# n8n — First-Time Setup

## Prerequisites

- DNS: `n8n.<DOMAIN_SUFFIX>` must resolve to the server (wildcard covers this)
- No external dependencies required for default SQLite setup

## Steps

1. **Create the app:**
   ```bash
   abra app new n8n --server <SERVER> --domain n8n.<DOMAIN_SUFFIX> --no-input
   ```

2. **No secrets needed** for the default SQLite setup. If enabling postgres (`compose.postgres.yml`), generate secrets:
   ```bash
   abra app secret generate n8n.<DOMAIN_SUFFIX> --all -m --no-input
   ```

3. **Deploy:**
   ```bash
   abra app deploy n8n.<DOMAIN_SUFFIX> --chaos --force --no-input
   ```

4. **First-time setup:** Open `https://n8n.<DOMAIN_SUFFIX>` in a browser and complete the admin account creation wizard.

## Optional overlays

Edit the app env file to enable optional features:

- **Postgres backend:** Append `:compose.postgres.yml` to `COMPOSE_FILE` and set `SECRET_DB_PASSWORD_VERSION=v1`
- **SSO (traefik-forward-auth):** Append `:compose.sso.yml` to `COMPOSE_FILE`
- **Basic auth:** Append `:compose.basicauth.yml` to `COMPOSE_FILE` and set `N8N_BASIC_AUTH_ACTIVE=true`, `N8N_BASIC_AUTH_USER=username`, `SECRET_ADMIN_PASSWORD_VERSION=v1`