mirror of
https://github.com/langgenius/dify.git
synced 2026-11-11 05:41:09 +08:00
-LAN-andautofix-ci[bot]
53ea596fc7
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
31 lines
1.5 KiB
Plaintext
31 lines
1.5 KiB
Plaintext
# Defaults for ssrf_proxy. Copy this file to ssrf-proxy.env to customize it.
|
|
# Edit the settings below in the copy; docker/.env takes precedence.
|
|
# Optional application settings are commented to retain their application defaults.
|
|
|
|
# SSRF_PROXY_HTTP_URL=http://ssrf_proxy:3128
|
|
# SSRF_PROXY_HTTPS_URL=http://ssrf_proxy:3128
|
|
SSRF_HTTP_PORT=${SSRF_HTTP_PORT:-3128}
|
|
SSRF_COREDUMP_DIR=${SSRF_COREDUMP_DIR:-/var/spool/squid}
|
|
# Comma-separated CIDR ranges that the SSRF proxy should allow even when they
|
|
# resolve to private, loopback, link-local, or otherwise non-public addresses.
|
|
# Leave empty (the default) to keep the deny-by-default policy. Required when
|
|
# Dify needs to reach internal HTTP endpoints (e.g. an internal API on
|
|
# http://172.21.x.x) from an HTTP Request node, a tool, or a plugin.
|
|
# Example: 172.21.0.0/16,10.0.0.0/8
|
|
SSRF_PROXY_ALLOW_PRIVATE_IPS=${SSRF_PROXY_ALLOW_PRIVATE_IPS:-}
|
|
# Comma-separated domain suffixes that the SSRF proxy should allow even when
|
|
# they would otherwise resolve to a denied range. Leave empty to keep the
|
|
# deny-by-default policy.
|
|
SSRF_PROXY_ALLOW_PRIVATE_DOMAINS=${SSRF_PROXY_ALLOW_PRIVATE_DOMAINS:-}
|
|
# SSRF_DEFAULT_TIME_OUT=5
|
|
# SSRF_DEFAULT_CONNECT_TIME_OUT=5
|
|
# SSRF_DEFAULT_READ_TIME_OUT=5
|
|
# SSRF_DEFAULT_WRITE_TIME_OUT=5
|
|
# SSRF_POOL_MAX_CONNECTIONS=100
|
|
# SSRF_POOL_MAX_KEEPALIVE_CONNECTIONS=20
|
|
# SSRF_POOL_KEEPALIVE_EXPIRY=5.0
|
|
|
|
# Container variable mappings; keep these expressions unchanged in the copy.
|
|
COREDUMP_DIR=${SSRF_COREDUMP_DIR:-/var/spool/squid}
|
|
HTTP_PORT=${SSRF_HTTP_PORT:-3128}
|