自托管AI

Prerequisites before Installation

1. Domain Name: You need a registered domain name (e.g., yourdomain.com). 2. DNS Configuration: Before running the installation script, you must configure DNS A-record for your domain, pointing to the public IP address of the server where you'll install this system. Replace yourdomain.com with your actual domain: - Wildcard Record: A *.yourdomain.com -> YOUR_SERVER_IP 3. VPS (Virtual Private Server): A dedicated VPS with a public IP address is required. Home servers, shared hosting, or localhost setups are not supported. - Operating System: Ubuntu 24.04 LTS, 64-bit - For a minimal setup with n8n, Monitoring, Databasus and Portainer: 4 GB Memory / 2 CPU Cores / 40 GB Disk Space - For running all available services: at least 20 GB Memory / 4 CPU Cores / 60 GB Disk Space

Why This Setup?

This installer helps you create your own powerful, private AI workshop. Imagine having a suite of tools at your fingertips to:

• Automate repetitive tasks.
• Build smart assistants tailored to your needs.
• Analyze information and gain insights.
• Generate creative content.

This setup provides a comprehensive suite of cutting-edge services, all pre-configured to work together. Key advantages include:

• Rich Toolset: Get a curated collection of powerful open-source tools for AI development, automation, and monitoring, all in one place.
• Scalable n8n Performance: n8n runs in queue mode by default, leveraging Redis for task management and Postgres for data storage. You can dynamically specify the number of n8n workers and task runners during installation, allowing for robust parallel processing of your workflows to handle demanding loads.
• Full Control: All of this is hosted by you, giving you full control over your data, operations, and how resources are allocated.

Installation

Running the Install

The recommended way to install is using the provided main installation script.

1. Connect to your server via SSH.
2. Run the following command:

    git clone https://github.com/kossakovsky/selfhost-ai && cd selfhost-ai && sudo bash ./scripts/install.sh
    

This single command automates the entire setup process, including:

• Preparing your system (updates, firewall configuration, and basic security enhancements like brute-force protection).
• Installing Docker and Docker Compose (tools for running applications in isolated environments).
• Generating a configuration file (.env) with necessary secrets and your domain settings.
• Launching all the services.

During the installation, the script will prompt you for:

1. Your primary domain name (Required, e.g., yourdomain.com). This is the domain for which you've configured the wildcard DNS record.
2. Your email address (Required, used for service logins like Flowise, Supabase dashboard, Grafana, and for SSL certificate registration with Let's Encrypt).
3. An optional OpenAI API key (Not required. If provided, it can be used by Supabase AI features and Crawl4ai. Press Enter to skip).
4. Whether you want to import ~300 ready-made n8n community workflows (y/n, Optional. This can take 20-30 minutes, depending on your server and network speed).
5. The number of n8n workers you want to run (Required, e.g., 1, 2, 3, 4. This determines how many workflows can be processed in parallel. Each worker automatically gets its own dedicated task runner sidecar for executing Code nodes. Defaults to 1 if not specified).
6. A Service Selection Wizard will then appear, allowing you to choose which of the available services (like Flowise, Supabase, Qdrant, Open WebUI, etc.) you want to deploy. Core services (Caddy, Postgres, Redis) will be set up to support your selections.

Upon successful completion, the script will display a summary report. This report contains the access URLs and credentials for the deployed services. Save this information in a safe place!

Setup Instructions

See the Cloudflare Tunnel guide: cloudflare-instructions.md

Pre-installed System Tools in n8n

The custom n8n Docker image (n8n/Dockerfile.n8n) includes the following system-level tools:

• ffmpeg: A powerful multimedia framework for converting, recording, and streaming audio and video. Use it via the Execute Command node in n8n workflows for tasks like:
• Converting video/audio formats (e.g., MP4 to MP3)
• Extracting audio from video files
• Resizing or compressing media files
• Generating thumbnails from videos

Cleaning up Docker

If you need to free up disk space, you can run the Docker cleanup command. This removes all unused Docker containers, images, and volumes.

make clean

This can be useful for removing old images and freeing up space, but be aware that it will remove all unused data.

