n8n/.env-example

@@ -0,0 +1,15 @@
+# N8N Version (Standard: latest)
+N8N_VERSION=latest
+
+# N8N PostgreSQL Version
+N8N_POSTGRES_VERSION=16
+
+# N8N Domain
+N8N_DOMAIN=n8n.example.com
+
+# N8N Database Config
+N8N_POSTGRES_USER=changeUser
+N8N_POSTGRES_PASSWORD=changePassword
+N8N_POSTGRES_DB=n8n
+N8N_POSTGRES_NON_ROOT_USER=changeUser
+N8N_POSTGRES_NON_ROOT_PASSWORD=changePassword

n8n/docker-compose.yml

@@ -0,0 +1,74 @@
+---
+services:
+  postgres:
+    image: postgres:${N8N_POSTGRES_VERSION:-16}
+    container_name: n8n_db
+    networks:
+      - n8n
+    restart: always
+    environment:
+      - POSTGRES_USER=${N8N_POSTGRES_USER}
+      - POSTGRES_PASSWORD=${N8N_POSTGRES_PASSWORD}
+      - POSTGRES_DB=${N8N_POSTGRES_DB}
+      - POSTGRES_NON_ROOT_USER=${N8N_POSTGRES_NON_ROOT_USER}
+      - POSTGRES_NON_ROOT_PASSWORD=${N8N_POSTGRES_NON_ROOT_PASSWORD}
+    volumes:
+      - ./data/db:/var/lib/postgresql/data
+      - ./init-data.sh:/docker-entrypoint-initdb.d/init-data.sh
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -h localhost -U ${N8N_POSTGRES_USER} -d ${N8N_POSTGRES_DB}']
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+  n8n:
+    image: docker.n8n.io/n8nio/n8n:${N8N_VERSION:-latest}
+    restart: always
+    container_name: n8n
+    networks:
+      - traefik
+      - n8n
+    environment:
+      - DB_TYPE=postgresdb
+      - DB_POSTGRESDB_HOST=postgres
+      - DB_POSTGRESDB_PORT=5432
+      - DB_POSTGRESDB_DATABASE=${N8N_POSTGRES_DB}
+      - DB_POSTGRESDB_USER=${N8N_POSTGRES_NON_ROOT_USER}
+      - DB_POSTGRESDB_PASSWORD=${N8N_POSTGRES_NON_ROOT_PASSWORD}
+      - N8N_HOST=${N8N_DOMAIN:?error}
+      - N8N_PORT=5678
+      - N8N_PROTOCOL=https
+      - NODE_ENV=production
+      - N8N_TRUST_PROXY=true
+      - WEBHOOK_URL=https://${N8N_DOMAIN:?error}
+      - GENERIC_TIMEZONE=Europe/Berlin
+      - TZ=Europe/Berlin
+    links:
+      - postgres
+    volumes:
+      - data:/home/node/.n8n
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=traefik"
+      - "traefik.http.routers.n8n.entrypoints=http"
+      - "traefik.http.routers.n8n.rule=Host(`${N8N_DOMAIN:?error}`)"
+      - "traefik.http.middlewares.n8n-https-redirect.redirectscheme.scheme=https"
+      - "traefik.http.routers.n8n.middlewares=n8n-https-redirect"
+      - "traefik.http.routers.n8n-secure.entrypoints=https"
+      - "traefik.http.routers.n8n-secure.rule=Host(`${N8N_DOMAIN:?error}`)"
+      - "traefik.http.routers.n8n-secure.tls=true"
+      - "traefik.http.routers.n8n-secure.service=n8n"
+      - "traefik.http.services.n8n.loadbalancer.server.port=5678"
+
+    depends_on:
+      postgres:
+        condition: service_healthy
+
+networks:
+  traefik:
+    external: true
+  n8n:
+    driver: bridge
+
+volumes:
+  data:

n8n/init-data.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+set -e;
+
+
+if [ -n "${POSTGRES_NON_ROOT_USER:-}" ] && [ -n "${POSTGRES_NON_ROOT_PASSWORD:-}" ]; then
+	psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
+		CREATE USER ${POSTGRES_NON_ROOT_USER} WITH PASSWORD '${POSTGRES_NON_ROOT_PASSWORD}';
+		GRANT ALL PRIVILEGES ON DATABASE ${POSTGRES_DB} TO ${POSTGRES_NON_ROOT_USER};
+		GRANT CREATE ON SCHEMA public TO ${POSTGRES_NON_ROOT_USER};
+	EOSQL
+else
+	echo "SETUP INFO: No Environment variables given!"
+fi