Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →For a production n8n deployment, run n8n and PostgreSQL as separate Compose services, persist both PostgreSQL’s data directory and /home/node/.n8n, keep credentials and the encryption key outside version control, and put n8n behind an HTTPS reverse proxy. PostgreSQL stores the application database; the .n8n directory contains the encryption key and other essential user data. A database dump without that directory cannot restore encrypted credentials.
Antihost offers VPS plans with one-click n8n, NVMe storage and a 14-day free trial.
The configuration below gives you a production-oriented baseline with a PostgreSQL readiness check, deterministic startup ordering, private container networking, public webhook and OAuth URLs, and a backup-and-restore procedure. It does not claim a universal CPU, memory, throughput, or uptime target: those depend on workflow behavior and execution volume.
As an Amazon Associate I earn from qualifying purchases.
Recommended Free Tools
What the production architecture looks like
The deployment has three logical layers. A reverse proxy or load balancer terminates TLS and exposes one public HTTPS hostname. The n8n container serves the editor and webhook endpoints on the private Docker network. PostgreSQL stores n8n’s application data on its own persistent volume.
| Component | Role | Production requirement |
|---|---|---|
| Reverse proxy or load balancer | Public DNS name, TLS certificates, forwarding to n8n | Forward the original host and HTTPS scheme; keep n8n’s container port private where possible |
| n8n service | Editor, webhook handling, workflow execution | Configure PostgreSQL, a stable encryption key, and the real public URL |
| PostgreSQL service | n8n’s application database | Use a persistent volume, non-default credentials, a health check, and a reviewed image version |
/home/node/.n8n volume |
Encryption key and essential n8n user/configuration data | Back it up and restore it with the database |
n8n’s Docker Compose guidance positions SQLite as suitable for trying the product, while recommending PostgreSQL for an instance serving more than a handful of users or workflows running continuously. This guide therefore uses PostgreSQL from the first production deployment rather than treating SQLite as an intermediate database.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Prepare the host and project
Use a Linux host or VM with Docker Engine and the Docker Compose plugin installed. Create a dedicated directory for the deployment and restrict access to files containing secrets.
- Create the project directory and a backup directory:
mkdir -p ~/n8n-production/backups && cd ~/n8n-production. - Choose a DNS name such as
automation.example.comand point it at the reverse proxy or load balancer, not directly at the database. - Decide where the proxy will run. It can be another container on a shared Docker network or an external load balancer that can reach the n8n service.
- Choose reviewed, pinned image versions before going live. The sample uses the
stablen8n channel to keep the example readable; replace it with the exact n8n tag or digest you have tested, and treat every PostgreSQL major-version change as an upgrade project.
Do not publish PostgreSQL’s port to the internet. The Compose file below exposes n8n only to Docker networks; your proxy should be the public entry point.
Free tools Windows power users keep installed
One-click scans. No signup required.
Create the environment file without committing secrets
Compose reads variable substitutions from .env. Generate the database password and n8n encryption key on the host, then protect the file with restrictive permissions. The following shell block creates a starting file; change the example hostname to the DNS name you actually control before starting the stack.
cd ~/n8n-production
umask 077
cat > .env <<EOF
POSTGRES_USER=n8n_app
POSTGRES_DB=n8n
POSTGRES_PASSWORD=$(openssl rand -base64 32 | tr -d 'n')
N8N_ENCRYPTION_KEY=$(openssl rand -hex 32)
N8N_HOST=automation.example.com
EOF
chmod 600 .env
printf '%sn' '.env' >> .gitignoreThe value of N8N_ENCRYPTION_KEY is not disposable configuration. Preserve the same value through container recreation, restores, and migrations. If a secret manager is available, inject these values from it instead of storing them in a long-lived file. Never commit .env, database passwords, API keys, or the encryption key to source control.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Use a Compose file with persistence and readiness checks
Save this as compose.yaml. The PostgreSQL image is shown as version 18 to demonstrate the explicit PGDATA setting discussed in the official example. Use the major version you have reviewed and tested; do not change it casually on an existing data volume.
