# ------------------------------------------------------------------

# Essential defaults for Docker Compose deployments.

# Only include variables required for services to start.

#

# For a default deployment, copy this file to .env and run:

# docker compose up -d

#

# Optional and provider-specific variables live under docker/envs/.

# Copy an optional *.env.example file beside itself without the

# .example suffix when you need those advanced settings.

# Values in docker/.env take precedence over docker/envs/*.env files.

# ------------------------------------------------------------------

# Core service URLs

CONSOLE_API_URL=

CONSOLE_WEB_URL=

SERVICE_API_URL=

TRIGGER_URL=http://localhost

APP_API_URL=

APP_WEB_URL=

FILES_URL=

INTERNAL_FILES_URL=

ENDPOINT_URL_TEMPLATE=http://localhost/e/{hook_id}

NEXT_PUBLIC_SOCKET_URL=ws://localhost

# Runtime and security

LANG=C.UTF-8

LC_ALL=C.UTF-8

PYTHONIOENCODING=utf-8

UV_CACHE_DIR=/tmp/.uv-cache

# Leave empty to auto-generate a persistent key in the storage directory.

SECRET_KEY=

INIT_PASSWORD=

DEPLOY_ENV=PRODUCTION

CHECK_UPDATE_URL=https://updates.dify.ai

OPENAI_API_BASE=https://api.openai.com/v1

MIGRATION_ENABLED=true

FILES_ACCESS_TIMEOUT=300

# Remove `collaboration` from COMPOSE_PROFILES to stop the dedicated websocket service.

ENABLE_COLLABORATION_MODE=true

# Logging and server workers

LOG_LEVEL=INFO

LOG_OUTPUT_FORMAT=text

LOG_FILE=/app/logs/server.log

LOG_FILE_MAX_SIZE=20

LOG_FILE_BACKUP_COUNT=5

LOG_DATEFORMAT=%Y-%m-%d %H:%M:%S

LOG_TZ=UTC

DEBUG=false

FLASK_DEBUG=false

ENABLE_REQUEST_LOGGING=False

DIFY_BIND_ADDRESS=0.0.0.0

DIFY_PORT=5001

SERVER_WORKER_AMOUNT=1

SERVER_WORKER_CLASS=gevent

SERVER_WORKER_CONNECTIONS=10

API_WEBSOCKET_WORKER_CLASS=geventwebsocket.gunicorn.workers.GeventWebSocketWorker

