n8n

Description / name	Input element
Container Registry
Container Configuration Root Path
Timezone
User ID
Group ID
n8n Host Port
n8n /config Path

Fair-code workflow automation platform with native AI capabilities — combine visual building with custom code and 400+ integrations.


Port	`5678`
Registry	`ghcr.io/daemonless/n8n`
Daemonless	daemonless/n8n
Source	n8n-io/n8n
Website	n8n.io

Version Tags

Tag	Description	Best For
`latest`	Upstream Binary. Built from official release.	Most users — recommended.

Before deploying, ensure your host environment is ready. See the Quick Start Guide for host setup instructions, including the security model for host vs. container privileges.

Deployment

Podman AppJail

Database Where the app keeps its data. The default needs nothing else running.

n8n:latest — data in /containers/n8n

A file in the app's config folder. Right for one person, nothing extra to run.

Save as compose.yaml:

name: n8n

services:
  n8n:
    image: ghcr.io/daemonless/n8n:latest
    container_name: n8n
    restart: unless-stopped

    environment:
      - N8N_ENCRYPTION_KEY=your-encryption-key-here
      # Set to false if accessing over HTTP without TLS
      #- N8N_SECURE_COOKIE=true
      - PUID=1000
      - PGID=1000
      - TZ=UTC
      - DB_TYPE=${DB_TYPE:-sqlite}
      - DB_POSTGRESDB_HOST=${DB_POSTGRESDB_HOST:-}
      - DB_POSTGRESDB_PORT=${DB_POSTGRESDB_PORT:-5432}
      - DB_POSTGRESDB_USER=${DB_POSTGRESDB_USER:-}
      - DB_POSTGRESDB_PASSWORD=${DB_POSTGRESDB_PASSWORD:-}
      - DB_POSTGRESDB_DATABASE=${DB_POSTGRESDB_DATABASE:-}

    volumes:
      - "/containers/n8n:/config"

    ports:
      - "5678:5678"

Then run podman-compose up -d.

n8n:latest · postgres:17 — data in /containers/n8n, /containers/n8n/postgres

One more container, its data in its own folder. For a household, or an app that wants it.

1. Save as .env and fill in what is empty:

# Database: PostgreSQL
DB_TYPE=postgresdb
DB_POSTGRESDB_HOST=postgres
DB_POSTGRESDB_PORT=5432
DB_POSTGRESDB_USER=n8n
DB_POSTGRESDB_PASSWORD=  # set one
DB_POSTGRESDB_DATABASE=n8n
DATABASE_LOCATION=/containers/n8n/postgres

2. Save as compose.yaml:

name: n8n

services:
  n8n:
    depends_on: [postgres]
    image: ghcr.io/daemonless/n8n:latest
    container_name: n8n
    restart: unless-stopped

    environment:
      - N8N_ENCRYPTION_KEY=your-encryption-key-here
      # Set to false if accessing over HTTP without TLS
      #- N8N_SECURE_COOKIE=true
      - PUID=1000
      - PGID=1000
      - TZ=UTC
      - DB_TYPE=${DB_TYPE:-sqlite}
      - DB_POSTGRESDB_HOST=${DB_POSTGRESDB_HOST:-}
      - DB_POSTGRESDB_PORT=${DB_POSTGRESDB_PORT:-5432}
      - DB_POSTGRESDB_USER=${DB_POSTGRESDB_USER:-}
      - DB_POSTGRESDB_PASSWORD=${DB_POSTGRESDB_PASSWORD:-}
      - DB_POSTGRESDB_DATABASE=${DB_POSTGRESDB_DATABASE:-}

    volumes:
      - "/containers/n8n:/config"

    ports:
      - "5678:5678"
  postgres:
    image: ghcr.io/daemonless/postgres:17
    restart: always
    annotations:
      org.freebsd.jail.allow.sysvipc: "true"
    environment:
      - POSTGRES_USER=${DB_POSTGRESDB_USER}
      - POSTGRES_PASSWORD=${DB_POSTGRESDB_PASSWORD}
      - POSTGRES_DB=${DB_POSTGRESDB_DATABASE}
    volumes:
      - "${DATABASE_LOCATION}:/var/lib/postgresql/data"

Then run podman-compose up -d.

n8n:latest · your own database — data in /containers/n8n

A database you already run, here or on another machine. Nothing extra runs; you give the address and the account.

