# app/dify > 使用 Pigsty 托管的 PostgreSQL 部署 Dify AI 应用开发平台 --- LLMS 索引： [llms.txt](/llms.txt) --- `app/dify` 配置模板提供了自建 Dify AI 应用开发平台的参考配置，使用 Pigsty 托管的 PostgreSQL 和 pgvector 作为向量存储。 更多细节，请参考 **[Dify 部署教程](/docs/app/dify/)** -------- ## 配置概览 - 配置名称： `app/dify` - 节点数量： 单节点 - 配置说明：使用 Pigsty 托管的 PostgreSQL 部署 Dify - 适用系统：`el8`, `el9`, `el10`, `d12`, `d13`, `u22`, `u24`, `u26` - 适用架构：`x86_64`, `aarch64` - 相关配置：[`meta`](/docs/conf/meta/) 启用方式： ```bash ./configure -c app/dify [-i ] ``` -------- ## 配置内容 源文件地址：[`pigsty/conf/app/dify.yml`](https://github.com/pgsty/pigsty/blob/main/conf/app/dify.yml) ```yaml --- #==============================================================# # File : dify.yml # Desc : pigsty config for running 1-node dify app # Ctime : 2025-02-24 # Mtime : 2026-07-09 # Docs : https://pigsty.io/docs/app/dify # License : Apache-2.0 @ https://pigsty.io/docs/about/license/ # Copyright : 2018-2026 Ruohang Feng / Vonng (rh@vonng.com) #==============================================================# # Last Verified Dify Version: v1.15.0 on 2026-07-09 # tutorial: https://pigsty.io/docs/app/dify # how to use this template: # # curl -fsSL https://repo.pigsty.io/get | bash; cd ~/pigsty # ./bootstrap # prepare local repo & ansible # ./configure -c app/dify # use this dify config template # vi pigsty.yml # IMPORTANT: CHANGE CREDENTIALS!! # ./deploy.yml # install pigsty & pgsql # ./docker.yml # install docker & docker-compose # ./app.yml # install dify with docker-compose # # To replace domain name: # sed -ie 's/dify.pigsty/dify.pigsty.cc/g' pigsty.yml all: children: # the dify application dify: hosts: { 10.10.10.10: {} } vars: app: dify # specify app name to be installed (in the apps) apps: # define all applications dify: # app name, should have corresponding ~/pigsty/app/dify folder file: # data directory to be created - { path: /data/dify ,state: directory ,mode: 0755 } conf: # override /opt/dify/.env config file # change domain, mirror, proxy, secret key NGINX_SERVER_NAME: dify.pigsty # A secret key for signing and encryption, gen with `openssl rand -base64 42` (CHANGE PASSWORD!) SECRET_KEY: sk-somerandomkey # expose DIFY nginx service with port 5001 by default DIFY_PORT: 5001 # where to store dify files? the default is ./volume, we'll use another volume created above DIFY_DATA: /data/dify # enable the upstream websocket sidecar, while keeping PostgreSQL/pgvector external COMPOSE_PROFILES: collaboration NEXT_PUBLIC_SOCKET_URL: ws://dify.pigsty TRIGGER_URL: http://dify.pigsty ENDPOINT_URL_TEMPLATE: http://dify.pigsty/e/{hook_id} # proxy and mirror settings #PIP_MIRROR_URL: https://pypi.tuna.tsinghua.edu.cn/simple #SANDBOX_HTTP_PROXY: http://10.10.10.10:12345 #SANDBOX_HTTPS_PROXY: http://10.10.10.10:12345 # database credentials DB_TYPE: postgresql DB_USERNAME: dify DB_PASSWORD: difyai123456 DB_HOST: 10.10.10.10 DB_PORT: 5432 DB_DATABASE: dify DB_SSL_MODE: disable VECTOR_STORE: pgvector PGVECTOR_HOST: 10.10.10.10 PGVECTOR_PORT: 5432 PGVECTOR_USER: dify PGVECTOR_PASSWORD: difyai123456 PGVECTOR_DATABASE: dify PGVECTOR_MIN_CONNECTION: 2 PGVECTOR_MAX_CONNECTION: 10 # optional MinIO/S3 storage, disabled by default to avoid touching backup MinIO #STORAGE_TYPE: s3 #S3_ENDPOINT: http://10.10.10.10:9000 #S3_BUCKET_NAME: dify #S3_ACCESS_KEY: dify #S3_SECRET_KEY: S3User.Dify #S3_REGION: us-east-1 #S3_ADDRESS_STYLE: path pg-meta: hosts: { 10.10.10.10: { pg_seq: 1, pg_role: primary } } vars: pg_cluster: pg-meta