API_WEBSOCKET_WORKER_CONNECTIONS=1000

API_WEBSOCKET_GUNICORN_TIMEOUT=360

GUNICORN_TIMEOUT=360

CELERY_WORKER_CLASS=

CELERY_WORKER_AMOUNT=4

CELERY_AUTO_SCALE=false

CELERY_MAX_WORKERS=

CELERY_MIN_WORKERS=

COMPOSE_WORKER_HEALTHCHECK_DISABLED=true

COMPOSE_WORKER_HEALTHCHECK_INTERVAL=30s

COMPOSE_WORKER_HEALTHCHECK_TIMEOUT=30s

# Database

DB_TYPE=postgresql

DB_USERNAME=postgres

DB_PASSWORD=difyai123456

DB_HOST=db_postgres

DB_PORT=5432

DB_DATABASE=dify

SQLALCHEMY_POOL_SIZE=30

SQLALCHEMY_MAX_OVERFLOW=10

SQLALCHEMY_POOL_RECYCLE=3600

SQLALCHEMY_ECHO=false

SQLALCHEMY_POOL_PRE_PING=false

SQLALCHEMY_POOL_USE_LIFO=false

SQLALCHEMY_POOL_TIMEOUT=30

SQLALCHEMY_POOL_RESET_ON_RETURN=rollback

PGDATA=/var/lib/postgresql/data/pgdata

POSTGRES_MAX_CONNECTIONS=200

POSTGRES_SHARED_BUFFERS=128MB

POSTGRES_WORK_MEM=4MB

POSTGRES_MAINTENANCE_WORK_MEM=64MB

POSTGRES_EFFECTIVE_CACHE_SIZE=4096MB

POSTGRES_STATEMENT_TIMEOUT=0

POSTGRES_IDLE_IN_TRANSACTION_SESSION_TIMEOUT=0

# Redis and Celery

REDIS_HOST=redis

REDIS_PORT=6379

REDIS_USERNAME=

REDIS_PASSWORD=difyai123456

REDIS_USE_SSL=false

REDIS_SSL_CERT_REQS=CERT_NONE

REDIS_SSL_CA_CERTS=

REDIS_SSL_CERTFILE=

REDIS_SSL_KEYFILE=

REDIS_DB=0

REDIS_KEY_PREFIX=

REDIS_MAX_CONNECTIONS=

REDIS_RETRY_RETRIES=3

REDIS_RETRY_BACKOFF_BASE=1.0

REDIS_RETRY_BACKOFF_CAP=10.0

REDIS_SOCKET_TIMEOUT=5.0

REDIS_SOCKET_CONNECT_TIMEOUT=5.0

REDIS_HEALTH_CHECK_INTERVAL=30

CELERY_BROKER_URL=redis://:difyai123456@redis:6379/1

CELERY_BACKEND=redis

BROKER_USE_SSL=false

CELERY_TASK_ANNOTATIONS=null

EVENT_BUS_REDIS_URL=

EVENT_BUS_REDIS_CHANNEL_TYPE=pubsub

EVENT_BUS_REDIS_USE_CLUSTERS=false

EVENT_BUS_LISTENER_JOIN_TIMEOUT_MS=2000

# Web and app limits

WEB_API_CORS_ALLOW_ORIGINS=*

CONSOLE_CORS_ALLOW_ORIGINS=*

COOKIE_DOMAIN=

NEXT_PUBLIC_COOKIE_DOMAIN=

NEXT_PUBLIC_BATCH_CONCURRENCY=5

API_SENTRY_DSN=

API_SENTRY_TRACES_SAMPLE_RATE=1.0

API_SENTRY_PROFILES_SAMPLE_RATE=1.0

WEB_SENTRY_DSN=

AMPLITUDE_API_KEY=

TEXT_GENERATION_TIMEOUT_MS=60000

CSP_WHITELIST=

ALLOW_EMBED=false

ALLOW_INLINE_STYLES=false

ALLOW_UNSAFE_DATA_SCHEME=false

TOP_K_MAX_VALUE=10

INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH=4000

LOOP_NODE_MAX_COUNT=100

MAX_TOOLS_NUM=10

MAX_PARALLEL_LIMIT=10

MAX_ITERATIONS_NUM=99

MAX_TREE_DEPTH=50

ENABLE_WEBSITE_JINAREADER=true

ENABLE_WEBSITE_FIRECRAWL=true

ENABLE_WEBSITE_WATERCRAWL=true

NEXT_PUBLIC_ENABLE_SINGLE_DOLLAR_LATEX=false

EXPERIMENTAL_ENABLE_VINEXT=false

# Storage and default vector store

STORAGE_TYPE=opendal

OPENDAL_SCHEME=fs

OPENDAL_FS_ROOT=storage

VECTOR_STORE=weaviate

VECTOR_INDEX_NAME_PREFIX=Vector_index

WEAVIATE_ENDPOINT=http://weaviate:8080

WEAVIATE_API_KEY=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih

WEAVIATE_GRPC_ENDPOINT=grpc://weaviate:50051

WEAVIATE_TOKENIZATION=word

WEAVIATE_PERSISTENCE_DATA_PATH=/var/lib/weaviate

WEAVIATE_QUERY_DEFAULTS_LIMIT=25

WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED=true

WEAVIATE_DEFAULT_VECTORIZER_MODULE=none

WEAVIATE_CLUSTER_HOSTNAME=node1

