2026 디지털 기술
AI 실무 교육

POSTGRES_USER=root
POSTGRES_PASSWORD=skarbwls12
POSTGRES_DB=n8n

N8N_ENCRYPTION_KEY=skarbwls12
N8N_USER_MANAGEMENT_JWT_SECRET=even-more-secret
N8N_DEFAULT_BINARY_DATA_MODE=filesystem
N8N_RUNNERS_AUTH_TOKEN=skarbwls12

volumes:
  n8n_storage:
  postgres_storage:
  qdrant_storage:

networks:
  n8n-v2:

x-n8n: &service-n8n
  image: n8nio/n8n:latest
  networks: ['n8n-v2']
  environment:
    - WEBHOOK_URL=http://localhost:7678
    - N8N_EDITOR_BASE_URL=http://localhost:7678
    
    - N8N_FORMDATA_FILE_SIZE_MAX=1024
    - N8N_PAYLOAD_SIZE_MAX=1024
    - EXECUTIONS_TIMEOUT_MAX=7200
    - N8N_REQUEST_MAX_SIZE=100MB

    - N8N_SECURE_COOKIE=false
    - TZ=Asia/Seoul
    - N8N_PUSH_BACKEND=websocket

    - DB_TYPE=postgresdb
    - DB_POSTGRESDB_HOST=postgres
    - DB_POSTGRESDB_USER=${POSTGRES_USER}
    - DB_POSTGRESDB_PASSWORD=${POSTGRES_PASSWORD}

    - N8N_DIAGNOSTICS_ENABLED=false
    - N8N_PERSONALIZATION_ENABLED=false
    - N8N_ENCRYPTION_KEY
    - N8N_USER_MANAGEMENT_JWT_SECRET
    
    - N8N_RESTRICT_FILE_ACCESS_TO=/data

    - N8N_RUNNERS_TASK_REQUEST_TIMEOUT=300 
    - N8N_RUNNERS_TASK_TIMEOUT=3600        
    - N8N_RUNNERS_ENABLED=true
    - N8N_RUNNERS_MODE=external
    - N8N_RUNNERS_AUTH_TOKEN=${N8N_RUNNERS_AUTH_TOKEN}
    - N8N_RUNNERS_BROKER_LISTEN_ADDRESS=0.0.0.0
    - N8N_NATIVE_PYTHON_RUNNER=true
    - N8N_PROXY_HOPS=1
  env_file:
    - path: .env
      required: true

services:
  postgres:
    container_name: postgres-v2
    image: postgres:16-alpine
    hostname: postgres
    networks: ['n8n-v2']
    restart: unless-stopped
    environment:
      - POSTGRES_USER
      - POSTGRES_PASSWORD
      - POSTGRES_DB
    volumes:
      - ./postgres_storage:/var/lib/postgresql/data
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -h localhost -U ${POSTGRES_USER} -d ${POSTGRES_DB}']
      interval: 5s
      timeout: 5s
      retries: 10

  n8n-import:
    <<: *service-n8n
    hostname: n8n-import
    container_name: n8n-v2-import
    entrypoint: /bin/sh
    command:
      - "-c"
      - "n8n import:credentials --separate --input=/demo-data/credentials && n8n import:workflow --separate --input=/demo-data/workflows"
    volumes:
      - ./n8n/demo-data:/demo-data
    depends_on:
      postgres:
        condition: service_healthy

  n8n:
    <<: *service-n8n
    hostname: n8n
    container_name: n8n-v2
    restart: unless-stopped
    ports:
      - "7678:5678"
    volumes:
      - n8n_storage:/home/node/.n8n
      - ./n8n/demo-data:/demo-data
      - ./shared:/data/shared
    depends_on:
      postgres:
        condition: service_healthy
      n8n-import:
        condition: service_completed_successfully

  qdrant:
    image: qdrant/qdrant
    hostname: qdrant
    container_name: qdrant-v2
    networks: ['n8n-v2']
    restart: unless-stopped
    ports:
      - "7333:6333"
    volumes:
      - ./qdrant_storage:/qdrant/storage

  task-runners:
    pull_policy: never
    build:
      context: ./runners
      dockerfile: Dockerfile
    image: n8nio/runners:custom
    container_name: n8n-runners
    networks: ['n8n-v2']
    restart: unless-stopped
    environment:
      - N8N_RUNNERS_MODE=external
      - N8N_RUNNERS_TASK_BROKER_URI=http://n8n:5679
      - N8N_RUNNERS_AUTH_TOKEN=${N8N_RUNNERS_AUTH_TOKEN}
      - N8N_RUNNERS_TASK_REQUEST_TIMEOUT=30
      - N8N_RUNNERS_LAUNCHER_LOG_LEVEL=debug
      - N8N_RUNNERS_CONFIG_FILE=/etc/n8n-task-runners.json
      - N8N_RUNNERS_TASK_REQUEST_TIMEOUT=300 
      - N8N_RUNNERS_TASK_TIMEOUT=3600        
    depends_on:
      - n8n

