Back to Home
damalis icon

full-stack-proxy-nginx-n8n-for-everyone-with-docker-compose

by damalis

Overview

A comprehensive Docker Compose setup for deploying a full-stack development environment including Nginx as a reverse proxy, n8n for workflow automation, Ollama and Open WebUI for local AI, PostgreSQL with pgvector for data storage, Mailhog for email testing, WAHA for WhatsApp integration, and Portainer for container management, with automated SSL certificates.

Installation

Run Command
./install.sh

Environment Variables

  • LOCAL_TIMEZONE
  • DOMAIN_NAME
  • N8N_SUBDOMAIN
  • WEBUI_SUBDOMAIN
  • WHATSAPP_SUBDOMAIN
  • LETSENCRYPT_EMAIL
  • DB_USER
  • DB_PASSWORD
  • DB_NAME
  • PGA_CONTROLPASS
  • SSL_SNIPPET
  • DIRECTORY_PATH
  • WEBUI_API_KEY
  • PIPELINES_API_KEY
  • WHATSAPP_API_KEY
  • WHATSAPP_DASHBOARD_USERNAME
  • WHATSAPP_DASHBOARD_PASSWORD
  • WHATSAPP_SWAGGER_USERNAME
  • WHATSAPP_SWAGGER_PASSWORD

Security Notes

CRITICAL VULNERABILITY: The `install.sh` script executes `sudo chmod 666 /var/run/docker.sock`, which sets world-writable permissions on the Docker daemon socket. This allows any local user on the host system to interact with the Docker daemon, effectively granting them root privileges on the host. This is a severe privilege escalation vulnerability. Additionally, sensitive credentials (database, pgAdmin, API keys) are prompted for and stored unencrypted in a `.env` file, which should have strict file system permissions. Mailhog's credential handling stores the database username in plaintext.

Similar Servers

Stats

Interest Score11
Security Score1
Cost ClassMedium
Stars2
Forks0
Last Update2025-12-17

Tags

Docker ComposeNginxn8nAIAutomationPostgreSQLLocal DevelopmentFull-stack