提交

docker/docker-compose.yaml

@@ -604,6 +604,10 @@ services:
     volumes:
       # Mount the storage directory to the container, for storing user files.
       - ./volumes/app/storage:/app/api/storage
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     networks:
       - ssrf_proxy_network
       - default
@@ -631,6 +635,10 @@ services:
     volumes:
       # Mount the storage directory to the container, for storing user files.
       - ./volumes/app/storage:/app/api/storage
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     networks:
       - ssrf_proxy_network
       - default
@@ -650,6 +658,10 @@ services:
         condition: service_healthy
       redis:
         condition: service_started
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     networks:
       - ssrf_proxy_network
       - default
@@ -680,6 +692,10 @@ services:
       ENABLE_WEBSITE_JINAREADER: ${ENABLE_WEBSITE_JINAREADER:-true}
       ENABLE_WEBSITE_FIRECRAWL: ${ENABLE_WEBSITE_FIRECRAWL:-true}
       ENABLE_WEBSITE_WATERCRAWL: ${ENABLE_WEBSITE_WATERCRAWL:-true}
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
   # The postgres database.
   db:
     image: postgres:15-alpine
@@ -697,6 +713,10 @@ services:
                -c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}'
     volumes:
       - ./volumes/db/data:/var/lib/postgresql/data
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       test:
         [
@@ -722,6 +742,10 @@ services:
     volumes:
       # Mount the redis data directory to the container.
       - ./volumes/redis/data:/data
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     # Set the redis password when startup redis server.
     command: redis-server --requirepass ${REDIS_PASSWORD:-difyai123456}
     healthcheck:
@@ -746,14 +770,19 @@ services:
       HTTP_PROXY: ${SANDBOX_HTTP_PROXY:-http://ssrf_proxy:3128}
       HTTPS_PROXY: ${SANDBOX_HTTPS_PROXY:-http://ssrf_proxy:3128}
       SANDBOX_PORT: ${SANDBOX_PORT:-8194}
-      PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
+      PIP_MIRROR_URL: ${PIP_MIRROR_URL:-https://pypi.tuna.tsinghua.edu.cn/simple}
     volumes:
       - ./volumes/sandbox/dependencies:/dependencies
       - ./volumes/sandbox/conf:/conf
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8194/health"]
     networks:
       - ssrf_proxy_network
+      - default
 
   # plugin daemon
   plugin_daemon:
@@ -777,7 +806,7 @@ services:
       PLUGIN_MAX_EXECUTION_TIMEOUT: ${PLUGIN_MAX_EXECUTION_TIMEOUT:-600}
       PLUGIN_STDIO_BUFFER_SIZE: ${PLUGIN_STDIO_BUFFER_SIZE:-1024}
       PLUGIN_STDIO_MAX_BUFFER_SIZE: ${PLUGIN_STDIO_MAX_BUFFER_SIZE:-5242880}
-      PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
+      PIP_MIRROR_URL: ${PIP_MIRROR_URL:-https://pypi.tuna.tsinghua.edu.cn/simple}
       PLUGIN_STORAGE_TYPE: ${PLUGIN_STORAGE_TYPE:-local}
       PLUGIN_STORAGE_LOCAL_ROOT: ${PLUGIN_STORAGE_LOCAL_ROOT:-/app/storage}
       PLUGIN_INSTALLED_PATH: ${PLUGIN_INSTALLED_PATH:-plugin}
@@ -812,6 +841,10 @@ services:
       - "${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}:${PLUGIN_DEBUGGING_PORT:-5003}"
     volumes:
       - ./volumes/plugin_daemon:/app/storage
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     depends_on:
       db:
         condition: service_healthy
@@ -838,6 +871,10 @@ services:
       REVERSE_PROXY_PORT: ${SSRF_REVERSE_PROXY_PORT:-8194}
       SANDBOX_HOST: ${SSRF_SANDBOX_HOST:-sandbox}
       SANDBOX_PORT: ${SANDBOX_PORT:-8194}
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     networks:
       - ssrf_proxy_network
       - default
@@ -859,6 +896,10 @@ services:
       - CERTBOT_EMAIL=${CERTBOT_EMAIL}
       - CERTBOT_DOMAIN=${CERTBOT_DOMAIN}
       - CERTBOT_OPTIONS=${CERTBOT_OPTIONS:-}
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     entrypoint: ["/docker-entrypoint.sh"]
     command: ["tail", "-f", "/dev/null"]
 
@@ -900,6 +941,10 @@ services:
       NGINX_PROXY_SEND_TIMEOUT: ${NGINX_PROXY_SEND_TIMEOUT:-3600s}
       NGINX_ENABLE_CERTBOT_CHALLENGE: ${NGINX_ENABLE_CERTBOT_CHALLENGE:-false}
       CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-}
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     depends_on:
       - api
       - web
@@ -930,6 +975,10 @@ services:
       AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
       AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
       AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
 
   # Qdrant vector store.
   # (if used, you need to set VECTOR_STORE to qdrant in the api & worker service.)
@@ -942,6 +991,10 @@ services:
       - ./volumes/qdrant:/qdrant/storage
     environment:
       QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456}
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
 