# [Step 1] 순정 alpine:3.20 리눅스를 가져다가 builder로 명칭
FROM alpine:3.20 AS builder

# 순정 리눅스에 apk-tools-static 도구 설치
RUN apk add --no-cache apk-tools-static

# [Step 2] n8n Runner 공식 이미지 가져오기
FROM n8nio/runners:latest

# 지금부터 수행되는 명령은 모두 root 권한으로 수행
USER root

# 1. APK 도구 이식 (apk 에러 방지)
# builder에 설치된 apk.static을 신규 이미지 /sbin/apk 폴더로 복사
COPY --from=builder /sbin/apk

# 2. 저장소 설정 및 업데이트
# 새로운 이미지에 레포지토리 설정
# alpine과 runners의 보안 서명이 달라서 인증 확인이 뜰 수 있는데
# 이를 무시하고 설치 하기 위해서 --allow-untrusted 를 사용

RUN mkdir -p /var/cache/apk \
    && echo "http://dl-cdn.alpinelinux.org/alpine/edge/main" > /etc/apk/repositories \
    && echo "http://dl-cdn.alpinelinux.org/alpine/edge/community" >> /etc/apk/repositories \
    && apk update --allow-untrusted

# 3. 시스템 패키지 설치 (Root 권한으로 실행)
# py3-opencv: 빌드 멈춤 현상 해결을 위해 시스템 패키지로 설치
RUN apk add --no-cache --allow-untrusted \
    bash \
    ffmpeg \
    cairo \
    cairo-dev \
    pango \
    pango-dev \
    gdk-pixbuf \
    mesa-gl \
    glib \
    libstdc++ \
    libffi-dev \
    build-base \
    procps \
    python3-dev \
    nodejs \
    npm \
    font-noto \
    font-noto-cjk \
    py3-opencv

# 4. Python 패키지 설치 (Root 권한 유지)
# uv가 .venv 폴더에 쓸 수 있도록 Root 상태에서 설치합니다.
# opencv-python-headless는 제거했습니다 (위의 py3-opencv로 대체하여 1시간 멈춤 방지)
RUN cd /opt/runners/task-runner-python \
    && uv pip install \
    numpy \
    pandas \
    requests \
    requests[socks] \
    beautifulsoup4 \
    lxml \
    openpyxl \
    xlsxwriter \
    pillow \
    moviepy \
    pysrt \
    ephem \
    korean_lunar_calendar \
    pytz \
    matplotlib \
    solapi \
    hanja \
    user_agent \
    pathlib \
    soundfile \
    elevenlabs \
    WeasyPrint \
    python-multipart \
    yt-dlp

# 5. JS 패키지 설치 (Root 권한 유지)
RUN cd /opt/runners/task-runner-javascript \
    && pnpm add \
    moment \
    uuid

# 6. 설정 파일 복사
COPY n8n-task-runners.json /etc/n8n-task-runners.json

# 7. [핵심] 권한 복구 및 사용자 전환
# Root로 설치한 파일들의 소유권을 runner에게 넘겨줍니다.
RUN chown runner:runner /etc/n8n-task-runners.json \
    && chmod 644 /etc/n8n-task-runners.json \
    && chown -R runner:runner /opt/runners

# 모든 작업이 끝난 뒤에 runner 유저로 전환
USER runner

{
  "task-runners": [
    {
      "runner-type": "javascript",
      "workdir": "/home/runner",
      "command": "/usr/local/bin/node",
      "args": [
        "--disallow-code-generation-from-strings",
        "--disable-proto=delete",
        "/opt/runners/task-runner-javascript/dist/start.js"
      ],
      "health-check-server-port": "5681",
      "allowed-env": [
        "PATH",
        "GENERIC_TIMEZONE",
        "NODE_OPTIONS",
        "N8N_RUNNERS_AUTO_SHUTDOWN_TIMEOUT",
        "N8N_RUNNERS_TASK_TIMEOUT",
        "N8N_RUNNERS_MAX_CONCURRENCY",
        "N8N_SENTRY_DSN",
        "N8N_VERSION",
        "ENVIRONMENT",
        "DEPLOYMENT_NAME",
        "HOME"
      ],
      "env-overrides": {
        "NODE_FUNCTION_ALLOW_BUILTIN": "*",
        "NODE_FUNCTION_ALLOW_EXTERNAL": "*",
        "N8N_RUNNERS_HEALTH_CHECK_SERVER_HOST": "0.0.0.0"
      }
    },
    {
      "runner-type": "python",
      "workdir": "/home/runner",
      "command": "/opt/runners/task-runner-python/.venv/bin/python",
      "args": [
        "-m",
        "src.main"
      ],
      "health-check-server-port": "5682",
      "allowed-env": [
        "PATH",
        "N8N_RUNNERS_BUILTINS_DENY",
        "N8N_RUNNERS_LAUNCHER_LOG_LEVEL",
        "N8N_RUNNERS_AUTO_SHUTDOWN_TIMEOUT",
        "N8N_RUNNERS_TASK_TIMEOUT",
        "N8N_RUNNERS_MAX_CONCURRENCY",
        "N8N_SENTRY_DSN",
        "N8N_VERSION",
        "ENVIRONMENT",
        "DEPLOYMENT_NAME"
      ],
      "env-overrides": {
        "PYTHONPATH": "/opt/runners/task-runner-python",
        "N8N_RUNNERS_BUILTINS_DENY": "",
        "N8N_RUNNERS_STDLIB_ALLOW": "*",
        "N8N_RUNNERS_EXTERNAL_ALLOW": "*"
      }
    }
  ]
}