services:
postgres:
image: postgres:18
restart: unless-stopped
environment:
POSTGRES_USER: ${POSTGRES_USER}
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
POSTGRES_DB: ${POSTGRES_DB}
PGDATA: /var/lib/postgresql/data
volumes:
- postgres_data:/var/lib/postgresql/data
healthcheck:
test: ['CMD-SHELL', 'pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}']
interval: 10s
timeout: 5s
retries: 10
start_period: 20s
n8n:
image: n8nio/n8n:stable
restart: unless-stopped
environment:
DB_TYPE: postgresdb
DB_POSTGRESDB_HOST: postgres
DB_POSTGRESDB_PORT: 5432
DB_POSTGRESDB_DATABASE: ${POSTGRES_DB}
DB_POSTGRESDB_USER: ${POSTGRES_USER}
DB_POSTGRESDB_PASSWORD: ${POSTGRES_PASSWORD}
N8N_ENCRYPTION_KEY: ${N8N_ENCRYPTION_KEY}
N8N_HOST: ${N8N_HOST}
N8N_PROTOCOL: https
N8N_PORT: 5678
WEBHOOK_URL: https://${N8N_HOST}/
N8N_EDITOR_BASE_URL: https://${N8N_HOST}/
N8N_SECURE_COOKIE: 'true'
depends_on:
postgres:
condition: service_healthy
expose:
- '5678'
volumes:
- n8n_data:/home/node/.n8n
volumes:
postgres_data:
n8n_data:Why each setting matters
DB_TYPE=postgresdband theDB_POSTGRESDB_*variables direct n8n to the Compose service namedpostgreson port 5432. The service name, rather thanlocalhost, is the database hostname inside the Compose network.PGDATA=/var/lib/postgresql/datamakes the mounted path explicit. PostgreSQL 18 changed its default data-directory layout; omitting this setting can make an existing volume appear empty after an image change.- The PostgreSQL health check runs
pg_isready.depends_onwithservice_healthyprevents n8n from starting before PostgreSQL reports readiness. This controls startup order; it does not replace backups or application monitoring. postgres_dataholds the database files.n8n_datamounts at/home/node/.n8n, which must remain persistent even when PostgreSQL is used.exposemakes port 5678 available to attached Docker networks without publishing it on every host interface. Attach the proxy to the same network, or adapt the networking section if your proxy is external.N8N_PROTOCOL,WEBHOOK_URL, andN8N_EDITOR_BASE_URLdescribe the public HTTPS address users and external services must use, not the internal container address.
Start the stack and verify the first deployment
- Review the resolved configuration without printing secrets into logs or tickets:
docker compose config. Confirm that the service names, volume mounts, and public hostname are correct. - Start both services in the background:
docker compose up -d. - Check container state and health:
docker compose ps. PostgreSQL should show a healthy status before n8n is considered ready. - Inspect startup logs if n8n is restarting:
docker compose logs --tail=200 postgres n8n. Look first for a database hostname, password, or encryption-key mismatch. - Route the proxy to the n8n service on port 5678, complete TLS issuance at the proxy, and open the public HTTPS URL in a browser.
- Create a small test workflow, execute it, and confirm that the execution appears in the editor. Do not treat a successful login alone as proof that webhooks and credentials work.
When you recreate the containers with docker compose up -d, the named volumes and the encryption key in .env must remain unchanged. Removing volumes, generating a new key, or pointing at a new empty database creates a different instance from the perspective of encrypted credentials.
Terminate TLS at a reverse proxy and make callbacks agree
n8n’s SSL guidance recommends placing a reverse proxy such as Traefik or a network load balancer in front of the instance. The proxy should own the certificate and forward requests to n8n over the private network. Configure it to preserve the original Host header and indicate the original HTTPS scheme with the standard forwarded headers supported by your proxy.
