AI workflows with a vector database: n8n and Qdrant

# Generated by the ANAROQ Compose Generator: https://anaroq.com/tools/compose-generator
# Engine @anaroq/compose 1.0.0, catalog 2026.10.10, exposure caddy.
# Apps: n8n 1.1.0, qdrant 1.0.0 (supported, not run-tested).
# No secrets in this file: copy .env.example to .env and fill it in before `docker compose up -d`.

services:
  n8n:
    image: "docker.n8n.io/n8nio/n8n:2.42.6"
    restart: "unless-stopped"
    environment:
      DB_TYPE: "postgresdb"
      DB_POSTGRESDB_HOST: "n8n-postgres"
      DB_POSTGRESDB_PORT: "5432"
      DB_POSTGRESDB_DATABASE: "n8n"
      DB_POSTGRESDB_USER: "n8n"
      DB_POSTGRESDB_PASSWORD: "${N8N_DB_PASSWORD:?set N8N_DB_PASSWORD in .env}"
      N8N_ENCRYPTION_KEY: "${N8N_ENCRYPTION_KEY:?set N8N_ENCRYPTION_KEY in .env}"
      N8N_RUNNERS_MODE: "external"
      N8N_RUNNERS_AUTH_TOKEN: "${N8N_RUNNERS_AUTH_TOKEN:?set N8N_RUNNERS_AUTH_TOKEN in .env}"
      N8N_RUNNERS_BROKER_LISTEN_ADDRESS: "0.0.0.0"
      N8N_HOST: "${N8N_DOMAIN:?set N8N_DOMAIN in .env}"
      N8N_PROTOCOL: "https"
      N8N_PROXY_HOPS: "1"
      N8N_WEBHOOK_URL: "https://${N8N_DOMAIN:?set N8N_DOMAIN in .env}/"
    volumes:
      - "n8n-data:/home/node/.n8n"
    networks:
      - "n8n-internal"
      - "edge"
    depends_on:
      n8n-postgres:
        condition: "service_healthy"
  n8n-runner:
    image: "n8nio/runners:2.42.6"
    restart: "unless-stopped"
    environment:
      N8N_RUNNERS_AUTH_TOKEN: "${N8N_RUNNERS_AUTH_TOKEN:?set N8N_RUNNERS_AUTH_TOKEN in .env}"
      N8N_RUNNERS_TASK_BROKER_URI: "http://n8n:5679"
    networks:
      - "n8n-internal"
    depends_on:
      n8n:
        condition: "service_started"
  n8n-postgres:
    image: "postgres:18.6"
    restart: "unless-stopped"
    environment:
      POSTGRES_USER: "n8n"
      POSTGRES_PASSWORD: "${N8N_DB_PASSWORD:?set N8N_DB_PASSWORD in .env}"
      POSTGRES_DB: "n8n"
    volumes:
      - "n8n-postgres-data:/var/lib/postgresql"
    networks:
      - "n8n-internal"
    healthcheck:
      test:
        - "CMD-SHELL"
        - "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"
      interval: "10s"
      timeout: "5s"
      retries: 5
      start_period: "30s"
  qdrant:
    image: "qdrant/qdrant:v1.19.2-unprivileged"
    restart: "unless-stopped"
    environment:
      QDRANT__SERVICE__API_KEY: "${QDRANT_API_KEY:?set QDRANT_API_KEY in .env}"
    volumes:
      - "qdrant-storage:/qdrant/storage"
      - "qdrant-snapshots:/qdrant/snapshots"
    networks:
      - "qdrant-internal"
      - "edge"
    healthcheck:
      test:
        - "CMD"
        - "bash"
        - "-c"
        - "exec 3<>/dev/tcp/127.0.0.1/6333 && printf 'GET /readyz HTTP/1.0\\r\\n\\r\\n' >&3 && grep -q ' 200 ' <&3"
      interval: "10s"
      timeout: "5s"
      retries: 6
      start_period: "30s"
  caddy:
    image: "caddy:2.11.7-alpine"
    restart: "unless-stopped"
    environment:
      N8N_DOMAIN: "${N8N_DOMAIN:?set N8N_DOMAIN in .env}"
      QDRANT_DOMAIN: "${QDRANT_DOMAIN:?set QDRANT_DOMAIN in .env}"
    ports:
      - "80:80"
      - "443:443"
      - "443:443/udp"
    volumes:
      - "./Caddyfile:/etc/caddy/Caddyfile:ro"
      - "caddy-data:/data"
      - "caddy-config:/config"
    networks:
      - "edge"
networks:
  n8n-internal: {}
  qdrant-internal: {}
  edge: {}
volumes:
  n8n-data: {}
  n8n-postgres-data: {}
  qdrant-storage: {}
  qdrant-snapshots: {}
  caddy-data: {}
  caddy-config: {}

# Generated by the ANAROQ Compose Generator: https://anaroq.com/tools/compose-generator
# Engine @anaroq/compose 1.0.0, catalog 2026.10.10, exposure caddy.
# Copy this file to .env and fill in every value. Never commit .env.
# ANAROQ does not create passwords or keys: generate them on your own machine.

# --- n8n ---
# Password of the n8n PostgreSQL user (POSTGRES_PASSWORD).
# Secret, required. For example: openssl rand -hex 24
N8N_DB_PASSWORD=
# Key n8n uses to encrypt stored credentials. Keep it with your backups: without it a restored database cannot decrypt them.
# Secret, required. For example: openssl rand -hex 32
N8N_ENCRYPTION_KEY=
# Shared token between n8n and its task runners.
# Secret, required. For example: openssl rand -hex 32
N8N_RUNNERS_AUTH_TOKEN=
# Public host name of n8n behind the reverse proxy, for example n8n.example.com.
# Required.
N8N_DOMAIN=

# --- qdrant ---
# Admin API key (QDRANT__SERVICE__API_KEY). Every REST and gRPC request must send it in the api-key header; the health endpoints stay open.
# Secret, required. For example: openssl rand -hex 32
QDRANT_API_KEY=
# Public host name of the Qdrant REST API and Web UI behind the reverse proxy, for example vectors.example.com.
# Required.
QDRANT_DOMAIN=

# Generated by the ANAROQ Compose Generator: https://anaroq.com/tools/compose-generator
# Engine @anaroq/compose 1.0.0, catalog 2026.10.10, exposure caddy.
# Each site address comes from .env through the Caddy container's environment.

{$N8N_DOMAIN} {
	reverse_proxy n8n:5678
}

{$QDRANT_DOMAIN} {
	reverse_proxy qdrant:6333
}