Deploy it
Security and requirements
Level: Standard. The template has no privileged-container finding. What this template needs:- Publishes ports directly on the host (
n8n): 5678:5678. - Passwords and keys are generated at deploy time (
n8n): N8N_ENCRYPTION_KEY. - Stores data in named volumes (
n8n): n8n_data.
What Levelrail adds
- HTTPS and an ingress filter in front of any domain you attach. See domains and ingress and the firewall.
- Secrets stored encrypted and masked in logs and the UI. See environment variables and secrets.
- Volume backups for
n8n_data, which holds workflows and the local database. See backups and storage. - Health-gated deploys that wait for the template’s health check before traffic switches. See deploy safety.
- Rollback to the previous image. See deploying apps.
What a raw docker compose misses
- The image is pinned to
n8nio/n8n:1.62.1, but the encryption key is a$SERVICE_HEX_64_ENCRYPTIONKEYplaceholder. Plain Docker Compose cannot resolve it, so you would generate and store the key yourself. 5678:5678is published on the host, so the editor is reachable without a domain or filter unless you put one in front of it.- Compose does not back up
n8n_data, so workflows and credentials exist on one disk only. - Compose has no rollback to an earlier revision. Levelrail keeps previous images for that.
Next steps
- Backups and storage to schedule
n8n_databackups, then prove your backups work. - Environment variables and secrets to manage the encryption key.
- Template reference for n8n for the full service table.
- All guides.