Use one canonical public address
The hostname in N8N_HOST, the URL in WEBHOOK_URL, the editor base URL, your DNS record, and the address registered with each OAuth provider should describe the same public endpoint. A mismatch such as an internal hostname, an HTTP scheme, or an extra path can produce invalid redirect URI errors or webhook URLs that point back to an inaccessible network.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
- Set the real DNS hostname in
N8N_HOST. - Keep
N8N_PROTOCOL=httpsand use the same HTTPS origin inWEBHOOK_URLandN8N_EDITOR_BASE_URL. - Configure the proxy’s upstream as the n8n service and port 5678, with WebSocket support if your proxy requires an explicit option.
- Update every OAuth application’s redirect URI to the exact callback shown by n8n for that public address.
- Activate a test webhook and call it from an external network. Confirm the request reaches the workflow and that the generated URL uses HTTPS and the public hostname.
- After certificate renewal or proxy changes, repeat an OAuth authorization and an external webhook test instead of relying only on an internal health page.
Keep the n8n container port private unless there is a specific networking reason to publish it. Direct access can bypass TLS, host-header handling, and access controls configured at the proxy.
Understand what must be persisted
There are two independent pieces of state:
- PostgreSQL volume: the application database, including workflows, executions, users, and other n8n records stored in PostgreSQL.
/home/node/.n8nvolume: the encryption key and essential n8n user data. The n8n Docker image documentation explicitly warns that this directory remains important even when another database is configured.
Do not assume that a database snapshot contains the encryption key. Conversely, copying only .n8n does not restore the PostgreSQL records. A usable recovery set contains both, captured with compatible timestamps, plus the exact n8n and PostgreSQL versions and the deployment configuration needed to start them.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Back up PostgreSQL and n8n storage
Take a logical PostgreSQL dump
Run the dump from a controlled maintenance process. The shell must load the variables from .env so that $POSTGRES_USER is populated before the command executes.
cd ~/n8n-production
set -a
. ./.env
set +a
mkdir -p backups
docker compose exec -T postgres pg_dumpall -U "$POSTGRES_USER" > "backups/n8n-$(date +%F).sql"This is a logical dump of the PostgreSQL cluster. Protect it like the live database because it contains application data and may include role definitions. Encrypt backup storage and restrict read access.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Archive the .n8n volume
Use a temporary n8n container to read the named volume and write an archive to the host. Stop n8n first if you need a quiet filesystem snapshot; at minimum, coordinate the archive with the database dump so the pair represents a known recovery point.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsdocker compose stop n8n
docker compose run --rm --no-deps --entrypoint sh -v "$PWD/backups:/backup" n8n -c 'tar czf /backup/n8n-data-$(date +%F).tgz -C /home/node .n8n'
docker compose start n8nThe archive must include the encryption-key material. If your infrastructure provides volume snapshots, snapshot n8n_data and the PostgreSQL volume under the same maintenance procedure, and retain the key or protected .env value separately.
Test a restore instead of trusting a successful backup job
- Create an isolated Compose project with the reviewed image versions and empty volumes. Do not test by overwriting production.
- Restore the PostgreSQL dump into the isolated database. A fresh PostgreSQL volume avoids conflicts with existing objects; use the database restore procedure appropriate to the dump format and roles.
- Restore the
.n8narchive to/home/node/.n8n, or inject the identicalN8N_ENCRYPTION_KEYif your backup method preserved the directory’s key material separately. - Start n8n with the same database connection settings and encryption key.
- Sign in, open stored credentials, and run representative workflows that use those credentials. A restore is not successful if workflows load but encrypted credentials cannot decrypt.
- Record how long the drill took and which files and commands were required. The canonical n8n guidance does not publish a universal recovery-time objective, so set one that matches your own service.
Upgrade safely
Pin and review n8n image changes
Replace the sample n8nio/n8n:stable reference with a reviewed immutable tag or digest for production. Read the release notes, take the PostgreSQL and .n8n backups, and test the new image in an isolated project before changing the live service. Keep the previous image reference available for rollback, while remembering that a database migration may make a simple image rollback unsafe.
