Files
dify/dify-agent/.example.env
Yunlu Wen 888bea9911 feat: ee agent sandbox support (#38528)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-07-10 03:56:55 +00:00

71 lines
3.3 KiB
Bash

# Dify Agent run server settings template.
# Mirrors dify_agent.server.settings.ServerSettings with the DIFY_AGENT_ prefix.
# This template intentionally covers the current run-server settings only.
# Redis
# Redis connection URL for run records and per-run event streams.
DIFY_AGENT_REDIS_URL=redis://localhost:6379/0
# Prefix for Redis run-record and event-stream keys.
DIFY_AGENT_REDIS_PREFIX=dify-agent
# Shutdown and retention
# Seconds to wait for active local runs during graceful shutdown before cancellation.
DIFY_AGENT_SHUTDOWN_GRACE_SECONDS=30
# Seconds to retain Redis run records and per-run event streams (default: 3 days).
DIFY_AGENT_RUN_RETENTION_SECONDS=259200
# Plugin daemon
# Base URL for the Dify plugin daemon used by local runs.
DIFY_AGENT_PLUGIN_DAEMON_URL=http://localhost:5002
# API key sent to the Dify plugin daemon.
DIFY_AGENT_PLUGIN_DAEMON_API_KEY=
# Dify API inner endpoints
# Base URL for Dify API inner endpoints used by Agent Stub config/file/drive requests.
DIFY_AGENT_INNER_API_URL=http://localhost:5001
# Must match API/worker INNER_API_KEY_FOR_PLUGIN, not the generic INNER_API_KEY.
DIFY_AGENT_INNER_API_KEY=
# Shell layer
# Shell backend used by the dify.shell layer: "shellctl" (default) or "enterprise".
DIFY_AGENT_SHELL_PROVIDER=shellctl
# shellctl provider: base URL for the shellctl server. Leave empty to disable shell layer use.
DIFY_AGENT_SHELLCTL_ENTRYPOINT=
# Optional bearer token sent to the shellctl server.
DIFY_AGENT_SHELLCTL_AUTH_TOKEN=
# enterprise provider: sandbox gateway endpoint. Leave empty to disable shell layer use.
DIFY_AGENT_ENTERPRISE_SANDBOX_GATEWAY_ENDPOINT=
# Optional X-Inner-Api-Key sent to the enterprise sandbox gateway.
DIFY_AGENT_ENTERPRISE_SANDBOX_GATEWAY_AUTH_TOKEN=
DIFY_AGENT_ENTERPRISE_SANDBOX_GATEWAY_TIMEOUT=30
DIFY_AGENT_ENTERPRISE_SANDBOX_PROXY_TIMEOUT=60
# Agent Stub
# Public Agent Stub URL reachable from shellctl-managed remote machines.
# Use http(s)://.../agent-stub for HTTP or grpc://host:port for gRPC.
# Leave empty to avoid injecting DIFY_AGENT_STUB_* into shell.run jobs.
DIFY_AGENT_STUB_API_BASE_URL=http://localhost:5050/agent-stub
# Optional bind override used only when DIFY_AGENT_STUB_API_BASE_URL uses grpc://.
DIFY_AGENT_STUB_GRPC_BIND_ADDRESS=
# Server-wide root secret used to derive Agent Stub JWE keys.
# This is security-sensitive: it derives the JWE encryption key for Agent Stub bearer tokens.
# Replace this development default in production.
# Generate one with: python -c 'import secrets; print(secrets.token_urlsafe(32))'
DIFY_AGENT_SERVER_SECRET_KEY=MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY
# Shared plugin-daemon HTTP client timeouts and limits.
# Plugin-daemon HTTP connect timeout in seconds.
DIFY_AGENT_PLUGIN_DAEMON_CONNECT_TIMEOUT=10
# Plugin-daemon HTTP read timeout in seconds.
DIFY_AGENT_PLUGIN_DAEMON_READ_TIMEOUT=600
# Plugin-daemon HTTP write timeout in seconds.
DIFY_AGENT_PLUGIN_DAEMON_WRITE_TIMEOUT=30
# Plugin-daemon HTTP connection-pool wait timeout in seconds.
DIFY_AGENT_PLUGIN_DAEMON_POOL_TIMEOUT=10
# Maximum total plugin-daemon HTTP connections.
DIFY_AGENT_PLUGIN_DAEMON_MAX_CONNECTIONS=100
# Maximum idle keep-alive plugin-daemon HTTP connections.
DIFY_AGENT_PLUGIN_DAEMON_MAX_KEEPALIVE_CONNECTIONS=20
# Keep-alive expiry in seconds for idle plugin-daemon HTTP connections.
DIFY_AGENT_PLUGIN_DAEMON_KEEPALIVE_EXPIRY=30