Quick answer: SSRF protection in n8n is off unless you switched it on. N8N_SSRF_PROTECTION_ENABLED defaults to false, so on a stock instance a workflow can send an HTTP request to your private network, to localhost, or to your cloud provider’s metadata endpoint. Setting it to true blocks those ranges. The obvious reason for shipping it…
Quick answer: n8n has two encryption keys, and the one the guides you will find tell you to rotate is the one n8n says never changes. N8N_ENCRYPTION_KEY is the instance master key, set at deployment. It exists to protect the data encryption keys, and those are what rotation actually replaces, behind the flag N8N_ENV_FEAT_ENCRYPTION_KEY_ROTATION. If…
Quick answer: the version bump does not touch your data. One change in n8n 2.0 does, and it is the one nobody warns you about. n8n 2.0 dropped MySQL and MariaDB as storage backends. If your instance runs on either, upgrading is a database migration, not a version bump, and pulling the old image tag…
Quick answer: turning task runners on moves Code node execution out of the main n8n process, which is real isolation. It does not give you the hardened container n8n’s own hardening page describes. That page asks for a distroless image as UID 65532, a read-only root filesystem and an AppArmor profile. The default image is…
SE Ranking vs Semrush in 2026: verdict by team type, per-1,000-keyword cost math, AI visibility toolkits, and accuracy data from our 30-day test.
The best vps for coolify in 2026 is not whichever provider lists the cheapest 2GB plan on their pricing page. Most VPS roundups for Coolify pick providers based on raw price-per-GB and call it done. That approach fails the moment you actually load Coolify with apps, because Coolify itself consumes 300-400MB of RAM before your…
Coolify v4.0, released 2026-05-18, ships a built-in MCP server that exposes 12 tools directly to Claude Code. Connect once, and you can deploy services, link databases, configure domains, and pull logs, all from a single Claude prompt. No browser tab required. If you’re running what Coolify actually is, a self-hosted PaaS on your own VPS,…
Most people running Coolify spend zero time thinking about their reverse proxy, because they don’t need to. Traefik ships as the built-in default in Coolify and handles SSL termination, hostname routing, and certificate renewal without any configuration. It works. The question this guide answers is: when does it stop being enough? I’ve run six production…
If you followed our Coolify VPS install guide to get your server running, this article picks up exactly where Step 6 left off. That section gave you a working R2 connection and a cron job. This guide gives you the full picture: storage target selection, built-in Postgres backup configuration, Restic full-server coverage, and a monthly…
If you want to install Coolify on a VPS without wading through outdated forum posts, this guide covers the exact steps we ran on four cloud providers in May 2026 using Coolify v4.0, released on May 18, 2026. The one-line installer takes under five minutes. You’ll have a domain, SSL, backups, a hardened server, and…