跳转到主要内容

要求

这是测试环境部署或预发布环境部署的推荐配置。你可以根据自己的需求调整配置。
  • Kubernetes 集群
    • 1 个工作节点:4 CPU,16 GB RAM
  • 容器镜像仓库(插件)
    • AWS ECR(with AK/SK or IRSA)/ Azure ACR / Aliyun ACR (with AK/SK) / Tencent TCR (with AK/SK) / Dockerhub / Google Artifact Registry
  • 持久化存储
    • s3, azure-blob, aliyun-oss, google-storage, tencent-cos, volcengine-tos, huawei-obs
    • 100 GB 存储
  • Postgres 数据库
    • 版本 14+
    • 4 CPU,8 GB RAM
    • 至少 512G SSD
  • Redis 数据库
    • 版本 6+
    • 1 GB RAM
  • 向量数据库虚拟机 - Qdrant 单节点
    • 1 个虚拟机
    • 4 CPU,8 GB RAM
    • 100 GB 存储

部署

1. 获取 Helm 仓库信息

helm repo add dify https://langgenius.github.io/dify-helm
helm repo update
有关更多信息,请参阅 Dify Helm Chart

2. 保存 Helm Chart 值

  • 将 Helm chart 值保存到名为 values.yaml 的文件中。
  • 使用你的配置更新 values.yaml 文件。
  • 请将 #REPLACE_ME# 占位符替换为你的实际值。
  • 请将 “dify123456” 替换为你自己的值。
  • global.appSecretKeyenterprise.appSecretKey 必须不同。
###################################
# Please replace "dify123456" with your own value
###################################
global:
  appSecretKey: 'dify123456'
  innerApiKey: 'dify123456'
  consoleApiDomain: "console.dify.local"
  consoleWebDomain: "console.dify.local"
  serviceApiDomain: "api.dify.local"
  appApiDomain: "app.dify.local"
  appWebDomain: "app.dify.local"
  filesDomain: "upload.dify.local"
  enterpriseDomain: "enterprise.dify.local"
  # Trigger service domain (used by API/workers for trigger functionality; if empty, triggers may not work)
  triggerDomain: "trigger.dify.local"

ingress:
  enabled: true
  className: "nginx"
  annotations: {
    # set file upload size limit
    nginx.ingress.kubernetes.io/proxy-body-size: "15m"
  }

api:
  replicas: 3
  serverWorkerAmount: 1
worker:
  replicas: 3
  celeryWorkerAmount: 1
web:
  replicas: 1
sandbox:
  replicas: 1
enterpriseAudit:
  replicas: 1
enterprise:
  replicas: 1
  appSecretKey: "dify123456"
  adminAPIsSecretKeySalt: "dify123456"
  passwordEncryptionKey: "dify123456"
enterpriseFrontend:
  replicas: 1
ssrfProxy:
  replicas: 1
unstructured:
  replicas: 1
plugin_daemon:
  replicas: 1
plugin_controller:
  replicas: 1
plugin_connector:
  replicas: 1
plugin_manager:
  replicas: 1
gateway:
  replicas: 1

###################################
# Persistence Configration
###################################
persistence:
  type: "s3"
  s3:
    endpoint: "https://xxx.r2.cloudflarestorage.com"
    accessKey: "#REPLACE_ME#"
    secretKey: "#REPLACE_ME#"
    region: "us-east-1"
    bucketName: "your-bucket-name"
    addressType: ""
    useAwsManagedIam: false
    useAwsS3: true

###################################
# External database (Postgres/MySQL/TiDB) 配置
###################################
externalDatabase:
  enabled: false
  # postgres | mysql | tidb
  engine: "postgres"
  host: "localhost"

  # Default ports: postgres=5432, mysql=3306, tidb=4000
  # Note: when switching engine, remember to update port accordingly
  port: 5432

  # 全局数据库账号(默认使用)
  user: "postgres"
  password: "#REPLACE_ME#"

  timezone: "UTC"

  databases:
    dify: "dify"
    plugin_daemon: "dify_plugin_daemon"
    enterprise: "enterprise"
    audit: "audit"

  ###################################
  # Per-database credentials(可选)
  ###################################
  # 用于为每个数据库单独配置账号密码
  # 优先级高于全局 user/password
  # 如果为空,则回退使用全局账号
  # databaseCredentials:自 3.9.1 起可用(可选;覆盖上方的全局 user/password,留空则回退到全局值)。
  databaseCredentials:
    dify:
      user: ""
      password: ""
    enterprise:
      user: ""
      password: ""
    audit:
      user: ""
      password: ""
    plugin_daemon:
      user: ""
      password: ""

  dialectOptions:
    postgres:
      sslMode: "require"
      uriScheme: "postgresql"
      # extras: "options=-c search_path=your-schema -c your-other-option=xxx"
      extras: ""

    mysql:
      # MySQL/TiDB params, e.g. charset=utf8mb4&parseTime=true&loc=UTC
      params: "charset=utf8mb4&parseTime=true&loc=UTC"
      tls: false

###################################
# External Redis
###################################
externalRedis:
  enabled: true
  host: "#REPLACE_ME#"
  port: 6379
  username: ""
  password: "#REPLACE_ME#"
  useSSL: false

###################################
# External Qdrant
###################################
vectorDB:
  useExternal: true
  externalType: "qdrant"
  externalQdrant:
    endpoint: "http://your-qdrant-cluster-url.qdrant.tech/"
    apiKey: "#REPLACE_ME#"

imagePullSecrets: []

3. 配置 容器镜像仓库

4. 配置 Persistence Storage

5. 配置 External Database

6. 配置 External Redis

7. 配置 External Qdrant

8. 配置 Ingress Controller

9. 安装 Dify Helm Chart

helm upgrade -i dify -f values.yaml dify/dify

10. 验证安装结果

高级配置

1. 域名与 SSL 证书

2. 邮件服务提供商

3. 性能调优