FROM docker.n8n.io/n8nio/n8n:latest

USER root
RUN mkdir -p /home/node/.n8n && chown -R node:node /home/node/.n8n
USER node

# ── System ──────────────────────────────────────────────────
ENV HOME=/home/node \
    TZ=Asia/Kuala_Lumpur \
    GENERIC_TIMEZONE=Asia/Kuala_Lumpur \
    NODE_OPTIONS=--dns-result-order=ipv4first

# ── n8n Core ────────────────────────────────────────────────
ENV N8N_USER_FOLDER=/home/node/.n8n \
    N8N_HOST=0.0.0.0 \
    N8N_PORT=7860 \
    N8N_PROTOCOL=https \
    N8N_EDITOR_BASE_URL=https://SDZ95-n8n.hf.space/ \
    WEBHOOK_URL=https://SDZ95-n8n.hf.space/ \
    N8N_ENCRYPTION_KEY=your-random-32-char-key \
    N8N_SECURE_COOKIE=false \
    N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true \
    N8N_DIAGNOSTICS_ENABLED=false \
    N8N_VERSION_NOTIFICATIONS_ENABLED=false \
    N8N_HIRING_BANNER_ENABLED=false

# ── Executions ───────────────────────────────────────────────
ENV EXECUTIONS_MODE=regular \
    EXECUTIONS_TIMEOUT=300 \
    EXECUTIONS_TIMEOUT_MAX=600 \
    EXECUTIONS_DATA_SAVE_ON_ERROR=all \
    EXECUTIONS_DATA_SAVE_ON_SUCCESS=none \
    EXECUTIONS_DATA_SAVE_ON_PROGRESS=false \
    EXECUTIONS_DATA_SAVE_MANUAL_EXECUTIONS=true \
    EXECUTIONS_DATA_PRUNE=true \
    EXECUTIONS_DATA_MAX_AGE=336

# ── Logging ──────────────────────────────────────────────────
ENV N8N_LOG_LEVEL=info \
    N8N_LOG_OUTPUT=console

# ── Database (fetched from HF Secrets) ──────────────────────
ENV DB_TYPE=postgresdb \
    DB_POSTGRESDB_PORT=5432 \
    DB_POSTGRESDB_SSL_REJECT_UNAUTHORIZED=false

EXPOSE 7860