<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>SerhiiLabs</title><description>Production-grade automation, backend development, and open-source contributions.</description><link>https://serhiilabs.dev/</link><item><title>Building an MCP server for n8n: connect Claude and Cursor to your workflows</title><link>https://serhiilabs.dev/n8n-automation/building-an-mcp-server-for-n8n/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/building-an-mcp-server-for-n8n/</guid><description>&quot;Building an MCP server for n8n&quot; is at least three different tasks. How to tell the native server, the Server Trigger node, and the community n8n-mcp server apart, and connect Claude and Cursor to self-hosted n8n.</description><pubDate>Sun, 14 Jun 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item><item><title>n8n user management: what Community gives you, and what each tier really costs</title><link>https://serhiilabs.dev/n8n-automation/n8n-user-management-tiers/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/n8n-user-management-tiers/</guid><description>A self-hoster&apos;s map of n8n user management across Community, Business, and Enterprise. Where the real paywalls sit, which capability forces which tier, and the one place the docs and the license check disagree.</description><pubDate>Mon, 08 Jun 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item><item><title>API tokens and credential security in self-hosted n8n: storage, scoping, and rotation</title><link>https://serhiilabs.dev/n8n-automation/n8n-credential-security/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/n8n-credential-security/</guid><description>Self-hosted n8n holds three different secrets, not one. A practical guide to where each lives, who can reach it, how it rotates, and which controls are gated behind paid tiers.</description><pubDate>Sun, 07 Jun 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item><item><title>n8n project RBAC vs tenant isolation: when you need separate instances</title><link>https://serhiilabs.dev/n8n-automation/n8n-rbac-tenant-isolation/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/n8n-rbac-tenant-isolation/</guid><description>Project roles control who can act inside one n8n instance; they are not a tenancy boundary. What Enterprise RBAC gives you, what every project still shares, and when multi-client work needs separate instances.</description><pubDate>Sat, 06 Jun 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item><item><title>SSO for Self-Hosted n8n with OIDC: Google Workspace, Authentik, and Keycloak</title><link>https://serhiilabs.dev/n8n-automation/n8n-oidc-sso/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/n8n-oidc-sso/</guid><description>OIDC single sign-on for self-hosted n8n 2.x: the Enterprise-license gate, the PKCE and state limitations, IdP-driven role mapping, why Google Workspace is the weakest source, and a break-glass recovery plan.</description><pubDate>Fri, 05 Jun 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item><item><title>n8n Permissions End to End: Account Types, Project Roles, and the Community Cliff</title><link>https://serhiilabs.dev/n8n-automation/n8n-permissions-end-to-end/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/n8n-permissions-end-to-end/</guid><description>Effective access in n8n is a global account type plus a per-project role. What Owner, Admin, Member, and the project roles each control, and how little of it exists on the free Community edition.</description><pubDate>Fri, 05 Jun 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item><item><title>Migrating from n8n Cloud to Self-Hosted Without Breaking Workflows</title><link>https://serhiilabs.dev/n8n-automation/migrating-from-n8n-cloud-to-self-hosted/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/migrating-from-n8n-cloud-to-self-hosted/</guid><description>A repeatable, parallel cutover for moving off n8n Cloud on the 2.x line: what moves cleanly, what has to be rebuilt, and how to flip traffic with no data loss and no downtime.</description><pubDate>Thu, 04 Jun 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item><item><title>n8n Monitoring with Prometheus and Alertmanager: Alerts That Actually Fire</title><link>https://serhiilabs.dev/n8n-automation/n8n-monitoring-prometheus-alertmanager/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/n8n-monitoring-prometheus-alertmanager/</guid><description>Most published n8n alert rules never fire because they use series names n8n does not emit. Here is what /metrics really exposes, the failure-rate alert that works natively in 2.x, and the rules to copy.</description><pubDate>Wed, 03 Jun 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item><item><title>Zero-Downtime Deployments for Self-Hosted n8n: What&apos;s Achievable and What Isn&apos;t</title><link>https://serhiilabs.dev/n8n-automation/zero-downtime-n8n-deployments/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/zero-downtime-n8n-deployments/</guid><description>An upgrade procedure for queue-mode n8n that drops zero webhooks and loses zero executions, plus an honest account of where true zero-downtime stops and why the right path depends on whether the release ships database migrations.</description><pubDate>Wed, 03 Jun 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item><item><title>Automated backups for a self-hosted n8n PostgreSQL database (that restore)</title><link>https://serhiilabs.dev/n8n-automation/n8n-postgres-backups/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/n8n-postgres-backups/</guid><description>A pg_dump of your n8n database is necessary but not sufficient. The encryption key lives outside the database, and the only backup that counts is one you have restored.</description><pubDate>Mon, 01 Jun 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item><item><title>n8n Environment Variables and Secrets Management Without Vault Overhead</title><link>https://serhiilabs.dev/n8n-automation/n8n-without-vault/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/n8n-without-vault/</guid><description>A practical, Vault-free way to handle secrets in self-hosted n8n: the encryption key, .env and Docker secrets for infrastructure, native credentials for workflows, plus the v2.x gotchas most tutorials miss.</description><pubDate>Sun, 31 May 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item><item><title>Self-hosting n8n: production Docker setup with backups and monitoring</title><link>https://serhiilabs.dev/n8n-automation/self-hosting-n8n/</link><guid isPermaLink="true">https://serhiilabs.dev/n8n-automation/self-hosting-n8n/</guid><description>Complete Docker Compose setup for self-hosted n8n: PostgreSQL 18, Caddy with auto-HTTPS, external task runners, off-site backups to GCS/S3, monitoring, and restore procedure.</description><pubDate>Sun, 24 May 2026 00:00:00 GMT</pubDate><category>n8n-automation</category></item></channel></rss>