   # The Couchbase vector store.
   couchbase-server:
@@ -968,6 +1021,10 @@ services:
     command: sh -c "/opt/couchbase/init/init-cbserver.sh"
     volumes:
       - ./volumes/couchbase/data:/opt/couchbase/var/lib/couchbase/data
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       # ensure bucket was created before proceeding
       test:
@@ -1001,6 +1058,10 @@ services:
       - ./volumes/pgvector/data:/var/lib/postgresql/data
       - ./pgvector/docker-entrypoint.sh:/docker-entrypoint.sh
     entrypoint: ["/docker-entrypoint.sh"]
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       test: ["CMD", "pg_isready"]
       interval: 1s
@@ -1025,6 +1086,10 @@ services:
       - ./vastbase/data:/home/vastbase/data
       - ./vastbase/backup:/home/vastbase/backup
       - ./vastbase/backup_log:/home/vastbase/backup_log
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       test: ["CMD", "pg_isready"]
       interval: 1s
@@ -1047,6 +1112,10 @@ services:
       PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}
     volumes:
       - ./volumes/pgvecto_rs/data:/var/lib/postgresql/data
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       test: ["CMD", "pg_isready"]
       interval: 1s
@@ -1065,6 +1134,10 @@ services:
       CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456}
       CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
       IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
 
   # OceanBase vector database
   oceanbase:
@@ -1086,6 +1159,10 @@ services:
       MODE: mini
     ports:
       - "${OCEANBASE_VECTOR_PORT:-2881}:2881"
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       test:
         [
@@ -1111,6 +1188,10 @@ services:
     environment:
       ORACLE_PWD: ${ORACLE_PWD:-Dify123456}
       ORACLE_CHARACTERSET: ${ORACLE_CHARACTERSET:-AL32UTF8}
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
 
   # Milvus vector database services
   etcd:
@@ -1126,6 +1207,10 @@ services:
     volumes:
       - ./volumes/milvus/etcd:/etcd
     command: etcd -advertise-client-urls=http://127.0.0.1:2379 -listen-client-urls http://0.0.0.0:2379 --data-dir /etcd
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       test: ["CMD", "etcdctl", "endpoint", "health"]
       interval: 30s
@@ -1145,6 +1230,10 @@ services:
     volumes:
       - ./volumes/milvus/minio:/minio_data
     command: minio server /minio_data --console-address ":9001"
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
       interval: 30s
@@ -1165,6 +1254,10 @@ services:
       common.security.authorizationEnabled: ${MILVUS_AUTHORIZATION_ENABLED:-true}
     volumes:
       - ./volumes/milvus/milvus:/var/lib/milvus
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:9091/healthz"]
       interval: 30s
@@ -1200,6 +1293,10 @@ services:
         hard: ${OPENSEARCH_NOFILE_HARD:-65536}
     volumes:
       - ./volumes/opensearch/data:/usr/share/opensearch/data
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     networks:
       - opensearch-net
 
@@ -1212,6 +1309,10 @@ services:
       OPENSEARCH_HOSTS: '["https://opensearch:9200"]'
     volumes:
       - ./volumes/opensearch/opensearch_dashboards.yml:/usr/share/opensearch-dashboards/config/opensearch_dashboards.yml
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     networks:
       - opensearch-net
     depends_on:
@@ -1231,6 +1332,10 @@ services:
       GS_DB: ${OPENGAUSS_DATABASE:-dify}
     volumes:
       - ./volumes/opengauss/data:/var/lib/opengauss/data
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       test: ["CMD-SHELL", "netstat -lntp | grep tcp6 > /dev/null 2>&1"]
       interval: 10s
@@ -1251,6 +1356,10 @@ services:
       - ./volumes/myscale/data:/var/lib/clickhouse
       - ./volumes/myscale/log:/var/log/clickhouse-server
       - ./volumes/myscale/config/users.d/custom_users_config.xml:/etc/clickhouse-server/users.d/custom_users_config.xml
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     ports:
       - ${MYSCALE_PORT:-8123}:${MYSCALE_PORT:-8123}
 
@@ -1263,6 +1372,10 @@ services:
     restart: always
     volumes:
       - ./volumes/matrixone/data:/mo-data
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     ports:
       - ${MATRIXONE_PORT:-6001}:${MATRIXONE_PORT:-6001}
 
@@ -1290,6 +1403,10 @@ services:
       xpack.security.http.ssl.enabled: "false"
     ports:
       - ${ELASTICSEARCH_PORT:-9200}:9200
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     deploy:
       resources:
         limits:
@@ -1324,6 +1441,10 @@ services:
       ELASTICSEARCH_HOSTS: http://elasticsearch:9200
     ports:
       - ${KIBANA_PORT:-5601}:5601
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
     healthcheck:
       test: ["CMD-SHELL", "curl -s http://localhost:5601 >/dev/null || exit 1"]
       interval: 30s
@@ -1339,6 +1460,10 @@ services:
     restart: always
     volumes:
       - ./volumes/unstructured:/app/data
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 114.114.114.114
 
 networks:
   # create a network between sandbox, api and ssrf_proxy, and can not access outside.