Treat PostgreSQL major versions as migrations
PostgreSQL cannot open a data directory written by an older major version without an upgrade procedure. Changing postgres:17 to postgres:18, for example, is not a routine tag update. Back up first and follow PostgreSQL’s documented major-upgrade method, such as a supported dump/restore or upgrade utility. The explicit PGDATA setting in the sample also prevents a PostgreSQL 18 layout change from making a valid old volume look empty, but it does not perform the major upgrade for you.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Plan SQLite-to-PostgreSQL migration explicitly
Adding the PostgreSQL service to a new Compose file does not automatically move an existing SQLite instance. Preserve the original instance, export the workflows and data using n8n’s supported migration path, import into PostgreSQL, and verify users, credentials, executions, webhooks, and OAuth connections. Keep the original encryption key and a rollback copy until the new instance has passed those checks.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallTroubleshoot the failures that matter most
| Symptom | Likely cause | Action |
|---|---|---|
| n8n repeatedly restarts while PostgreSQL is starting | The database is not ready, or the credentials/database name are wrong | Check docker compose ps for the health status, inspect PostgreSQL logs, and compare every DB_POSTGRESDB_* value with the POSTGRES_* values in .env. |
| The editor loads but saved credentials fail to decrypt | The N8N_ENCRYPTION_KEY changed, or the .n8n volume was not restored |
Stop n8n, restore the original key and .n8n data, then start the instance against the matching database backup. Do not generate a replacement key for an existing database. |
| OAuth reports a redirect URI mismatch | The provider has a different scheme, hostname, port, or path than n8n is advertising | Align DNS, proxy forwarding, N8N_HOST, N8N_PROTOCOL, N8N_EDITOR_BASE_URL, and the provider’s registered callback exactly. |
| Webhook URLs contain an internal name or HTTP | WEBHOOK_URL is missing or the public URL variables describe the proxy incorrectly |
Set the canonical HTTPS URL, reload the n8n container, and activate a new test webhook from outside the private network. |
| PostgreSQL starts with an apparently empty volume after an image change | A major-version data-directory layout changed, or the volume was mounted at a different path | Stop the stack, verify the volume and PGDATA path, restore the prior image if appropriate, and perform the documented major-version upgrade rather than initializing a new cluster. |
| A restore starts but workflows or users are missing | Only one of the two state stores was restored, or the dump came from a different point in time | Restore the PostgreSQL dump and the matching .n8n data together, then rerun the credential and workflow checks in an isolated environment. |
Security and operational practices
- Use a non-default PostgreSQL role and a long, randomly generated password. Limit who can read the secret file or secret-manager entry.
- Keep the encryption key stable but secret. Rotating it without a documented re-encryption process can make existing credentials unusable.
- Do not expose PostgreSQL publicly. Restrict the n8n service to the proxy and administration networks.
- Pin reviewed n8n and PostgreSQL images, document the upgrade procedure, and keep rollback images available.
- Monitor container restarts, PostgreSQL health, disk usage on both volumes, backup success, and external webhook delivery.
- Set retention and encryption policies for SQL dumps and volume archives. A backup that anyone can read is another credential-disclosure path.
- Run restore drills before declaring the deployment production-ready. The decisive test is successful credential decryption and execution of representative workflows, not merely a green container status.
Scaling beyond one Compose pair
A single n8n container and PostgreSQL service is a sensible starting architecture, but workload growth may require a queue-based execution design, additional workers, database tuning, or a managed PostgreSQL service. Those changes add coordination and operational requirements; they are not achieved by increasing a Compose replica count blindly. Establish workload-specific measurements first, because the available guidance does not provide a universal CPU, memory, concurrency, or throughput number for this pattern.
If you choose managed PostgreSQL or a managed VPS, retain the same principles: private database connectivity, a stable n8n encryption key, tested backups of both state stores, and one consistent HTTPS URL for the editor, webhooks, and OAuth callbacks.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
