Who This Is For
Intermediate.
Think of it like setting up dominoes. Tip the first one (a trigger) and the rest fall in order automatically, but you always test the chain on a short row before setting one up across the whole living room.
What You'll Build
One scheduled workflow and one incoming webhook workflow, both actually working.
Prerequisites
- Docker host
- At least one other service to integrate (e.g. Uptime Kuma)
What n8n Is Good For
- Notifications
- Scheduled checks
- API integrations
- Data transformation
- Webhook-triggered automation
What It Should Not Control Yet
- Firewall changes
- Destructive backup deletions
- Unreviewed server changes
Start read-only/notify-only. Add write actions only once you fully trust a workflow.
Deploy with Docker Compose
$services:
$ n8n:
$ image: n8nio/n8n:latest
$ ports: ["5678:5678"]
$ volumes:
$ - ./data:/home/node/.n8n
$ n8n:
$ image: n8nio/n8n:latest
$ ports: ["5678:5678"]
$ volumes:
$ - ./data:/home/node/.n8n
Secure It
- Enable built-in authentication
- Serve over HTTPS via reverse proxy
- Keep it VPN-only where practical
- Store credentials in n8n's credential store, never hardcoded in a workflow node
Example Workflows
- Uptime Kuma alert → Discord or email
- Daily backup status summary
- Weekly Docker image update report
- NetBox asset report
- SMART warning → notification service
Webhook Security
- Use random, unguessable endpoint paths
- Require an authentication header
- Validate the payload before acting on it
Test Before Production
n8n distinguishes test-mode and production webhook URLs, always confirm a workflow behaves correctly in test mode first.
Security & Backup Notes
- Published workflows use production triggers immediately, test thoroughly before enabling anything that can take action, not just notify
Troubleshooting
- Webhook works in test mode but not production, the workflow needs to be activated, and the production URL differs from the test URL
- Credentials unavailable to a workflow, credentials must be explicitly attached to each node that needs them
- Timezone problems, set the n8n instance timezone explicitly rather than relying on host defaults
- Workflow loops, add safeguards against a workflow triggering itself repeatedly
- Notifications flood the user, add rate-limiting or de-duplication logic for noisy triggers
Lab Finish Line
One scheduled workflow and one incoming webhook workflow.