Skip to content

Commit f98c1f0

Browse files
Feat/security env vars config (#105)
<!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Enabled persistent n8n data storage in production via a mounted volume. * Allowed environment variable access within n8n nodes by default to improve workflow flexibility. * **Chores** * Simplified environment configuration by removing an obsolete allowlist variable in production settings. * Updated default environment settings to align development and production behavior. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
1 parent f86b525 commit f98c1f0

File tree

2 files changed

+3
-4
lines changed

2 files changed

+3
-4
lines changed

docker-compose.prod.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,10 +22,10 @@ services:
2222
- N8N_BLOCKED_NODES=n8n-nodes-base.executeCommand,n8n-nodes-base.ssh
2323
- N8N_DEFAULT_BINARY_DATA_MODE=filesystem
2424
- N8N_BINARY_DATA_STORAGE_PATH=/data/n8n/binaryData
25-
# Allowlist specific safe environment variables for node access
26-
- N8N_ENV_ACCESS_ALLOWED=SEMBLY_USER,SEMBLY_PASS
2725
- SEMBLY_USER=${SEMBLY_USER:?SEMBLY_USER is required}
2826
- SEMBLY_PASS=${SEMBLY_PASS:?SEMBLY_PASS is required}
27+
volumes:
28+
- n8n_data:/data/n8n
2929
postgresql: !reset null
3030

3131
temporal:

docker-compose.yml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,8 +28,7 @@ services:
2828
- DB_POSTGRESDB_DATABASE=${POSTGRES_DB_N8N:-n8n}
2929
- DB_POSTGRESDB_USER=${POSTGRES_USER_N8N:-n8n}
3030
- DB_POSTGRESDB_PASSWORD=${POSTGRES_PASSWORD_N8N:-n8n_password}
31-
# Block $env access in nodes for security (default: true)
32-
- N8N_BLOCK_ENV_ACCESS_IN_NODE=true
31+
- N8N_BLOCK_ENV_ACCESS_IN_NODE=false
3332
- SEMBLY_USER=${SEMBLY_USER:-sembly_user}
3433
- SEMBLY_PASS=${SEMBLY_PASS:-sembly_pass}
3534
- N8N_LOG_LEVEL=debug

0 commit comments

Comments
 (0)