Dify

# Log into your server
ssh root@<your-server-ip>

# If using key-based auth
ssh -i ~/.ssh/my-key root@<your-server-ip>

# Create and navigate to project directory
mkdir -p ~/apps/dify
cd ~/apps/dify

services:
  api:
    image: langgenius/dify-api:latest
    environment:
      - MODE=api
      - SECRET_KEY=<your-secret-key>
      - DB_USERNAME=postgres
      - DB_PASSWORD=<your-db-password>
      - DB_HOST=db
      - DB_PORT=5432
      - DB_DATABASE=dify
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - STORAGE_TYPE=local
      - STORAGE_LOCAL_PATH=/app/api/storage
      - VECTOR_STORE=weaviate
      - WEAVIATE_ENDPOINT=http://weaviate:8080
      - SANDBOX_API_KEY=<your-sandbox-key>
      - SANDBOX_HOST=http://sandbox:8194
    volumes:
      - dify_storage:/app/api/storage
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_started

  worker:
    image: langgenius/dify-api:latest
    environment:
      - MODE=worker
      - SECRET_KEY=<your-secret-key>
      - DB_USERNAME=postgres
      - DB_PASSWORD=<your-db-password>
      - DB_HOST=db
      - DB_PORT=5432
      - DB_DATABASE=dify
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - STORAGE_TYPE=local
      - STORAGE_LOCAL_PATH=/app/api/storage
      - VECTOR_STORE=weaviate
      - WEAVIATE_ENDPOINT=http://weaviate:8080
    volumes:
      - dify_storage:/app/api/storage
    restart: unless-stopped
    depends_on:
      - api

  web:
    image: langgenius/dify-web:latest
    environment:
      - CONSOLE_API_URL=
      - APP_API_URL=
    restart: unless-stopped

  nginx:
    image: nginx:latest
    ports:
      - "80:80"
    entrypoint: sh
    command:
      - -c
      - |
        cat > /etc/nginx/conf.d/default.conf << 'CONF'
        server {
          listen 80;
          client_max_body_size 15M;
          location /api { proxy_pass http://api:5001; proxy_set_header Host $$host; proxy_set_header X-Real-IP $$remote_addr; }
          location /console/api { proxy_pass http://api:5001; proxy_set_header Host $$host; }
          location /v1 { proxy_pass http://api:5001; proxy_set_header Host $$host; }
          location /files { proxy_pass http://api:5001; proxy_set_header Host $$host; }
          location / { proxy_pass http://web:3000; proxy_set_header Host $$host; }
        }
        CONF
        nginx -g 'daemon off;'
    restart: unless-stopped
    depends_on:
      - api
      - web

  db:
    image: postgres:15-alpine
    environment:
      - POSTGRES_USER=postgres
      - POSTGRES_PASSWORD=<your-db-password>
      - POSTGRES_DB=dify
    volumes:
      - dify_db:/var/lib/postgresql/data
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres -d dify"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s

  redis:
    image: redis:6-alpine
    volumes:
      - dify_redis:/data
    restart: unless-stopped

  weaviate:
    image: semitechnologies/weaviate:1.27.0
    environment:
      - QUERY_DEFAULTS_LIMIT=25
      - AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED=true
      - PERSISTENCE_DATA_PATH=/var/lib/weaviate
      - DEFAULT_VECTORIZER_MODULE=none
      - CLUSTER_HOSTNAME=node1
    volumes:
      - dify_weaviate:/var/lib/weaviate
    restart: unless-stopped

  sandbox:
    image: langgenius/dify-sandbox:latest
    environment:
      - API_KEY=<your-sandbox-key>
      - GIN_MODE=release
    restart: unless-stopped

volumes:
  dify_storage:
  dify_db:
  dify_redis:
  dify_weaviate:

# Deploy the application
docker compose up -d

# Check container health
docker compose ps

# Monitor logs
docker compose logs -f --tail=100

# Allow the application port through firewall
sudo ufw allow 80/tcp
sudo ufw reload

# Access your app at:
# http://your-server-ip:80