mirror of
https://github.com/kossakovsky/n8n-install.git
synced 2026-04-26 01:16:56 +00:00
9ce8689714
- Updated .env.example to remove deprecated DIFY_NGINX_PORT and streamline Dify application settings. - Changed reverse proxy port for Dify in Caddyfile from 80 to 8080 for consistency with new configuration. - Enhanced start_services.py with new functions to check Dify integration, clone the repository, and prepare the environment, ensuring proper setup and configuration of Dify services.
147 lines
3.6 KiB
Caddyfile
147 lines
3.6 KiB
Caddyfile
{
|
|
# Global options - works for both environments
|
|
email {$LETSENCRYPT_EMAIL}
|
|
}
|
|
|
|
# N8N
|
|
{$N8N_HOSTNAME} {
|
|
# For domains, Caddy will automatically use Let's Encrypt
|
|
# For localhost/port addresses, HTTPS won't be enabled
|
|
reverse_proxy n8n:5678
|
|
}
|
|
|
|
# Open WebUI
|
|
{$WEBUI_HOSTNAME} {
|
|
reverse_proxy open-webui:8080
|
|
}
|
|
|
|
# Flowise
|
|
{$FLOWISE_HOSTNAME} {
|
|
reverse_proxy flowise:3001
|
|
}
|
|
|
|
# Dify
|
|
{$DIFY_HOSTNAME} {
|
|
reverse_proxy dify-nginx:8080
|
|
}
|
|
|
|
# Langfuse
|
|
{$LANGFUSE_HOSTNAME} {
|
|
reverse_proxy langfuse-web:3000
|
|
}
|
|
|
|
# # Ollama API
|
|
# {$OLLAMA_HOSTNAME} {
|
|
# reverse_proxy ollama:11434
|
|
# }
|
|
|
|
# Supabase
|
|
{$SUPABASE_HOSTNAME} {
|
|
reverse_proxy kong:8000
|
|
}
|
|
|
|
# Grafana
|
|
{$GRAFANA_HOSTNAME} {
|
|
reverse_proxy grafana:3000
|
|
}
|
|
|
|
# Prometheus
|
|
{$PROMETHEUS_HOSTNAME} {
|
|
basic_auth {
|
|
{$PROMETHEUS_USERNAME} {$PROMETHEUS_PASSWORD_HASH}
|
|
}
|
|
reverse_proxy prometheus:9090
|
|
}
|
|
|
|
# Letta
|
|
{$LETTA_HOSTNAME} {
|
|
reverse_proxy letta:8283
|
|
}
|
|
|
|
# Weaviate
|
|
{$WEAVIATE_HOSTNAME} {
|
|
reverse_proxy weaviate:8080
|
|
}
|
|
|
|
# Qdrant
|
|
{$QDRANT_HOSTNAME} {
|
|
reverse_proxy qdrant:6333
|
|
}
|
|
|
|
# Neo4j
|
|
{$NEO4J_HOSTNAME} {
|
|
reverse_proxy neo4j:7474
|
|
}
|
|
|
|
# Neo4j Bolt Protocol (wss)
|
|
https://{$NEO4J_HOSTNAME}:7687 {
|
|
reverse_proxy neo4j:7687
|
|
}
|
|
|
|
import /etc/caddy/addons/*.conf
|
|
|
|
# # SearXNG
|
|
{$SEARXNG_HOSTNAME} {
|
|
@protected not remote_ip 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 100.64.0.0/10
|
|
|
|
basic_auth @protected {
|
|
{$SEARXNG_USERNAME} {$SEARXNG_PASSWORD_HASH}
|
|
}
|
|
|
|
encode zstd gzip
|
|
|
|
@api {
|
|
path /config
|
|
path /healthz
|
|
path /stats/errors
|
|
path /stats/checker
|
|
}
|
|
@search {
|
|
path /search
|
|
}
|
|
@imageproxy {
|
|
path /image_proxy
|
|
}
|
|
@static {
|
|
path /static/*
|
|
}
|
|
|
|
header {
|
|
# CSP (https://content-security-policy.com)
|
|
Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self' https://github.com/searxng/searxng/issues/new; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self' https://overpass-api.de; img-src * data:; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com;"
|
|
# Disable some browser features
|
|
Permissions-Policy "accelerometer=(),camera=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),payment=(),usb=()"
|
|
# Set referrer policy
|
|
Referrer-Policy "no-referrer"
|
|
# Force clients to use HTTPS
|
|
Strict-Transport-Security "max-age=31536000"
|
|
# Prevent MIME type sniffing from the declared Content-Type
|
|
X-Content-Type-Options "nosniff"
|
|
# X-Robots-Tag (comment to allow site indexing)
|
|
X-Robots-Tag "noindex, noarchive, nofollow"
|
|
# Remove "Server" header
|
|
-Server
|
|
}
|
|
|
|
header @api {
|
|
Access-Control-Allow-Methods "GET, OPTIONS"
|
|
Access-Control-Allow-Origin "*"
|
|
}
|
|
|
|
route {
|
|
# Cache policy
|
|
header Cache-Control "max-age=0, no-store"
|
|
header @search Cache-Control "max-age=5, private"
|
|
header @imageproxy Cache-Control "max-age=604800, public"
|
|
header @static Cache-Control "max-age=31536000, public, immutable"
|
|
}
|
|
|
|
# SearXNG (uWSGI)
|
|
reverse_proxy searxng:8080 {
|
|
header_up X-Forwarded-Port {http.request.port}
|
|
header_up X-Real-IP {http.request.remote.host}
|
|
# https://github.com/searx/searx-docker/issues/24
|
|
header_up Connection "close"
|
|
}
|
|
}
|