WEAVIATE_AUTHENTICATION_APIKEY_ENABLED=true

WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih

WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED=true

WEAVIATE_DISABLE_TELEMETRY=false

WEAVIATE_ENABLE_TOKENIZER_GSE=false

WEAVIATE_ENABLE_TOKENIZER_KAGOME_JA=false

WEAVIATE_ENABLE_TOKENIZER_KAGOME_KR=false

# Sandbox and SSRF proxy

CODE_EXECUTION_ENDPOINT=http://sandbox:8194

CODE_EXECUTION_API_KEY=dify-sandbox

CODE_EXECUTION_SSL_VERIFY=True

CODE_EXECUTION_POOL_MAX_CONNECTIONS=100

CODE_EXECUTION_POOL_MAX_KEEPALIVE_CONNECTIONS=20

CODE_EXECUTION_POOL_KEEPALIVE_EXPIRY=5.0

CODE_EXECUTION_CONNECT_TIMEOUT=10

CODE_EXECUTION_READ_TIMEOUT=60

CODE_EXECUTION_WRITE_TIMEOUT=10

SANDBOX_API_KEY=dify-sandbox

SANDBOX_GIN_MODE=release

SANDBOX_WORKER_TIMEOUT=15

SANDBOX_ENABLE_NETWORK=true

SANDBOX_HTTP_PROXY=http://ssrf_proxy:3128

SANDBOX_HTTPS_PROXY=http://ssrf_proxy:3128

SANDBOX_PORT=8194

PIP_MIRROR_URL=

SSRF_PROXY_HTTP_URL=http://ssrf_proxy:3128

SSRF_PROXY_HTTPS_URL=http://ssrf_proxy:3128

SSRF_HTTP_PORT=3128

SSRF_COREDUMP_DIR=/var/spool/squid

SSRF_REVERSE_PROXY_PORT=8194

SSRF_SANDBOX_HOST=sandbox

SSRF_DEFAULT_TIME_OUT=5

SSRF_DEFAULT_CONNECT_TIME_OUT=5

SSRF_DEFAULT_READ_TIME_OUT=5

SSRF_DEFAULT_WRITE_TIME_OUT=5

SSRF_POOL_MAX_CONNECTIONS=100

SSRF_POOL_MAX_KEEPALIVE_CONNECTIONS=20

SSRF_POOL_KEEPALIVE_EXPIRY=5.0

# Plugin daemon

DB_PLUGIN_DATABASE=dify_plugin

EXPOSE_PLUGIN_DAEMON_PORT=5002

PLUGIN_DAEMON_PORT=5002

PLUGIN_DAEMON_KEY=lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi

PLUGIN_DAEMON_URL=http://plugin_daemon:5002

PLUGIN_MAX_PACKAGE_SIZE=52428800

PLUGIN_MODEL_SCHEMA_CACHE_TTL=3600

PLUGIN_PPROF_ENABLED=false

PLUGIN_DEBUGGING_HOST=0.0.0.0

PLUGIN_DEBUGGING_PORT=5003

EXPOSE_PLUGIN_DEBUGGING_HOST=localhost

EXPOSE_PLUGIN_DEBUGGING_PORT=5003

PLUGIN_DIFY_INNER_API_KEY=QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1

PLUGIN_DIFY_INNER_API_URL=http://api:5001

FORCE_VERIFYING_SIGNATURE=true

PLUGIN_STDIO_BUFFER_SIZE=1024

PLUGIN_STDIO_MAX_BUFFER_SIZE=5242880

PLUGIN_PYTHON_ENV_INIT_TIMEOUT=120

PLUGIN_MAX_EXECUTION_TIMEOUT=600

PLUGIN_STORAGE_TYPE=local

PLUGIN_STORAGE_LOCAL_ROOT=/app/storage

PLUGIN_WORKING_PATH=/app/storage/cwd

PLUGIN_INSTALLED_PATH=plugin

PLUGIN_PACKAGE_CACHE_PATH=plugin_packages

PLUGIN_MEDIA_CACHE_PATH=assets

PLUGIN_STORAGE_OSS_BUCKET=

PLUGIN_SENTRY_ENABLED=false

PLUGIN_SENTRY_DSN=

MARKETPLACE_ENABLED=true

MARKETPLACE_API_URL=https://marketplace.dify.ai

MARKETPLACE_URL=

# Nginx and Docker Compose

NGINX_SERVER_NAME=_

NGINX_HTTPS_ENABLED=false

NGINX_PORT=80

NGINX_SSL_PORT=443

NGINX_SSL_CERT_FILENAME=dify.crt

NGINX_SSL_CERT_KEY_FILENAME=dify.key

NGINX_SSL_PROTOCOLS=TLSv1.2 TLSv1.3

NGINX_WORKER_PROCESSES=auto

NGINX_CLIENT_MAX_BODY_SIZE=100M

NGINX_KEEPALIVE_TIMEOUT=65

NGINX_PROXY_READ_TIMEOUT=3600s

NGINX_PROXY_SEND_TIMEOUT=3600s

NGINX_ENABLE_CERTBOT_CHALLENGE=false

NGINX_SOCKET_IO_UPSTREAM=api_websocket:5001

EXPOSE_NGINX_PORT=80

EXPOSE_NGINX_SSL_PORT=443

COMPOSE_PROFILES=${VECTOR_STORE:-weaviate},${DB_TYPE:-postgresql},collaboration