Update Dockerfile

Dockerfile

@@ -1,32 +1,30 @@
 FROM node:24-alpine
 
-# Set user to root for installation
-USER root
-# Arguments that can be passed at build time
+# Arguments that can be passed at build time (used as defaults for ENV)
 ARG N8N_PATH=/usr/local/lib/node_modules/n8n
-ARG BASE_PATH=/root/.n8n
+ARG BASE_PATH=/home/n8n/.n8n  # User-specific home directory
 ARG DATABASE_PATH=$BASE_PATH/database
 ARG CONFIG_PATH=$BASE_PATH/config
 ARG WORKFLOWS_PATH=$BASE_PATH/workflows
 ARG LOGS_PATH=$BASE_PATH/logs
-ARG N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=$N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS
+ARG N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS
 ARG N8N_RUNNERS_ENABLED=true
 ARG allowVulnerableTags=true
-ARG N8N_HOST=$N8N_HOST
-ARG N8N_PORT=$N8N_PORT
+ARG N8N_HOST
+ARG N8N_PORT
 ARG N8N_PROTOCOL=https
-ARG N8N_EDITOR_BASE_URL=$N8N_EDITOR_BASE_URL
-ARG WEBHOOK_URL=$WEBHOOK_URL
-ARG GENERIC_TIMEZONE=$GENERIC_TIMEZONE
-ARG TZ=$TZ
-ARG N8N_ENCRYPTION_KEY=$N8N_ENCRYPTION_KEY
-ARG DB_TYPE=$DB_TYPE
-ARG DB_POSTGRESDB_SCHEMA=$DB_POSTGRESDB_SCHEMA
-ARG DB_POSTGRESDB_HOST=$DB_POSTGRESDB_HOST
-ARG DB_POSTGRESDB_DATABASE=$DB_POSTGRESDB_DATABASE
-ARG DB_POSTGRESDB_PORT=$DB_POSTGRESDB_PORT
-ARG DB_POSTGRESDB_USER=$DB_POSTGRESDB_USER
-ARG DB_POSTGRESDB_PASSWORD=$DB_POSTGRESDB_PASSWORD
+ARG N8N_EDITOR_BASE_URL
+ARG WEBHOOK_URL
+ARG GENERIC_TIMEZONE
+ARG TZ
+ARG N8N_ENCRYPTION_KEY
+ARG DB_TYPE
+ARG DB_POSTGRESDB_SCHEMA=public
+ARG DB_POSTGRESDB_HOST
+ARG DB_POSTGRESDB_DATABASE
+ARG DB_POSTGRESDB_PORT=5432
+ARG DB_POSTGRESDB_USER
+ARG DB_POSTGRESDB_PASSWORD
 
 # Install system dependencies
 RUN apk add --no-cache \
@@ -43,15 +41,37 @@ RUN apk add --no-cache \
     ffmpeg \
     yt-dlp
 
-# Set environment variables
+# Set environment variables (using ARG as defaults)
 ENV PUPPETEER_SKIP_DOWNLOAD=true
 ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
+ENV N8N_HOST=${N8N_HOST}
+ENV N8N_PORT=${N8N_PORT}
+ENV N8N_PROTOCOL=${N8N_PROTOCOL}
+ENV N8N_EDITOR_BASE_URL=${N8N_EDITOR_BASE_URL}
+ENV WEBHOOK_URL=${WEBHOOK_URL}
+ENV GENERIC_TIMEZONE=${GENERIC_TIMEZONE}
+ENV TZ=${TZ}
+ENV N8N_ENCRYPTION_KEY=${N8N_ENCRYPTION_KEY}
+ENV DB_TYPE=${DB_TYPE}
+ENV DB_POSTGRESDB_SCHEMA=${DB_POSTGRESDB_SCHEMA}
+ENV DB_POSTGRESDB_HOST=${DB_POSTGRESDB_HOST}
+ENV DB_POSTGRESDB_DATABASE=${DB_POSTGRESDB_DATABASE}
+ENV DB_POSTGRESDB_PORT=${DB_POSTGRESDB_PORT}
+ENV DB_POSTGRESDB_USER=${DB_POSTGRESDB_USER}
+ENV DB_POSTGRESDB_PASSWORD=${DB_POSTGRESDB_PASSWORD}
 
-# Install n8n globally
+# Create n8n user and group
+RUN addgroup -S n8n && adduser -S -G n8n n8n
+
+# Install n8n globally (as root)
 RUN npm install -g [email protected]
-# Create necessary directories
+
+# Create necessary directories and set ownership
 RUN mkdir -p $DATABASE_PATH $CONFIG_PATH $WORKFLOWS_PATH $LOGS_PATH \
-    && chmod -R 777 $BASE_PATH
+    && chown -R n8n:n8n $BASE_PATH
+
+# Switch to n8n user
+USER n8n
 
 # Set working directory
 WORKDIR /data
@@ -66,3 +86,4 @@ CMD ["n8n", "start"]
 
 
 
+