|
|
|
|
@ -411,7 +411,7 @@ services:
|
|
|
|
|
|
|
|
|
|
# API service
|
|
|
|
|
api:
|
|
|
|
|
image: langgenius/dify-api:0.15.0
|
|
|
|
|
image: akiyu303/lefeng-api:latest
|
|
|
|
|
restart: always
|
|
|
|
|
extra_hosts:
|
|
|
|
|
- "host.docker.internal:host-gateway"
|
|
|
|
|
@ -437,7 +437,7 @@ services:
|
|
|
|
|
# worker service
|
|
|
|
|
# The Celery worker for processing the queue.
|
|
|
|
|
worker:
|
|
|
|
|
image: langgenius/dify-api:0.15.0
|
|
|
|
|
image: akiyu303/lefeng-api:latest
|
|
|
|
|
restart: always
|
|
|
|
|
environment:
|
|
|
|
|
# Use the shared environment variables.
|
|
|
|
|
@ -459,7 +459,7 @@ services:
|
|
|
|
|
|
|
|
|
|
# Frontend web application.
|
|
|
|
|
web:
|
|
|
|
|
image: langgenius/dify-web:0.15.0
|
|
|
|
|
image: akiyu303/lefeng-web:latest
|
|
|
|
|
restart: always
|
|
|
|
|
environment:
|
|
|
|
|
CONSOLE_API_URL: ${CONSOLE_API_URL:-}
|
|
|
|
|
@ -491,7 +491,7 @@ services:
|
|
|
|
|
volumes:
|
|
|
|
|
- ./volumes/db/data:/var/lib/postgresql/data
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: [ 'CMD', 'pg_isready' ]
|
|
|
|
|
test: ["CMD", "pg_isready"]
|
|
|
|
|
interval: 1s
|
|
|
|
|
timeout: 3s
|
|
|
|
|
retries: 30
|
|
|
|
|
@ -508,7 +508,7 @@ services:
|
|
|
|
|
# Set the redis password when startup redis server.
|
|
|
|
|
command: redis-server --requirepass ${REDIS_PASSWORD:-difyai123456}
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: [ 'CMD', 'redis-cli', 'ping' ]
|
|
|
|
|
test: ["CMD", "redis-cli", "ping"]
|
|
|
|
|
|
|
|
|
|
# The DifySandbox
|
|
|
|
|
sandbox:
|
|
|
|
|
@ -528,7 +528,7 @@ services:
|
|
|
|
|
volumes:
|
|
|
|
|
- ./volumes/sandbox/dependencies:/dependencies
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: [ 'CMD', 'curl', '-f', 'http://localhost:8194/health' ]
|
|
|
|
|
test: ["CMD", "curl", "-f", "http://localhost:8194/health"]
|
|
|
|
|
networks:
|
|
|
|
|
- ssrf_proxy_network
|
|
|
|
|
|
|
|
|
|
@ -541,7 +541,7 @@ services:
|
|
|
|
|
volumes:
|
|
|
|
|
- ./ssrf_proxy/squid.conf.template:/etc/squid/squid.conf.template
|
|
|
|
|
- ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh
|
|
|
|
|
entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]
|
|
|
|
|
entrypoint: ["sh", "-c", "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh"]
|
|
|
|
|
environment:
|
|
|
|
|
# pls clearly modify the squid env vars to fit your network environment.
|
|
|
|
|
HTTP_PORT: ${SSRF_HTTP_PORT:-3128}
|
|
|
|
|
@ -570,8 +570,8 @@ services:
|
|
|
|
|
- CERTBOT_EMAIL=${CERTBOT_EMAIL}
|
|
|
|
|
- CERTBOT_DOMAIN=${CERTBOT_DOMAIN}
|
|
|
|
|
- CERTBOT_OPTIONS=${CERTBOT_OPTIONS:-}
|
|
|
|
|
entrypoint: [ '/docker-entrypoint.sh' ]
|
|
|
|
|
command: [ 'tail', '-f', '/dev/null' ]
|
|
|
|
|
entrypoint: ["/docker-entrypoint.sh"]
|
|
|
|
|
command: ["tail", "-f", "/dev/null"]
