Self-Hosting n8n: The Complete 2026 Guide to Security, Performance & Scale

Why Self-Host n8n?

The Business Case for Self-Hosting

Factor	Cloud	Self-Hosted
Cost (1M executions/month)	$500-1000	$20-100 (VPS)
Data Privacy	Limited control	Full control
Custom Integrations	Restricted	Unlimited
Execution Time	5 min max	Configurable
Concurrency	Limited	Scalable

When Self-Hosting Makes Sense

• ✅ Regulatory Compliance: HIPAA, GDPR, SOC 2 requirements
• ✅ High Volume: 100,000+ workflow executions monthly
• ✅ Long-Running Workflows: Jobs that run for hours
• ✅ Custom Infrastructure: Need to connect to internal systems
• ✅ Cost Optimization: Scale without per-execution fees

Docker Deployment: The Standard Approach

Prerequisites

• Linux server (Ubuntu 22.04 LTS recommended)
• Docker & Docker Compose installed
• Domain name (for HTTPS)
• Minimum 2 CPU cores, 4GB RAM

Production Docker Compose Configuration

version: '3.8'

services:
  n8n:
    image: n8nio/n8n:latest
    restart: always
    ports:
      - "127.0.0.1:5678:5678"
    environment:
      - N8N_BASIC_AUTH_ACTIVE=true
      - N8N_BASIC_AUTH_USER=${N8N_USER}
      - N8N_BASIC_AUTH_PASSWORD=${N8N_PASSWORD}
      - N8N_HOST=${DOMAIN}
      - N8N_PORT=5678
      - N8N_PROTOCOL=https
      - NODE_ENV=production
      - WEBHOOK_URL=https://${DOMAIN}/
      - GENERIC_TIMEZONE=${TIMEZONE}
      - DB_TYPE=postgresdb
      - DB_POSTGRESDB_HOST=postgres
      - DB_POSTGRESDB_DATABASE=n8n
      - DB_POSTGRESDB_USER=n8n
      - DB_POSTGRESDB_PASSWORD=${POSTGRES_PASSWORD}
      - N8N_ENCRYPTION_KEY=${ENCRYPTION_KEY}
    volumes:
      - n8n_data:/home/node/.n8n
    depends_on:
      - postgres

  postgres:
    image: postgres:15-alpine
    restart: always
    environment:
      - POSTGRES_USER=n8n
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_DB=n8n
    volumes:
      - postgres_data:/var/lib/postgresql/data

  caddy:
    image: caddy:2-alpine
    restart: always
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile
      - caddy_data:/data

volumes:
  n8n_data:
  postgres_data:
  caddy_data:

Environment Variables (.env)

# n8n Configuration
N8N_USER=admin
N8N_PASSWORD=your_secure_password_here
DOMAIN=automation.yourcompany.com
TIMEZONE=America/New_York
ENCRYPTION_KEY=$(openssl rand -hex 32)

# Database
POSTGRES_PASSWORD=your_postgres_password_here

Security Hardening Checklist

Essential Security Measures

1. Network Security

# Firewall rules (UFW)
ufw default deny incoming
ufw default allow outgoing
ufw allow ssh
ufw allow 80/tcp
ufw allow 443/tcp
ufw enable

# Fail2ban for brute force protection
apt install fail2ban
systemctl enable fail2ban

2. Authentication

• ✅ Enable basic authentication (environment variables)
• ✅ Use strong, unique passwords
• ✅ Consider SSO integration (OIDC/LDAP)
• ✅ Implement IP whitelisting if possible

3. Encryption

• ✅ HTTPS only (HSTS enabled)
• ✅ Database encryption at rest
• ✅ Encryption key for n8n credentials (N8N_ENCRYPTION_KEY)
• ✅ Secure credential storage (never commit .env files)

