69 lines
3.3 KiB
Bash
69 lines
3.3 KiB
Bash
# ------------------------------------------------------------------
|
|
# KnowledgeFS integration baseline (optional `knowledge-fs` profile).
|
|
# Copy to knowledge-fs.env only when validating the internal service.
|
|
# The Dify product flag remains disabled and no public proxy route is added.
|
|
# ------------------------------------------------------------------
|
|
|
|
# Dedicated KnowledgeFS persistence. Do not point this at Dify's application database or reuse
|
|
# Dataset/Document tables. Apply KnowledgeFS migrations through its controlled migration runner.
|
|
DATABASE_URL=
|
|
KNOWLEDGE_DATABASE_REPOSITORIES=on
|
|
KNOWLEDGE_DOCUMENT_COMPILATION_RUNTIME=on
|
|
|
|
# KnowledgeFS model calls go to Dify's inner API. Dify then resolves the workspace's active
|
|
# provider/model credentials through ModelManager and invokes plugin-daemon internally.
|
|
DIFY_INNER_API_URL=http://api:5001
|
|
DIFY_INNER_API_KEY=
|
|
DIFY_DATASOURCE_RUNTIME_MAX_RESPONSE_BYTES=8388608
|
|
DIFY_DATASOURCE_RUNTIME_REQUEST_TIMEOUT_MS=60000
|
|
DIFY_MODEL_RUNTIME_MAX_RESPONSE_BYTES=8388608
|
|
DIFY_MODEL_RUNTIME_REQUEST_TIMEOUT_MS=60000
|
|
|
|
# Capability v2 stays unselected until a public-only current/previous JWKS is provided and
|
|
# deployment readiness has been verified. KnowledgeFS must never receive Dify's private key.
|
|
KNOWLEDGE_FS_CAPABILITY_V2_ENABLED=false
|
|
KNOWLEDGE_FS_CAPABILITY_V2_PUBLIC_JWKS=
|
|
KNOWLEDGE_FS_CAPABILITY_V2_ISSUER=dify-control-plane
|
|
KNOWLEDGE_FS_CAPABILITY_V2_AUDIENCE=knowledge-fs
|
|
# These process-level flags only declare that the integrated runtime is deployed. Product traffic
|
|
# remains fail-closed until Dify's cutover handshake creates the KFS durable per-Workspace
|
|
# activation. The legacy flag is an emergency all-Workspace freeze, not the rollout allowlist.
|
|
KNOWLEDGE_INTEGRATED_MODE_ENABLED=false
|
|
KNOWLEDGE_LEGACY_ACL_READ_ONLY=false
|
|
# P9 final deployment profile. Keep false throughout P8 rollout and the P9 zero-traffic window.
|
|
# Set true only after every affected Workspace is ready for cleanup and the reviewed removal
|
|
# deployment is authorized; this permanently removes legacy API-key/ACL route registration.
|
|
KNOWLEDGE_LEGACY_AUTHORIZATION_REMOVED=false
|
|
|
|
# Direct upload and Research streaming remain disabled until Capability v2, object-storage
|
|
# lifecycle, exact browser origins, and tenant smoke evidence are all ready.
|
|
KNOWLEDGE_DIRECT_UPLOAD_ENABLED=off
|
|
KNOWLEDGE_DIRECT_UPLOAD_ALLOWED_ORIGINS=
|
|
KNOWLEDGE_DIRECT_UPLOAD_MAX_FILE_BYTES=107374182400
|
|
KNOWLEDGE_DIRECT_UPLOAD_MULTIPART_PART_BYTES=16777216
|
|
KNOWLEDGE_DIRECT_UPLOAD_MULTIPART_THRESHOLD_BYTES=67108864
|
|
KNOWLEDGE_DIRECT_UPLOAD_SMALL_FALLBACK_MAX_BYTES=8388608
|
|
KNOWLEDGE_DIRECT_UPLOAD_PRESIGN_TTL_SECONDS=600
|
|
KNOWLEDGE_DIRECT_UPLOAD_SESSION_TTL_MS=3600000
|
|
KNOWLEDGE_DIRECT_UPLOAD_CLEANUP_INTERVAL_MS=60000
|
|
KNOWLEDGE_DIRECT_UPLOAD_CLEANUP_BATCH_SIZE=100
|
|
KNOWLEDGE_DIRECT_UPLOAD_CLEANUP_STALE_MS=300000
|
|
KNOWLEDGE_DIRECT_UPLOAD_INCOMPLETE_MULTIPART_DAYS=2
|
|
KNOWLEDGE_DIRECT_STREAM_ENABLED=off
|
|
KNOWLEDGE_DIRECT_STREAM_ALLOWED_ORIGINS=
|
|
KNOWLEDGE_DIRECT_STREAM_MAX_CONNECTION_MS=300000
|
|
|
|
# Dedicated S3-compatible object bucket.
|
|
MINIO_ENDPOINT=
|
|
MINIO_BUCKET=knowledge-fs
|
|
MINIO_ACCESS_KEY=
|
|
MINIO_SECRET_KEY=
|
|
MINIO_REGION=us-east-1
|
|
|
|
# Complex-document parser reachable from the default Compose network or an external endpoint.
|
|
UNSTRUCTURED_API_URL=
|
|
UNSTRUCTURED_API_KEY=
|
|
|
|
# Destructive processing stays disabled in this deployment-only baseline.
|
|
DURABLE_DELETION_ENABLED=off
|