|
|
|
|
|
|
|
|
|
|
# The nginx reverse proxy.
|
|
|
|
|
# used for reverse proxying the API service and Web service.
|
|
|
|
|
@ -588,7 +588,7 @@ services:
|
|
|
|
|
- ./volumes/certbot/conf/live:/etc/letsencrypt/live # cert dir (with certbot container)
|
|
|
|
|
- ./volumes/certbot/conf:/etc/letsencrypt
|
|
|
|
|
- ./volumes/certbot/www:/var/www/html
|
|
|
|
|
entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]
|
|
|
|
|
entrypoint: ["sh", "-c", "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh"]
|
|
|
|
|
environment:
|
|
|
|
|
NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
|
|
|
|
|
NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false}
|
|
|
|
|
@ -610,8 +610,8 @@ services:
|
|
|
|
|
- api
|
|
|
|
|
- web
|
|
|
|
|
ports:
|
|
|
|
|
- '${EXPOSE_NGINX_PORT:-80}:${NGINX_PORT:-80}'
|
|
|
|
|
- '${EXPOSE_NGINX_SSL_PORT:-443}:${NGINX_SSL_PORT:-443}'
|
|
|
|
|
- "${EXPOSE_NGINX_PORT:-80}:${NGINX_PORT:-80}"
|
|
|
|
|
- "${EXPOSE_NGINX_SSL_PORT:-443}:${NGINX_SSL_PORT:-443}"
|
|
|
|
|
|
|
|
|
|
# The TiDB vector store.
|
|
|
|
|
# For production use, please refer to https://github.com/pingcap/tidb-docker-compose
|
|
|
|
|
@ -627,7 +627,7 @@ services:
|
|
|
|
|
weaviate:
|
|
|
|
|
image: semitechnologies/weaviate:1.19.0
|
|
|
|
|
profiles:
|
|
|
|
|
- ''
|
|
|
|
|
- ""
|
|
|
|
|
- weaviate
|
|
|
|
|
restart: always
|
|
|
|
|
volumes:
|
|
|
|
|
@ -709,7 +709,7 @@ services:
|
|
|
|
|
volumes:
|
|
|
|
|
- ./volumes/pgvector/data:/var/lib/postgresql/data
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: [ 'CMD', 'pg_isready' ]
|
|
|
|
|
test: ["CMD", "pg_isready"]
|
|
|
|
|
interval: 1s
|
|
|
|
|
timeout: 3s
|
|
|
|
|
retries: 30
|
|
|
|
|
@ -731,7 +731,7 @@ services:
|
|
|
|
|
volumes:
|
|
|
|
|
- ./volumes/pgvecto_rs/data:/var/lib/postgresql/data
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: [ 'CMD', 'pg_isready' ]
|
|
|
|
|
test: ["CMD", "pg_isready"]
|
|
|
|
|
interval: 1s
|
|
|
|
|
timeout: 3s
|
|
|
|
|
retries: 30
|
|
|
|
|
@ -764,7 +764,7 @@ services:
|
|
|
|
|
OB_SYS_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
|
|
|
|
OB_TENANT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
|
|
|
|
|
OB_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
|
|
|
|
|
OB_SERVER_IP: '127.0.0.1'
|
|
|
|
|
OB_SERVER_IP: "127.0.0.1"
|
|
|
|
|
|
|
|
|
|
# Oracle vector database
|
|
|
|
|
oracle:
|
|
|
|
|
@ -796,7 +796,7 @@ services:
|
|
|
|
|
- ./volumes/milvus/etcd:/etcd
|
|
|
|
|
command: etcd -advertise-client-urls=http://127.0.0.1:2379 -listen-client-urls http://0.0.0.0:2379 --data-dir /etcd
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: [ 'CMD', 'etcdctl', 'endpoint', 'health' ]
|
|
|
|
|
test: ["CMD", "etcdctl", "endpoint", "health"]
|
|
|
|
|
interval: 30s
|
|
|
|
|
timeout: 20s
|
|
|
|
|
retries: 3
|
|
|
|
|
@ -815,7 +815,7 @@ services:
|
|
|
|
|
- ./volumes/milvus/minio:/minio_data
|
|
|
|
|
command: minio server /minio_data --console-address ":9001"
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: [ 'CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live' ]
