n8n Workflow Automation 1-Click VM

Description

What is n8n?

n8n is a fair-code workflow automation tool that connects APIs, services, and internal tools through a visual node-based editor. Workflows can mix pre-built integration nodes with custom JavaScript, so simple glue tasks and complex multi-step pipelines live in the same canvas.

Because n8n runs entirely on your own VM, workflow definitions, credentials, and execution history stay on infrastructure you control. There is no third-party SaaS layer in the path between your data and your destinations — useful for teams handling regulated data, internal tooling, or anything where API keys should not leave the perimeter.

Why deploy n8n on Raff Cloud?

Self-hosted privacy — Credentials and workflow data stay on your Raff VM. Nothing transits a third-party automation cloud.
One-click deploy — The image boots with n8n already running behind Nginx. Hit the IP and you are at the setup wizard.
Hardened by default — UFW firewall and Fail2Ban are pre-configured. SSH is rate-limited against brute force from the first boot.
Tunable at deploy time — The Raff dashboard exposes firewall ports, swap size, timezone, Fail2Ban, and auto-updates as toggles before the VM boots, so the host matches your workload without post-deploy config drift.
Predictable cost — Flat monthly VM pricing. No per-execution fees, no per-workflow tiers, no surprise overages.
Full control — Root SSH, custom nodes, custom environment variables, your choice of database backend.

Use cases

Internal tooling that connects a CRM, billing system, and team chat to automate customer lifecycle events.
Data sync between two SaaS apps without writing and maintaining glue code.
AI pipelines that chain LLM calls with data sources for content generation, classification, or enrichment.

Key Features

Visual workflow editor — Node-based canvas with branching, looping, and error handling
400+ integration nodes — Pre-built connectors for popular SaaS, databases, and developer tools
Custom code nodes — Drop in JavaScript when no node fits the job
Webhook and schedule triggers — Run workflows on incoming HTTP requests or on a cron
AI-native nodes — Built-in support for LLM calls, vector stores, and agent patterns
Credential vault — Encrypted credential storage scoped per workflow
Execution history — Inspect past runs, replay failures, and debug step by step
REST API — Manage workflows and trigger executions programmatically
UFW firewall and Fail2Ban — Pre-configured host hardening with SSH brute-force protection
Configurable at deploy time — Set firewall ports, swap, timezone, and auto-updates from the Raff dashboard before the VM boots

System Requirements

Minimum: 1 CPU, 2GB RAM, 25GB Storage

Usage Level	RAM	CPU	Recommended For
Personal	2GB	1 vCPU	Single user, a handful of workflows, low webhook traffic
Team	4GB	2 vCPU	Small team with regular automations and moderate concurrent executions
Production	8GB	4 vCPU	High webhook throughput, many concurrent workflows, or PostgreSQL backend

Software Included

Package	Version	License
n8n	2.15.0	Sustainable Use License
Docker Engine	29.4.0	Apache 2.0
Nginx	1.24.0	BSD-2-Clause
UFW	0.36.2	GPL-3.0
Fail2Ban	1.0.2	GPL-2.0
Ubuntu	24.04 LTS	Various (Ubuntu main)

Getting started after deploying n8n

Getting Started

Deploy the VM — Click "Create n8n VM" in the Raff dashboard and pick a plan that meets the system requirements.
Open the setup wizard — Browse to http://<your-vm-ip> and the n8n setup page loads automatically.
Create the owner account — Set the email and password for the first n8n admin user.
Connect via SSH for advanced config — ssh root@<your-vm-ip> to edit environment variables, swap the SQLite backend for Postgres, or add a TLS certificate.
Build your first workflow — Drag a trigger node onto the canvas, chain in actions, and click Execute.

API Creation

Deploy programmatically via the Raff CLI, public REST API, or Terraform.

CLI

bashraff vm create --template <TEMPLATE_ID> --plan s-2vcpu-4gb --region tr-ank-1 --name my-n8n

REST

bashcurl -X POST https://api.rafftechnologies.com/v1/vms \
 -H "Authorization: Bearer $RAFF_API_TOKEN" \
 -H "Content-Type: application/json" \
 -d '{"name":"my-n8n","template_id":"<TEMPLATE_ID>","plan":"s-2vcpu-4gb","region":"tr-ank-1"}'

Terraform

hclresource "raff_vm" "n8n" {
  name        = "my-n8n"
  template_id = "<TEMPLATE_ID>"
  plan        = "s-2vcpu-4gb"
  region      = "tr-ank-1"
}

After provisioning, follow the steps above for first-time setup.

Frequently asked questions

Is n8n self-hosted on Raff?

Yes. The n8n Docker container runs on your Raff VM. Workflow definitions, credentials, and execution data live on the VM's disk. No third-party automation SaaS is in the path.

What plan do I need to start?

The 2 vCPU / 4 GB plan is the comfortable starting point for a small team. The 1 vCPU / 2 GB plan works for personal automations but can struggle once concurrent executions and webhook traffic pick up.

How do I update n8n?

SSH into the VM and run `docker pull n8nio/n8n:latest && docker restart n8n`. Workflows and credentials persist in the mounted Docker volume across upgrades.

Where is my data stored?

By default n8n uses an embedded SQLite database stored in a Docker volume on the VM. You can switch to PostgreSQL by editing the container's environment variables and pointing it at any Postgres instance you control.

Is this production-ready?

It is suitable for production internal tooling and team automations on the recommended plan. For high-throughput public webhook workloads, switch the database backend to PostgreSQL and put n8n behind your own TLS terminator.

How do I add HTTPS?

The default image serves n8n over HTTP on port 80 via Nginx. To enable HTTPS, point a domain at the VM and run certbot, or place the VM behind a Raff-managed load balancer with TLS.

Can I use custom nodes?

Yes. n8n supports community and custom nodes installed inside the container. Mount a node directory into the container or build a custom image with your additions baked in.

What license does n8n use?

n8n is fair-code under the Sustainable Use License. It is free to self-host and use internally, with restrictions on offering it as a hosted service to third parties. See n8n's license page for the full terms.

Is the VM secured by default?

Yes. UFW is active with only the ports n8n needs open, and Fail2Ban watches the host's SSH service for brute-force attempts. You can adjust allowed ports, Fail2Ban, swap, timezone, and auto-updates from the Raff dashboard before the VM boots.