Dockerfile

FROM node:24-alpine

# -------------------------
# Base + build args
# -------------------------
USER root
ARG N8N_PATH=/usr/local/lib/node_modules/n8n
ARG BASE_PATH=/root/.n8n
ARG DATABASE_PATH=$BASE_PATH/database
ARG CONFIG_PATH=$BASE_PATH/config
ARG WORKFLOWS_PATH=$BASE_PATH/workflows
ARG LOGS_PATH=$BASE_PATH/logs

# Optional args passed at build time (no secrets here)
ARG N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=$N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS
ARG N8N_HOST=$N8N_HOST
ARG N8N_PORT=$N8N_PORT
ARG N8N_PROTOCOL=https
ARG N8N_EDITOR_BASE_URL=$N8N_EDITOR_BASE_URL
ARG WEBHOOK_URL=$WEBHOOK_URL
ARG GENERIC_TIMEZONE=$GENERIC_TIMEZONE
ARG TZ=$TZ
ARG N8N_ENCRYPTION_KEY=$N8N_ENCRYPTION_KEY
ARG DB_TYPE=$DB_TYPE
ARG DB_POSTGRESDB_SCHEMA=$DB_POSTGRESDB_SCHEMA
ARG DB_POSTGRESDB_HOST=$DB_POSTGRESDB_HOST
ARG DB_POSTGRESDB_DATABASE=$DB_POSTGRESDB_DATABASE
ARG DB_POSTGRESDB_PORT=$DB_POSTGRESDB_PORT
ARG DB_POSTGRESDB_USER=$DB_POSTGRESDB_USER
ARG DB_POSTGRESDB_PASSWORD=$DB_POSTGRESDB_PASSWORD
ARG DB_POSTGRESDB_POOL_SIZE=$DB_POSTGRESDB_POOL_SIZE
ARG EXECUTIONS_DATA_PRUNE=$EXECUTIONS_DATA_PRUNE
ARG EXECUTIONS_DATA_MAX_AGE=$EXECUTIONS_DATA_MAX_AGE
ARG EXECUTIONS_DATA_MAX_COUNT=$EXECUTIONS_DATA_MAX_COUNT
ARG NODE_FUNCTION_ALLOW_BUILTIN=*
ARG NODE_FUNCTION_ALLOW_EXTERNAL=*
ARG N8N_RUNNERS_ENABLED=true
ARG NODES_EXCLUDE=$NODES_EXCLUDE

# -------------------------
# System deps
# -------------------------
RUN apk add --no-cache \
    bash \
    git \
    python3 \
    py3-pip \
    make \
    g++ \
    build-base \
    cairo-dev \
    pango-dev \
    chromium \
    postgresql-client \
    ffmpeg \
    yt-dlp


# Tell Puppeteer to skip installing Chrome.
ENV PUPPETEER_SKIP_DOWNLOAD=true
ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser

RUN yarn add puppeteer@24.27.0
    
# -------------------------
# n8n
# -------------------------
RUN npm install -g n8n@2.2.4

# -------------------------
# Add JS deps
# -------------------------
RUN npm install -g cheerio@1.0.0-rc.12

# -------------------------
# Python venv + requirements
# -------------------------d
RUN python3 -m venv /opt/venv
ENV PATH="/opt/venv/bin:$PATH"

# Python dependencies
COPY requirements.txt /tmp/requirements.txt
RUN pip install --no-cache-dir -r /tmp/requirements.txt

# Python code
COPY python/ /app/python/

# -------------------------
# Runtime layout
# -------------------------
# Persist n8n data under /data (enable “Persistent storage” in Space settings)
ENV N8N_USER_FOLDER="/data" \
    N8N_LISTEN_ADDRESS="0.0.0.0" \
    N8N_PORT=7860 \
    N8N_PROTOCOL="http" \
    N8N_RESTRICT_FILE_ACCESS_TO="/data/.n8n-files"

# Create standard dirs + logs
RUN mkdir -p $DATABASE_PATH $CONFIG_PATH $WORKFLOWS_PATH $LOGS_PATH \
    && mkdir -p /data/logs /app/logs \
    && chmod -R 777 $BASE_PATH /data /app

COPY logs/ /data/logs/

RUN mkdir -p /data/.n8n-files \
    && chmod -R 777 /data/.n8n-files

# -------------------------
# Non-root user for Chromium
# -------------------------
RUN addgroup -S pptruser && adduser -S -G pptruser pptruser \
    && mkdir -p /home/pptruser/Downloads \
    && chown -R pptruser:pptruser /home/pptruser /data /app

USER pptruser

WORKDIR /data
EXPOSE 7860

# Start n8n
CMD ["n8n", "start"]