|
|
|
|
|
test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
|
|
|
|
|
interval: 30s
|
|
|
|
|
timeout: 20s
|
|
|
|
|
retries: 3
|
|
|
|
|
@ -827,7 +827,7 @@ services:
|
|
|
|
|
image: milvusdb/milvus:v2.5.0-beta
|
|
|
|
|
profiles:
|
|
|
|
|
- milvus
|
|
|
|
|
command: [ 'milvus', 'run', 'standalone' ]
|
|
|
|
|
command: ["milvus", "run", "standalone"]
|
|
|
|
|
environment:
|
|
|
|
|
ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}
|
|
|
|
|
MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}
|
|
|
|
|
@ -835,7 +835,7 @@ services:
|
|
|
|
|
volumes:
|
|
|
|
|
- ./volumes/milvus/milvus:/var/lib/milvus
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: [ 'CMD', 'curl', '-f', 'http://localhost:9091/healthz' ]
|
|
|
|
|
test: ["CMD", "curl", "-f", "http://localhost:9091/healthz"]
|
|
|
|
|
interval: 30s
|
|
|
|
|
start_period: 90s
|
|
|
|
|
timeout: 20s
|
|
|
|
|
@ -920,18 +920,18 @@ services:
|
|
|
|
|
node.name: dify-es0
|
|
|
|
|
discovery.type: single-node
|
|
|
|
|
xpack.license.self_generated.type: basic
|
|
|
|
|
xpack.security.enabled: 'true'
|
|
|
|
|
xpack.security.enrollment.enabled: 'false'
|
|
|
|
|
xpack.security.http.ssl.enabled: 'false'
|
|
|
|
|
xpack.security.enabled: "true"
|
|
|
|
|
xpack.security.enrollment.enabled: "false"
|
|
|
|
|
xpack.security.http.ssl.enabled: "false"
|
|
|
|
|
ports:
|
|
|
|
|
- ${ELASTICSEARCH_PORT:-9200}:9200
|
|
|
|
|
deploy:
|
|
|
|
|
resources:
|
|
|
|
|
limits:
|
|
|
|
|
memory: 2g
|
|
|
|
|
entrypoint: [ 'sh', '-c', "sh /docker-entrypoint-mount.sh" ]
|
|
|
|
|
entrypoint: ["sh", "-c", "sh /docker-entrypoint-mount.sh"]
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: [ 'CMD', 'curl', '-s', 'http://localhost:9200/_cluster/health?pretty' ]
|
|
|
|
|
test: ["CMD", "curl", "-s", "http://localhost:9200/_cluster/health?pretty"]
|
|
|
|
|
interval: 30s
|
|
|
|
|
timeout: 10s
|
|
|
|
|
retries: 50
|
|
|
|
|
@ -949,17 +949,17 @@ services:
|
|
|
|
|
environment:
|
|
|
|
|
XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: d1a66dfd-c4d3-4a0a-8290-2abcb83ab3aa
|
|
|
|
|
NO_PROXY: localhost,127.0.0.1,elasticsearch,kibana
|
|
|
|
|
XPACK_SECURITY_ENABLED: 'true'
|
|
|
|
|
XPACK_SECURITY_ENROLLMENT_ENABLED: 'false'
|
|
|
|
|
XPACK_SECURITY_HTTP_SSL_ENABLED: 'false'
|
|
|
|
|
XPACK_FLEET_ISAIRGAPPED: 'true'
|
|
|
|
|
XPACK_SECURITY_ENABLED: "true"
|
|
|
|
|
XPACK_SECURITY_ENROLLMENT_ENABLED: "false"
|
|
|
|
|
XPACK_SECURITY_HTTP_SSL_ENABLED: "false"
|
|
|
|
|
XPACK_FLEET_ISAIRGAPPED: "true"
|
|
|
|
|
I18N_LOCALE: zh-CN
|
|
|
|
|
SERVER_PORT: '5601'
|
|
|
|
|
SERVER_PORT: "5601"
|
|
|
|
|
ELASTICSEARCH_HOSTS: http://elasticsearch:9200
|
|
|
|
|
ports:
|
|
|
|
|
- ${KIBANA_PORT:-5601}:5601
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: [ 'CMD-SHELL', 'curl -s http://localhost:5601 >/dev/null || exit 1' ]
|
|
|
|
|
test: ["CMD-SHELL", "curl -s http://localhost:5601 >/dev/null || exit 1"]
|
|
|
|
|
interval: 30s
|
|
|
|
|
timeout: 10s
|
|
|
|
|
retries: 3
|
|
|
|
|
|