cat /root/dify/docker/.env

# 控制台 API 地址
CONSOLE_API_URL=https://123.xyz

# 控制台 Web 界面地址
CONSOLE_WEB_URL=https://123.xyz

# 服务 API 地址
SERVICE_API_URL=https://123.xyz

# 应用 API 地址
APP_API_URL=https://123.xyz

# 应用 Web 界面地址
APP_WEB_URL=https://123.xyz

# 文件服务地址
FILES_URL=https://123.xyz

# ===== CORS 跨域配置 =====
# Web API 允许的跨域来源（支持 HTTPS 和 HTTP）
WEB_API_CORS_ALLOW_ORIGINS=https://123.xyz,http://123.xyz

# 控制台允许的跨域来源（支持 HTTPS 和 HTTP）
CONSOLE_CORS_ALLOW_ORIGINS=https://123.xyz,http://123.xyz

# ===== Nginx 配置 =====
# Nginx 服务器名称
NGINX_SERVER_NAME=123.xyz

拷贝证书

/root/dify/docker/nginx/ssl
dify.crt
dify.key

docker exec docker-nginx-1 cat /etc/nginx/conf.d/default.conf

server {
    listen 80;
    server_name 123.xyz;

    location /console/api {
      proxy_pass http://api:5001;
      include proxy.conf;
    }

    location /api {
      proxy_pass http://api:5001;
      include proxy.conf;
    }

    location /v1 {
      proxy_pass http://api:5001;
      include proxy.conf;
    }

    location /files {
      proxy_pass http://api:5001;
      include proxy.conf;
    }

    location /explore {
      proxy_pass http://web:3000;
      include proxy.conf;
    }

    location /e/ {
      proxy_pass http://plugin_daemon:5002;
      proxy_set_header Dify-Hook-Url $scheme://$host$request_uri;
      include proxy.conf;
    }

    location / {
      proxy_pass http://web:3000;
      include proxy.conf;
    }
    location /mcp {
      proxy_pass http://api:5001;
      include proxy.conf;
    }
    # placeholder for acme challenge location


    # placeholder for https config defined in https.conf.template
    # Please do not directly edit this file. Instead, modify the .env variables related to NGINX configuration.

listen 443 ssl;
ssl_certificate /etc/ssl/dify.crt;
ssl_certificate_key /etc/ssl/dify.key;
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
}