Seperate internal webhook vs exposed external webhook!

[sina_falihi]

2 questions. i am using docker compose. Question is 1. How to seperate admin dashboard from webhook instance because i dont wanna expose my dashboard to public 2. I also want some of my webhooks be private for internal services calls but some other like telegram webhook should be exposed to public via https subdomain.
So in summary dashboard and internal webhook should not be exposed for security reason but public weebooks should be expose via e.g trafeik https subdomain webhook!
Can i have multiple main server with different job ? What is solution here

[barn4k]

hello @sina_falihi

Generally, it’s not an n8n task. it’s just published via docker and that’s all.
all job will do the reverse proxy (traefik in your case). You will need a couple of things: dns-names (private and public), path rules, IP rules

Then you’ll need to set the rules:

1. configuration for the public domain: redirect access to these paths only (can also be simplified with regex):

/webhook/
/webhook-test/
/form/
/form-test/
/form-waiting/

You can also add a condition that the path should not have a private/ part, so your private webhooks will be safe (you can change a path for almost any webhooks):

2. configuration for the private domain: redirect access to n8n only from the IPs: your_local_subnet, your_corporate_subnets (e.g. 10.0.0.0/8)
3. The WEBHOOK_URL n8n’s variable can be set to any of your domains, actually. It doesn’t really matter.

I can’t provide exact configurations as I don’t work with traefik, but I have something similar working in AWS