pg_extensions: [ pgvector ] pg_users: - { name: dify ,password: difyai123456 ,pgbouncer: true ,roles: [ dbrole_admin ] ,superuser: true ,comment: dify superuser } pg_databases: - { name: dify ,owner: dify ,extensions: [ { name: vector } ] ,comment: dify main database } - { name: dify_plugin ,owner: dify ,comment: dify plugin daemon database } pg_hba_rules: - { user: dify ,db: all ,addr: 172.16.0.0/12 ,auth: pwd ,title: 'allow dify access from local docker networks' } pg_crontab: [ '00 01 * * * /pg/bin/pg-backup full' ] # make a full backup every 1am infra: { hosts: { 10.10.10.10: { infra_seq: 1 } } } etcd: { hosts: { 10.10.10.10: { etcd_seq: 1 } }, vars: { etcd_cluster: etcd } } #minio: { hosts: { 10.10.10.10: { minio_seq: 1 } }, vars: { minio_cluster: minio } } vars: # global variables version: v4.5.0 # pigsty version string admin_ip: 10.10.10.10 # admin node ip address region: default # upstream mirror region: default|china|europe node_tune: oltp # node tuning specs: oltp,olap,tiny,crit pg_conf: oltp.yml # pgsql tuning specs: {oltp,olap,tiny,crit}.yml docker_enabled: true # enable docker on app group #docker_registry_mirrors: ["https://docker.1panel.live","https://docker.1ms.run","https://docker.xuanyuan.me","https://registry-1.docker.io"] proxy_env: # global proxy env when downloading packages & pull docker images no_proxy: "localhost,127.0.0.1,10.0.0.0/8,192.168.0.0/16,*.pigsty,*.aliyun.com,mirrors.*,*.tsinghua.edu.cn" #http_proxy: 127.0.0.1:12345 # add your proxy env here for downloading packages or pull images #https_proxy: 127.0.0.1:12345 # usually the proxy is format as http://user:pass@proxy.xxx.com #all_proxy: 127.0.0.1:12345 infra_portal: # domain names and upstream servers home : { domain: i.pigsty } #minio : { domain: m.pigsty ,endpoint: "${admin_ip}:9001" ,scheme: https ,websocket: true } dify: # nginx server config for dify domain: dify.pigsty # REPLACE WITH YOUR OWN DOMAIN! endpoint: "10.10.10.10:5001" # dify service endpoint: IP:PORT websocket: true # add websocket support certbot: dify.pigsty # certbot cert name, apply with `make cert` repo_enabled: false node_repo_modules: node,infra,pgsql # Dify v1.15.0 is patched in app/dify/patches for PostgreSQL 18's built-in uuidv7(). pg_version: 18 #----------------------------------------------# # PASSWORD : https://pigsty.io/docs/setup/security/ #----------------------------------------------# grafana_admin_password: pigsty grafana_view_password: DBUser.Viewer pg_admin_password: DBUser.DBA pg_monitor_password: DBUser.Monitor pg_replication_password: DBUser.Replicator patroni_password: Patroni.API haproxy_admin_password: pigsty minio_secret_key: S3User.MinIO etcd_root_password: Etcd.Root ... ``` -------- ## 配置解读 `app/dify` 模板提供了 Dify AI 应用开发平台的一键部署方案，当前模板已按 Dify v1.15.0 验证。 **Dify 是什么**： - 开源的 LLM 应用开发平台 - 支持 RAG、Agent、Workflow 等 AI 应用模式 - 提供可视化的 Prompt 编排和应用构建界面 - 支持多种 LLM 后端（OpenAI、Claude、本地模型等） **关键特性**： - 使用 Pigsty 管理的 PostgreSQL 替代 Dify 自带的数据库 - 使用 pgvector 作为向量存储（替代 Weaviate/Qdrant） - 启用 `collaboration` Compose Profile 与 WebSocket 边车 - 支持 HTTPS 和自定义域名 - 数据持久化到独立目录 `/data/dify` **访问方式**： ```bash # 直接访问 Dify Web 界面 http://:5001 # 或通过 Nginx 代理 https://dify.pigsty ``` **适用场景**： - 企业内部 AI 应用开发平台 - RAG 知识库问答系统 - LLM 驱动的自动化工作流 - AI Agent 开发与部署 **注意事项**： - 必须修改 `SECRET_KEY`，使用 `openssl rand -base64 42` 生成 - 需要配置 LLM API 密钥（如 OpenAI API Key） - Docker 网络需要能访问 PostgreSQL（模板已为本机 Docker 网段配置 `172.16.0.0/12` HBA 规则） - 建议配置代理以加速 Python 包下载