Self-host n8n on a VPS

Overview

This guide walks you through setting up your own n8n instance on a VPS (Virtual Private Server). Self-hosting gives you unlimited workflow executions for a fraction of the cost of cloud plans.

If you build in Make, skip this page - Make is hosted and needs no setup.

Prerequisites

Before starting, make sure you have:

• A Hetzner account - Sign up at hetzner.com/cloud
• A domain you control - For SSL certificates (optional but recommended)
• Terminal access - macOS Terminal, Windows PowerShell, or Linux terminal

Part 1: create the server

Step 1: create a Hetzner account

1. Go to hetzner.com/cloud
2. Sign up and add a payment method (~€20 initial charge becomes credit)

Step 2: create a new server

1. Click "Add Server"
2. Configure the following:

Step 3: set up an SSH key

Before creating the server, add your SSH key for secure access.

Check if you have an SSH key:

cat ~/.ssh/id_rsa.pub

If no key exists, generate one:

ssh-keygen -t rsa -b 4096
# Press Enter through all prompts

Copy your public key:

cat ~/.ssh/id_rsa.pub

In Hetzner:

1. Click "+ Add SSH key"
2. Paste your public key
3. Name it (e.g., "MacBook")

Step 4: finalize server creation

• Volumes: Skip
• Firewalls: Skip
• Backups: Skip (optional, adds 20% cost)
• Name: n8n-dev (or whatever you prefer)

Click "Create & Buy now" and wait for the green status dot.

Part 2: install Docker

Step 1: connect to your server

ssh root@YOUR_SERVER_IP

Replace YOUR_SERVER_IP with the IPv4 address from your Hetzner dashboard. Type yes when asked about the fingerprint.

Step 2: update the system and install Docker

apt update && apt upgrade -y && apt install -y docker.io docker-compose-v2 && systemctl enable docker && systemctl start docker

Wait until the installation completes.

Part 3: basic n8n setup (no SSL)

Step 1: create a project directory

mkdir -p /opt/n8n && cd /opt/n8n

Step 2: create the Docker Compose file

nano docker-compose.yml

Paste this configuration:

services:
  n8n:
    image: n8nio/n8n
    restart: always
    ports:
      - "5678:5678"
    environment:
      - N8N_HOST=localhost
      - N8N_PORT=5678
      - N8N_PROTOCOL=http
      - WEBHOOK_URL=http://localhost:5678/
      - N8N_SECURE_COOKIE=false
    volumes:
      - n8n_data:/home/node/.n8n

volumes:
  n8n_data:

Save: Ctrl + X, then Y, then Enter

Step 3: start n8n

docker compose up -d

Step 4: access n8n

Open in your browser: http://YOUR_SERVER_IP:5678

Part 4: add a custom domain with SSL

Step 1: add a DNS record

In your domain provider (Hostinger, Cloudflare, Namecheap, etc.):

1. Go to DNS settings for your domain
2. Add an A Record:

This creates n8n.yourdomain.com. Wait a few minutes for DNS propagation.

Step 2: stop the current n8n (if running)

cd /opt/n8n
docker compose down

Step 3: update the config with SSL

rm docker-compose.yml && nano docker-compose.yml

Paste this configuration (replace YOUR_DOMAIN and YOUR_EMAIL):

services:
  traefik:
    image: traefik:v3.0
    restart: always
    command:
      - "--api=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
      - "--certificatesresolvers.letsencrypt.acme.tlschallenge=true"
      - "--certificatesresolvers.letsencrypt.acme.email=YOUR_EMAIL"
      - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
      - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
      - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - traefik_data:/letsencrypt
      - /var/run/docker.sock:/var/run/docker.sock:ro

  n8n:
    image: n8nio/n8n
    restart: always
    environment:
      - N8N_HOST=YOUR_DOMAIN
      - N8N_PORT=5678
      - N8N_PROTOCOL=https
      - WEBHOOK_URL=https://YOUR_DOMAIN/
      - N8N_SECURE_COOKIE=true
    volumes:
      - n8n_data:/home/node/.n8n
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.n8n.rule=Host(`YOUR_DOMAIN`)"
      - "traefik.http.routers.n8n.entrypoints=websecure"
      - "traefik.http.routers.n8n.tls.certresolver=letsencrypt"
      - "traefik.http.services.n8n.loadbalancer.server.port=5678"

volumes:
  traefik_data:
  n8n_data:

Step 4: start with SSL

docker compose up -d

Wait 30 seconds for SSL certificate provisioning.

Step 5: access n8n

Open in your browser: https://n8n.yourdomain.com

You should see a green padlock (secure connection).

Part 5: generate an API key

To connect n8n with external tools or MCP servers, generate an API key:

1. In n8n, click your profile icon (bottom left)
2. Go to Settings
3. Click API or API Keys
4. Click Create API Key
5. Name it (e.g., "Claude MCP" or "External Access")
6. Copy and save the key securely

Useful commands

docker ps

cd /opt/n8n && docker compose logs -f

cd /opt/n8n && docker compose restart

cd /opt/n8n && docker compose down

cd /opt/n8n && docker compose up -d

cd /opt/n8n
docker compose down
docker pull n8nio/n8n
docker compose up -d

ssh root@YOUR_SERVER_IP

Troubleshooting

Cost summary