1. Save as .env and fill in Kind, Host, Port, User, Password, Database:

# Database: Your own
DB_TYPE=  # Kind: postgresdb
DB_POSTGRESDB_HOST=  # Host
DB_POSTGRESDB_PORT=  # Port
DB_POSTGRESDB_USER=  # User
DB_POSTGRESDB_PASSWORD=  # Password
DB_POSTGRESDB_DATABASE=  # Database

2. Save as compose.yaml:

name: n8n

services:
  n8n:
    image: ghcr.io/daemonless/n8n:latest
    container_name: n8n
    restart: unless-stopped

    environment:
      - N8N_ENCRYPTION_KEY=your-encryption-key-here
      # Set to false if accessing over HTTP without TLS
      #- N8N_SECURE_COOKIE=true
      - PUID=1000
      - PGID=1000
      - TZ=UTC
      - DB_TYPE=${DB_TYPE:-sqlite}
      - DB_POSTGRESDB_HOST=${DB_POSTGRESDB_HOST:-}
      - DB_POSTGRESDB_PORT=${DB_POSTGRESDB_PORT:-5432}
      - DB_POSTGRESDB_USER=${DB_POSTGRESDB_USER:-}
      - DB_POSTGRESDB_PASSWORD=${DB_POSTGRESDB_PASSWORD:-}
      - DB_POSTGRESDB_DATABASE=${DB_POSTGRESDB_DATABASE:-}

    volumes:
      - "/containers/n8n:/config"

    ports:
      - "5678:5678"

Then run podman-compose up -d.

Database Where the app keeps its data. The default needs nothing else running.

n8n:latest — data in /containers/n8n

A file in the app's config folder. Right for one person, nothing extra to run.

# .env

DIRECTOR_PROJECT=n8n
N8N_ENCRYPTION_KEY=your-encryption-key-here
PUID=1000
PGID=1000
TZ=UTC
DB_TYPE=sqlite
DB_POSTGRESDB_HOST=
DB_POSTGRESDB_PORT=5432
DB_POSTGRESDB_USER=
DB_POSTGRESDB_PASSWORD=<DB_POSTGRESDB_PASSWORD>
DB_POSTGRESDB_DATABASE=

# appjail-director.yml

options:
  - virtualnet: ':<random> default'
  - nat:
services:
  n8n:
    name: n8n
    options:
      - container: 'args:--pull'
      - expose: '5678:5678 proto:tcp'
    oci:
      user: root
      environment:
        - N8N_ENCRYPTION_KEY: !ENV '${N8N_ENCRYPTION_KEY}'
        - PUID: !ENV '${PUID}'
        - PGID: !ENV '${PGID}'
        - TZ: !ENV '${TZ}'
        - DB_TYPE: !ENV '${DB_TYPE}'
        - DB_POSTGRESDB_HOST: !ENV '${DB_POSTGRESDB_HOST}'
        - DB_POSTGRESDB_PORT: !ENV '${DB_POSTGRESDB_PORT}'
        - DB_POSTGRESDB_USER: !ENV '${DB_POSTGRESDB_USER}'
        - DB_POSTGRESDB_PASSWORD: !ENV '${DB_POSTGRESDB_PASSWORD}'
        - DB_POSTGRESDB_DATABASE: !ENV '${DB_POSTGRESDB_DATABASE}'
    volumes:
      - N8N_CONFIG_PATH: /config
volumes:
  N8N_CONFIG_PATH:
    device: '/containers/n8n'

# Makejail

ARG tag=latest

OPTION container=boot
OPTION overwrite=force
OPTION from=ghcr.io/daemonless/n8n:${tag}

Save the files above, then run appjail-director up.

n8n:latest · postgres:17 — data in /containers/n8n, /containers/n8n/postgres

One more container, its data in its own folder. For a household, or an app that wants it.

# .env

DIRECTOR_PROJECT=n8n
N8N_ENCRYPTION_KEY=your-encryption-key-here
PUID=1000
PGID=1000
TZ=UTC
DB_TYPE=postgresdb
DB_POSTGRESDB_HOST=n8n_postgres
DB_POSTGRESDB_PORT=5432
DB_POSTGRESDB_USER=n8n
DB_POSTGRESDB_PASSWORD=
DB_POSTGRESDB_DATABASE=n8n
DATABASE_LOCATION=/containers/n8n/postgres

# appjail-director.yml

options:
  - virtualnet: ':<random> default'
  - nat:
services:
  n8n:
    name: n8n
    options:
      - container: 'args:--pull'
      - expose: '5678:5678 proto:tcp'
    oci:
      user: root
      environment:
        - N8N_ENCRYPTION_KEY: !ENV '${N8N_ENCRYPTION_KEY}'
        - PUID: !ENV '${PUID}'
        - PGID: !ENV '${PGID}'
        - TZ: !ENV '${TZ}'
        - DB_TYPE: !ENV '${DB_TYPE}'
        - DB_POSTGRESDB_HOST: !ENV '${DB_POSTGRESDB_HOST}'
        - DB_POSTGRESDB_PORT: !ENV '${DB_POSTGRESDB_PORT}'
        - DB_POSTGRESDB_USER: !ENV '${DB_POSTGRESDB_USER}'
        - DB_POSTGRESDB_PASSWORD: !ENV '${DB_POSTGRESDB_PASSWORD}'
        - DB_POSTGRESDB_DATABASE: !ENV '${DB_POSTGRESDB_DATABASE}'
    volumes:
      - N8N_CONFIG_PATH: /config
  postgres:
    name: n8n_postgres
    priority: 10
    options:
      - from: ghcr.io/daemonless/postgres:17
      - template: !ENV '${PWD}/postgres-template.conf'
    oci:
      environment:
        - POSTGRES_USER: !ENV '${DB_POSTGRESDB_USER}'
        - POSTGRES_PASSWORD: !ENV '${DB_POSTGRESDB_PASSWORD}'
        - POSTGRES_DB: !ENV '${DB_POSTGRESDB_DATABASE}'
    volumes:
      - database: /var/lib/postgresql/data
volumes:
  N8N_CONFIG_PATH:
    device: '/containers/n8n'
  database:
    device: !ENV '${DATABASE_LOCATION}'