Backup & Disaster Recovery

The 3-2-1 Backup Strategy

• 3 copies of your data
• 2 different storage media
• 1 offsite backup

Automated Backup Script

#!/bin/bash
# /usr/local/bin/backup-n8n.sh

BACKUP_DIR="/backup/n8n"
DATE=$(date +%Y%m%d_%H%M%S)
RETENTION_DAYS=30

# Create backup directory
mkdir -p $BACKUP_DIR

# Backup PostgreSQL
docker exec n8n_postgres_1 pg_dump -U n8n n8n | gzip > $BACKUP_DIR/n8n_db_$DATE.sql.gz

# Backup n8n data volume
tar -czf $BACKUP_DIR/n8n_data_$DATE.tar.gz -C /var/lib/docker/volumes n8n_data

# Sync to S3 (optional)
aws s3 sync $BACKUP_DIR s3://your-backup-bucket/n8n/ --delete

# Cleanup old backups
find $BACKUP_DIR -name "*.gz" -mtime +$RETENTION_DAYS -delete

echo "Backup completed: $DATE"

Cron Job for Automated Backups

# Daily backup at 2 AM
0 2 * * * /usr/local/bin/backup-n8n.sh >> /var/log/n8n-backup.log 2>&1

Performance Optimization

Resource Allocation Guidelines

Workload	CPU	RAM	Storage
Light (< 1K executions/day)	2 cores	4 GB	50 GB SSD
Medium (1K-10K/day)	4 cores	8 GB	100 GB SSD
Heavy (10K-100K/day)	8 cores	16 GB	200 GB SSD
Enterprise (100K+/day)	16+ cores	32 GB	500 GB SSD

PostgreSQL Optimization

-- Connect to PostgreSQL
docker exec -it n8n_postgres_1 psql -U n8n

-- Optimize for n8n workload
ALTER SYSTEM SET shared_buffers = '1GB';
ALTER SYSTEM SET effective_cache_size = '3GB';
ALTER SYSTEM SET maintenance_work_mem = '256MB';

-- Apply changes
SELECT pg_reload_conf();

Scaling Strategies

Horizontal Scaling Architecture

                    ┌─────────────┐
                    │   Load      │
                    │  Balancer   │
                    │   (Caddy)   │
                    └──────┬──────┘
                           │
           ┌───────────────┼───────────────┐
           │               │               │
      ┌────┴────┐     ┌────┴────┐     ┌────┴────┐
      │  n8n-1  │     │  n8n-2  │     │  n8n-3  │
      │ (main)  │     │(worker) │     │(worker) │
      └────┬────┘     └────┬────┘     └────┬────┘
           │               │               │
           └───────────────┼───────────────┘
                           │
                    ┌──────┴──────┐
                    │  PostgreSQL │
                    │   (primary) │
                    └─────────────┘

Worker Node Configuration

# docker-compose.worker.yml
version: '3.8'
services:
  n8n-worker:
    image: n8nio/n8n:latest
    command: worker
    environment:
      - N8N_ENCRYPTION_KEY=${ENCRYPTION_KEY}
      - DB_TYPE=postgresdb
      - DB_POSTGRESDB_HOST=postgres
    deploy:
      replicas: 3

Monitoring & Alerting

Key Metrics to Track

Metric	Warning	Critical
CPU Usage	> 70%	> 90%
Memory Usage	> 80%	> 95%
Failed Executions	> 5%	> 10%
Queue Depth	> 100	> 500

Prometheus + Grafana Setup

# Add to docker-compose.yml
  prometheus:
    image: prom/prometheus:latest
    volumes:
      - ./prometheus.yml:/etc/prometheus/prometheus.yml
    ports:
      - "9090:9090"

  grafana:
    image: grafana/grafana:latest
    ports:
      - "3000:3000"

Troubleshooting Common Issues

Issue: Workflows Stuck in "Running" State

Solutions:

# Check logs
docker-compose logs n8n | tail -100

# Restart n8n
docker-compose restart n8n

# Kill stuck executions via database
docker exec -it n8n_postgres_1 psql -U n8n -c "UPDATE execution_entity SET status='failed' WHERE status='running' AND startedAt < NOW() - INTERVAL '1 hour';"

Issue: Out of Memory

Solutions:

• Increase container memory limit
• Optimize workflows (batch processing)
• Enable execution pruning