From 12d59cb6f90ae3a09450ee40ca30d6a4fea48704 Mon Sep 17 00:00:00 2001
From: mr-forust <vzlomdsisma@gmail.com>
Date: Wed, 10 Jun 2026 23:32:59 +0200
Subject: [PATCH] feat(k8s): n8n

---
 n8n/k8s/config.yaml    | 14 ++++++++
 n8n/k8s/ingress.yaml   | 47 +++++++++++++++++++++++++
 n8n/k8s/n8n.yaml       | 78 ++++++++++++++++++++++++++++++++++++++++++
 n8n/k8s/namespace.yaml |  4 +++
 4 files changed, 143 insertions(+)
 create mode 100644 n8n/k8s/config.yaml
 create mode 100644 n8n/k8s/ingress.yaml
 create mode 100644 n8n/k8s/n8n.yaml
 create mode 100644 n8n/k8s/namespace.yaml

diff --git a/n8n/k8s/config.yaml b/n8n/k8s/config.yaml
new file mode 100644
index 0000000..25f15b6
--- /dev/null
+++ b/n8n/k8s/config.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: n8n-config
+  namespace: n8n
+data:
+  N8N_PORT: "5678"
+  N8N_RUNNERS_ENABLED: "true"
+  NODE_ENV: production
+  GENERIC_TIMEZONE: Europe/Bratislava
+  TZ: Europe/Bratislava
+  N8N_SECURE_COOKIE: "false"
+  N8N_COMMUNITY_PACKAGES_ALLOW_TOOL_USAGE: "true"
+  N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS: "true"
diff --git a/n8n/k8s/ingress.yaml b/n8n/k8s/ingress.yaml
new file mode 100644
index 0000000..bd0329e
--- /dev/null
+++ b/n8n/k8s/ingress.yaml
@@ -0,0 +1,47 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: n8n-prod
+  namespace: n8n
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`n8n.forust.xyz`)
+      kind: Rule
+      services:
+        - name: n8n-service
+          port: 5678
+  tls:
+    certResolver: letsencrypt
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: n8n-local
+  namespace: n8n
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`n8n.workstation.internal`)
+      kind: Rule
+      services:
+        - name: n8n-service
+          port: 5678
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: n8n-dev
+  namespace: n8n
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`n8n.gigaforust.internal`)
+      kind: Rule
+      services:
+        - name: n8n-service
+          port: 5678
diff --git a/n8n/k8s/n8n.yaml b/n8n/k8s/n8n.yaml
new file mode 100644
index 0000000..f60ff47
--- /dev/null
+++ b/n8n/k8s/n8n.yaml
@@ -0,0 +1,78 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: n8n-service
+  namespace: n8n
+spec:
+  selector:
+    app: n8n
+  ports:
+    - port: 5678
+      targetPort: 5678
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: n8n-deployment
+  namespace: n8n
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: n8n
+  template:
+    metadata:
+      labels:
+        app: n8n
+    spec:
+      containers:
+        - name: n8n
+          image: docker.n8n.io/n8nio/n8n
+          envFrom:
+            - configMapRef:
+                name: n8n-config
+          ports:
+            - containerPort: 5678
+          volumeMounts:
+            - name: n8n-node-data
+              mountPath: /home/node/.n8n
+            - name: n8n-files
+              mountPath: /files
+          resources:
+            requests:
+              memory: "512Mi"
+              cpu: "150m"
+            limits:
+              memory: "5Gi"
+              cpu: "1500m"
+      volumes:
+        - name: n8n-node-data
+          persistentVolumeClaim:
+            claimName: n8n-node-pvc
+        - name: n8n-files
+          persistentVolumeClaim:
+            claimName: n8n-files-pvc
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: n8n-node-pvc
+  namespace: n8n
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 2Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: n8n-files-pvc
+  namespace: n8n
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
diff --git a/n8n/k8s/namespace.yaml b/n8n/k8s/namespace.yaml
new file mode 100644
index 0000000..8389695
--- /dev/null
+++ b/n8n/k8s/namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: n8n