# Makejail

ARG tag=latest

OPTION container=boot
OPTION overwrite=force
OPTION from=ghcr.io/daemonless/n8n:${tag}

# The jail PostgreSQL runs in: SysV shared memory, which a jail does not
# get by default. ip4/ip6 are set here because the director's ip4_inherit
# option is a no-op in AppJail 5.5.0.

exec.start: "/bin/sh /etc/rc"
exec.stop: "/bin/sh /etc/rc.shutdown jail"
sysvmsg: new
sysvsem: new
sysvshm: new
mount.devfs
persist
ip4: inherit
ip6: inherit

Save the files above, then run appjail-director up.

n8n:latest · your own database — data in /containers/n8n

A database you already run, here or on another machine. Nothing extra runs; you give the address and the account.

# .env

DIRECTOR_PROJECT=n8n
N8N_ENCRYPTION_KEY=your-encryption-key-here
PUID=1000
PGID=1000
TZ=UTC
DB_TYPE=
DB_POSTGRESDB_HOST=
DB_POSTGRESDB_PORT=
DB_POSTGRESDB_USER=
DB_POSTGRESDB_PASSWORD=
DB_POSTGRESDB_DATABASE=

# appjail-director.yml

options:
  - virtualnet: ':<random> default'
  - nat:
services:
  n8n:
    name: n8n
    options:
      - container: 'args:--pull'
      - expose: '5678:5678 proto:tcp'
    oci:
      user: root
      environment:
        - N8N_ENCRYPTION_KEY: !ENV '${N8N_ENCRYPTION_KEY}'
        - PUID: !ENV '${PUID}'
        - PGID: !ENV '${PGID}'
        - TZ: !ENV '${TZ}'
        - DB_TYPE: !ENV '${DB_TYPE}'
        - DB_POSTGRESDB_HOST: !ENV '${DB_POSTGRESDB_HOST}'
        - DB_POSTGRESDB_PORT: !ENV '${DB_POSTGRESDB_PORT}'
        - DB_POSTGRESDB_USER: !ENV '${DB_POSTGRESDB_USER}'
        - DB_POSTGRESDB_PASSWORD: !ENV '${DB_POSTGRESDB_PASSWORD}'
        - DB_POSTGRESDB_DATABASE: !ENV '${DB_POSTGRESDB_DATABASE}'
    volumes:
      - N8N_CONFIG_PATH: /config
volumes:
  N8N_CONFIG_PATH:
    device: '/containers/n8n'

# Makejail

ARG tag=latest

OPTION container=boot
OPTION overwrite=force
OPTION from=ghcr.io/daemonless/n8n:${tag}

Save the files above, then run appjail-director up.

Interactive Configuration

Parameters

Environment Variables

Variable	Default	Description
`N8N_ENCRYPTION_KEY`	`your-encryption-key-here`	Encryption key for credentials (keep safe!)
`PUID`	`1000`	User ID for the application process
`PGID`	`1000`	Group ID for the application process
`TZ`	`UTC`	Timezone for the container
`DB_TYPE`	`sqlite`	sqlite or postgresdb; set by the Database choice
`DB_POSTGRESDB_HOST`	``	PostgreSQL host (Database choice)
`DB_POSTGRESDB_PORT`	`5432`	PostgreSQL port (Database choice)
`DB_POSTGRESDB_USER`	``	PostgreSQL user (Database choice)
`DB_POSTGRESDB_PASSWORD`	`<DB_POSTGRESDB_PASSWORD>`	PostgreSQL password (Database choice)
`DB_POSTGRESDB_DATABASE`	``	PostgreSQL database name (Database choice)
`N8N_SECURE_COOKIE`	``	Set to false if accessing over HTTP without TLS

Volumes

Path	Description
`/config`	Configuration directory (database, workflows)

Ports

Port	Protocol	Description
`5678`	TCP	Web UI

Implementation Details

Architectures: amd64
User: bsd (UID/GID set via PUID/PGID). Defaults to 1000:1000.
Base: Built on ghcr.io/daemonless/base (FreeBSD 15.1).

Need help? Join our Discord community.