox service runs
  430. SANDBOX_PORT=8194
  431. # ------------------------------
  432. # Environment Variables for weaviate Service
  433. # (only used when VECTOR_STORE is weaviate)
  434. # ------------------------------
  435. WEAVIATE_PERSISTENCE_DATA_PATH='/var/lib/weaviate'
  436. WEAVIATE_QUERY_DEFAULTS_LIMIT=25
  437. WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED=true
  438. WEAVIATE_DEFAULT_VECTORIZER_MODULE=none
  439. WEAVIATE_CLUSTER_HOSTNAME=node1
  440. WEAVIATE_AUTHENTICATION_APIKEY_ENABLED=true
  441. WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih
  442. WEAVIATE_AUTHENTICATION_APIKEY_USERS=hello@dify.ai
  443. WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED=true
  444. WEAVIATE_AUTHORIZATION_ADMINLIST_USERS=hello@dify.ai
  445. # ------------------------------
  446. # Environment Variables for Chroma
  447. # (only used when VECTOR_STORE is chroma)
  448. # ------------------------------
  449. # Authentication credentials for Chroma server
  450. CHROMA_SERVER_AUTHN_CREDENTIALS=difyai123456
  451. # Authentication provider for Chroma server
  452. CHROMA_SERVER_AUTHN_PROVIDER=chromadb.auth.token_authn.TokenAuthenticationServerProvider
  453. # Persistence setting for Chroma server
  454. CHROMA_IS_PERSISTENT=TRUE
  455. # ------------------------------
  456. # Environment Variables for Oracle Service
  457. # (only used when VECTOR_STORE is Oracle)
  458. # ------------------------------
  459. ORACLE_PWD=Dify123456
  460. ORACLE_CHARACTERSET=AL32UTF8
  461. # ------------------------------
  462. # Environment Variables for milvus Service
  463. # (only used when VECTOR_STORE is milvus)
  464. # ------------------------------
  465. # ETCD configuration for auto compaction mode
  466. ETCD_AUTO_COMPACTION_MODE=revision
  467. # ETCD configuration for auto compaction retention in terms of number of revisions
  468. ETCD_AUTO_COMPACTION_RETENTION=1000
  469. # ETCD configuration for backend quota in bytes
  470. ETCD_QUOTA_BACKEND_BYTES=4294967296
  471. # ETCD configuration for the number of changes before triggering a snapshot
  472. ETCD_SNAPSHOT_COUNT=50000
  473. # MinIO access key for authentication
  474. MINIO_ACCESS_KEY=minioadmin
  475. # MinIO secret key for authentication
  476. MINIO_SECRET_KEY=minioadmin
  477. # ETCD service endpoints
  478. ETCD_ENDPOINTS=etcd:2379
  479. # MinIO service address
  480. MINIO_ADDRESS=minio:9000
  481. # Enable or disable security authorization
  482. MILVUS_AUTHORIZATION_ENABLED=true
  483. # ------------------------------
  484. # Environment Variables for pgvector / pgvector-rs Service
  485. # (only used when VECTOR_STORE is pgvector / pgvector-rs)
  486. # ------------------------------
  487. PGVECTOR_PGUSER=postgres
  488. # The password for the default postgres user.
  489. PGVECTOR_POSTGRES_PASSWORD=difyai123456
  490. # The name of the default postgres database.
  491. PGVECTOR_POSTGRES_DB=dify
  492. # postgres data directory
  493. PGVECTOR_PGDATA=/var/lib/postgresql/data/pgdata
  494. # ------------------------------
  495. # Environment Variables for opensearch
  496. # (only used when VECTOR_STORE is opensearch)
  497. # ------------------------------
  498. OPENSEARCH_DISCOVERY_TYPE=single-node
  499. OPENSEARCH_BOOTSTRAP_MEMORY_LOCK=true
  500. OPENSEARCH_JAVA_OPTS_MIN=512m
  501. OPENSEARCH_JAVA_OPTS_MAX=1024m
  502. OPENSEARCH_INITIAL_ADMIN_PASSWORD=Qazwsxedc!@#123
  503. OPENSEARCH_MEMLOCK_SOFT=-1
  504. OPENSEARCH_MEMLOCK_HARD=-1
  505. OPENSEARCH_NOFILE_SOFT=65536
  506. OPENSEARCH_NOFILE_HARD=65536
  507. # ------------------------------
  508. # Environment Variables for Nginx reverse proxy
  509. # ------------------------------
  510. NGINX_SERVER_NAME=_
  511. NGINX_HTTPS_ENABLED=false
  512. # HTTP port
  513. NGINX_PORT=80
  514. # SSL settings are only applied when HTTPS_ENABLED is true
  515. NGINX_SSL_PORT=443
  516. # if HTTPS_ENABLED is true, you're required to add your own SSL certificates/keys to the `./nginx/ssl` directory
  517. # and modify the env vars below accordingly.
  518. NGINX_SSL_CERT_FILENAME=dify.crt
  519. NGINX_SSL_CERT_KEY_FILENAME=dify.key
  520. NGINX_SSL_PROTOCOLS=TLSv1.1 TLSv1.2 TLSv1.3
  521. # Nginx performance tuning
  522. NGINX_WORKER_PROCESSES=auto
  523. NGINX_CLIENT_MAX_BODY_SIZE=15M
  524. NGINX_KEEPALIVE_TIMEOUT=65
  525. # Proxy settings
  526. NGINX_PROXY_READ_TIMEOUT=3600s
  527. NGINX_PROXY_SEND_TIMEOUT=3600s
  528. NGINX_ENABLE_CERTBOT_CHALLENGE=false
  529. # ------------------------------
  530. # Certbot Configuration
  531. # ------------------------------
  532. # Email address (required to get certificates from Let's Encrypt)
  533. CERTBOT_EMAIL=your_email@example.com
  534. # Domain name
  535. CERTBOT_DOMAIN=your_domain.com
  536. # certbot command options
  537. # i.e: --force-renewal --dry-run --test-cert --debug
  538. CERTBOT_OPTIONS=
  539. # ------------------------------
  540. # Environment Variables for SSRF Proxy
  541. # ------------------------------
  542. SSRF_HTTP_PORT=3128
  543. SSRF_COREDUMP_DIR=/var/spool/squid
  544. SSRF_REVERSE_PROXY_PORT=8194
  545. SSRF_SANDBOX_HOST=sandbox
  546. # ------------------------------
  547. # docker env var for specifying vector db type at startup
  548. # (based on the vector db type, the corresponding docker
  549. # compose profile will be used)
  550. # if you want to use unstructured, add ',unstructured' to the end
  551. # ------------------------------
  552. COMPOSE_PROFILES=${VECTOR_STORE:-weaviate}
  553. # ------------------------------
  554. # Docker Compose Service Expose Host Port Configurations
  555. # ------------------------------
  556. EXPOSE_NGINX_PORT=80
  557. EXPOSE_NGINX_SSL_PORT=443