jv
/
my-homelab-configs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add n8n workflow app

This commit is contained in:
juvdiaz 2026-06-10 10:38:50 -06:00
parent 2b636b97e2
commit 35c6c6f654
8 changed files with 176 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
README.md
View File

@ -70,7 +70,7 @@ accidentally modify the cluster.
listens on loopback inside the container, OPcache is enabled, and
pre-rendered HTML handles the read-heavy pages
- default apps are `container-registry`, `website-production`,
`demos-static`, `heimdall`, and `supply-chain-policy`
`demos-static`, `heimdall`, `n8n`, and `supply-chain-policy`
5. `bootstrap/edge`
- connects to the OCI jump box
@ -332,6 +332,7 @@ Traefik's address:
192.168.100.240 lab2025.duckdns.org
192.168.100.240 demos.lab2025.duckdns.org
192.168.100.240 heimdall.lab2025.duckdns.org
192.168.100.240 n8n.lab2025.duckdns.org
192.168.100.240 grafana.lab2025.duckdns.org
192.168.100.240 argocd.lab2025.duckdns.org
```
@ -480,6 +481,11 @@ Because Heimdall does not support reverse-proxy subfolder hosting cleanly, it
is exposed through the dedicated hostname `heimdall.lab2025.duckdns.org` rather
than a `/heimdall/` path.
The `n8n` app runs in the `n8n` namespace with retained OpenEBS storage and is
exposed at `https://n8n.lab2025.duckdns.org`. It receives
`OLLAMA_BASE_URL=http://192.168.100.68:11434` so workflows can call the existing
Debian-host Ollama API for translation prewarming and batch jobs.
## Storage
OpenEBS provides the platform storage provisioner. Stateful Kubernetes apps use

7
apps/heimdall/web-app.yaml
View File

@ -81,6 +81,13 @@ data:
"description": "Homelab service dashboard",
"colour": "#7c3aed",
"class": "Heimdall"
},
{
"title": "n8n",
"url": "https://n8n.lab2025.duckdns.org/",
"description": "Workflow automation for translation jobs and homelab tasks",
"colour": "#ea4b71",
"class": "N8N"
}
]
seed.py: |

18
apps/n8n/ingress.yaml Normal file
View File

@ -0,0 +1,18 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: n8n
namespace: n8n
spec:
ingressClassName: traefik
rules:
- host: n8n.lab2025.duckdns.org
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: n8n
port:
number: 80

6
apps/n8n/kustomization.yaml Normal file
View File

@ -0,0 +1,6 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- namespace.yaml
- web-app.yaml
- ingress.yaml

4
apps/n8n/namespace.yaml Normal file
View File

@ -0,0 +1,4 @@
apiVersion: v1
kind: Namespace
metadata:
name: n8n

112
apps/n8n/web-app.yaml Normal file
View File

@ -0,0 +1,112 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: n8n-data
namespace: n8n
spec:
accessModes:
- ReadWriteOnce
storageClassName: openebs-hostpath-retain
resources:
requests:
storage: 2Gi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: n8n
namespace: n8n
labels:
app: n8n
spec:
replicas: 1
strategy:
type: Recreate
selector:
matchLabels:
app: n8n
template:
metadata:
labels:
app: n8n
spec:
nodeSelector:
kubernetes.io/os: linux
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
containers:
- name: n8n
image: n8nio/n8n:2.5.2
imagePullPolicy: IfNotPresent
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
env:
- name: N8N_HOST
value: n8n.lab2025.duckdns.org
- name: N8N_PORT
value: "5678"
- name: N8N_PROTOCOL
value: https
- name: WEBHOOK_URL
value: https://n8n.lab2025.duckdns.org/
- name: GENERIC_TIMEZONE
value: America/Mexico_City
- name: TZ
value: America/Mexico_City
- name: N8N_DIAGNOSTICS_ENABLED
value: "false"
- name: N8N_VERSION_NOTIFICATIONS_ENABLED
value: "false"
- name: N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS
value: "true"
- name: N8N_RUNNERS_ENABLED
value: "true"
- name: OLLAMA_BASE_URL
value: http://192.168.100.68:11434
ports:
- containerPort: 5678
name: http
readinessProbe:
httpGet:
path: /healthz
port: http
initialDelaySeconds: 30
periodSeconds: 10
livenessProbe:
httpGet:
path: /healthz
port: http
initialDelaySeconds: 90
periodSeconds: 30
resources:
requests:
cpu: 100m
memory: 384Mi
limits:
memory: 1Gi
volumeMounts:
- name: n8n-data
mountPath: /home/node/.n8n
volumes:
- name: n8n-data
persistentVolumeClaim:
claimName: n8n-data
---
apiVersion: v1
kind: Service
metadata:
name: n8n
namespace: n8n
spec:
ports:
- port: 80
targetPort: http
selector:
app: n8n

9
bootstrap/apps/variables.tf
View File

@ -66,6 +66,15 @@ variable "applications" {
self_heal = true
create_namespace = true
}
n8n = {
project = "default"
path = "apps/n8n"
namespace = "n8n"
target_revision = "main"
prune = true
self_heal = true
create_namespace = true
}
supply-chain-policy = {
project = "default"
path = "apps/supply-chain-policy"

13
lab.sh
View File

@ -191,6 +191,14 @@ adopt_apps_existing_resources() {
"argoproj.io/v1alpha1" \
"Application" \
"heimdall"
adopt_tofu_kubernetes_manifest \
"${stack}" \
'kubernetes_manifest.argocd_application["n8n"]' \
"${namespace}" \
"applications.argoproj.io" \
"argoproj.io/v1alpha1" \
"Application" \
"n8n"
adopt_tofu_kubernetes_manifest \
"${stack}" \
'kubernetes_manifest.argocd_application["supply-chain-policy"]' \
@ -3069,6 +3077,11 @@ apps() {
wait_for_namespaced_resource heimdall deployment heimdall heimdall 300
wait_for_deployment_ready heimdall heimdall heimdall 300
refresh_argocd_application n8n
wait_for_namespace n8n n8n 300
wait_for_namespaced_resource n8n deployment n8n n8n 300
wait_for_deployment_ready n8n n8n n8n 300
echo "Application deployment successfully completed."
}