Cài n8n lên VPS bằng Docker: tên miền, SSL tự động, webhook đầu tiên (từng lệnh, thử thật)

apt-get update && apt-get install -y ca-certificates curl
install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
chmod a+r /etc/apt/keyrings/docker.asc
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" > /etc/apt/sources.list.d/docker.list
apt-get update && apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

docker --version
Docker version 29.9.2
docker compose version
Docker Compose version v5.7.0

mkdir -p /root/n8n-compose/local-files && cd /root/n8n-compose

DOMAIN_NAME=tenmien.vn
SUBDOMAIN=n8n
GENERIC_TIMEZONE=Asia/Ho_Chi_Minh
[email protected]
# địa chỉ n8n = SUBDOMAIN.DOMAIN_NAME, ví dụ https://n8n.tenmien.vn
# dùng sslip.io: DOMAIN_NAME=203-0-113-25.sslip.io (IP của VPS, dấu chấm thành gạch ngang)

services:
  traefik:
    image: "traefik"
    restart: always
    command:
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.web.http.redirections.entryPoint.to=websecure"
      - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
      - "--entrypoints.websecure.address=:443"
      - "--certificatesresolvers.mytlschallenge.acme.tlschallenge=true"
      - "--certificatesresolvers.mytlschallenge.acme.email=${SSL_EMAIL}"
      - "--certificatesresolvers.mytlschallenge.acme.storage=/letsencrypt/acme.json"
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - traefik_data:/letsencrypt
      - /var/run/docker.sock:/var/run/docker.sock:ro

  n8n:
    image: n8nio/n8n
    restart: always
    ports:
      - "127.0.0.1:5678:5678"
    labels:
      - traefik.enable=true
      - traefik.http.routers.n8n.rule=Host(`${SUBDOMAIN}.${DOMAIN_NAME}`)
      - traefik.http.routers.n8n.tls=true
      - traefik.http.routers.n8n.entrypoints=web,websecure
      - traefik.http.routers.n8n.tls.certresolver=mytlschallenge
      - traefik.http.middlewares.n8n.headers.SSLRedirect=true
      - traefik.http.middlewares.n8n.headers.STSSeconds=315360000
      - traefik.http.middlewares.n8n.headers.browserXSSFilter=true
      - traefik.http.middlewares.n8n.headers.contentTypeNosniff=true
      - traefik.http.middlewares.n8n.headers.forceSTSHeader=true
      - traefik.http.middlewares.n8n.headers.SSLHost=${DOMAIN_NAME}
      - traefik.http.middlewares.n8n.headers.STSIncludeSubdomains=true
      - traefik.http.middlewares.n8n.headers.STSPreload=true
      - traefik.http.routers.n8n.middlewares=n8n@docker
    environment:
      - N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
      - N8N_HOST=${SUBDOMAIN}.${DOMAIN_NAME}
      - N8N_PORT=5678
      - N8N_PROTOCOL=https
      - NODE_ENV=production
      - N8N_WEBHOOK_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/
      - GENERIC_TIMEZONE=${GENERIC_TIMEZONE}
      - TZ=${GENERIC_TIMEZONE}
      - N8N_RESTRICT_FILE_ACCESS_TO=/files
    volumes:
      - n8n_data:/home/node/.n8n
      - ./local-files:/files

volumes:
  n8n_data:
  traefik_data:

docker compose up -d
 Container n8n-compose-traefik-1 Started
 Container n8n-compose-n8n-1 Started
# đo thật: 73 giây (kéo ảnh n8n 1,94 GB + traefik 250 MB rồi chạy)
docker compose ps
n8n       n8nio/n8n   Up
traefik   traefik     Up
docker compose logs n8n | grep -i "version\|editor"
Version: 2.46.4
Editor is now accessible via: ...

curl "https://n8n.tenmien.vn/webhook/xin-chao?ten=CloudNest"
{"loi_chao":"Xin chào từ n8n trên VPS","thoi_gian":"03/11/2026 22:39:31","ten":"CloudNest"}   0,32 s
{"loi_chao":"Xin chào từ n8n trên VPS","thoi_gian":"03/11/2026 22:39:32","ten":"CloudNest"}   0,19 s
{"loi_chao":"Xin chào từ n8n trên VPS","thoi_gian":"03/11/2026 22:39:32","ten":"CloudNest"}   0,17 s

cd /root/n8n-compose
docker compose pull
docker compose up -d
# đọc ghi chú phát hành của n8n trước khi nâng bản lớn (ví dụ 1.x lên 2.x); sao lưu trước khi nâng

cd /root/n8n-compose
docker compose stop n8n
docker run --rm -v n8n-compose_n8n_data:/data:ro -v $PWD:/backup alpine tar czf /backup/n8n-data-$(date +%F).tar.gz -C /data .
docker compose start n8n

docker compose stop n8n
docker run --rm -v n8n-compose_n8n_data:/data -v $PWD:/backup alpine sh -c "rm -rf /data/* /data/.[!.]* 2>/dev/null; tar xzf /backup/n8n-data-2026-11-03.tar.gz -C /data"
docker compose start n8n