Installation & Updates

Quick Start and Usage

After successful installation, your services are up and running! Here's how to get started:

1. Access Your Services: The installation script provided a summary report with all access URLs and credentials. Please refer to that report. The main services will be available at the following addresses (replace yourdomain.com with your actual domain):

• n8n: n8n.yourdomain.com (Log in with the email address you provided during installation and the initial password from the summary report. You may be prompted to change this password on first login.)
• n8n-MCP: n8n-mcp.yourdomain.com (MCP endpoint at /mcp. Every request must send Authorization: Bearer <N8N_MCP_AUTH_TOKEN> - the token is on the Welcome Page - so a browser visit returns 401 by design. Connect with npx -y mcp-remote https://n8n-mcp.yourdomain.com/mcp --header "Authorization: Bearer <token>", or keep the token out of your shell history and process list with --header-file <path> pointing at a file containing Authorization: Bearer <token>. Starts in documentation-only mode; to also manage workflows, create an API key in n8n under Settings -> n8n API, set N8N_API_KEY in .env and run make restart. Note that outside n8n Enterprise an API key has full account access.)
• Appsmith: appsmith.yourdomain.com (Low-code app builder)
• ComfyUI: comfyui.yourdomain.com (Node-based Stable Diffusion UI)
• Databasus: databasus.yourdomain.com
• Dify: dify.yourdomain.com (AI application development platform with comprehensive LLMOps capabilities)
• Docling: docling.yourdomain.com (Universal document converter with REST API; web UI available at /ui)
• Flowise: flowise.yourdomain.com (Log in with the email address you provided during installation and the initial password from the summary report.)
• Grafana: grafana.yourdomain.com
• InvokeAI: invokeai.yourdomain.com (Stable Diffusion studio; download a model via the Model Manager on first visit)
• Langfuse: langfuse.yourdomain.com
• Letta: letta.yourdomain.com
• LibreTranslate: translate.yourdomain.com
• LightRAG: lightrag.yourdomain.com
• Neo4j: neo4j.yourdomain.com
• NocoDB: nocodb.yourdomain.com
• Ollama: ollama.yourdomain.com (Optional local-LLM API; every request must send Authorization: Bearer <OLLAMA_CADDY_API_TOKEN>. A leaked token grants full control — including pulling/deleting models — not just inference.)
• Open WebUI: webui.yourdomain.com
• PaddleOCR: paddleocr.yourdomain.com
• Portainer: portainer.yourdomain.com (Protected by Caddy basic auth; on first login, complete Portainer admin setup)
• Postiz: postiz.yourdomain.com
• Prometheus: prometheus.yourdomain.com (Typically used as a data source for Grafana)
• Qdrant: qdrant.yourdomain.com
• RAGApp: ragapp.yourdomain.com
• RAGFlow: ragflow.yourdomain.com
• SearXNG: searxng.yourdomain.com
• Supabase (Dashboard): supabase.yourdomain.com
• Uptime Kuma: uptime-kuma.yourdomain.com (Uptime monitoring dashboard)
• WAHA: waha.yourdomain.com (WhatsApp HTTP API; engines: WEBJS, NOWEB, GOWS)
• Weaviate: weaviate.yourdomain.com

AI Templates (Examples from n8n.io)

• AI Agent Chat
• AI chat with any data source (using the n8n workflow tool)
• Chat with OpenAI Assistant (by adding a memory)
• Use an open-source LLM (via HuggingFace)
• Chat with PDF docs using AI (quoting sources)
• AI agent that can scrape webpages
• Tax Code Assistant
• Breakdown Documents into Study Notes with MistralAI and Qdrant
• Financial Documents Assistant using Qdrant and MistralAI
• Recipe Recommendations with Qdrant and Mistral

Optional Internal Utility: Python Runner

• What it is: An internal-only service to run your custom Python code inside the same Docker network as your other services (n8n, Postgres, Qdrant, etc.). No external ports are exposed, and it is not proxied by Caddy.
• How to enable: Select “Python Runner” in the Service Selection Wizard during install/update, or add the profile manually: COMPOSE_PROFILES=...,python-runner.
• Where to put code: Place your Python files in python-runner/. The default entry point is python-runner/main.py.
• Dependencies: Add them to python-runner/requirements.txt; they will be installed automatically on container start.

1. Explore n8n:

• Log in to your n8n instance. This is your central hub for workflow automation.
• If you chose to import the community workflows during installation, you'll find over 300 examples in your "Workflows" section. These are a great way to learn and get ideas.
• Start building your first workflow! You have access to over 400 integrations and powerful AI tools.

1. Utilize Integrated AI Tools:

• Connect n8n with Vector Stores: Use n8n to connect to Qdrant (accessible via its own endpoint if needed, typically qdrant.yourdomain.com), Supabase, or Weaviate (weaviate.yourdomain.com) to store and retrieve information for your AI tasks like Retrieval Augmented Generation (RAG).
• Build with Flowise: Access Flowise at flowise.yourdomain.com to create AI agents and applications. You can trigger Flowise agents from n8n or vice-versa.
• Interact with Open WebUI: Use Open WebUI at webui.yourdomain.com as a chat interface for your local AI models or n8n agents (e.g., using the n8n_pipe integration if configured).
• Configure LLMs: If you wish to use large language models (LLMs) from providers like OpenAI, Anthropic, or locally via Ollama (if installed), you can easily configure credentials and connections within n8n nodes or in services like Flowise and Open WebUI.

4. Check Monitoring (Optional): - Visit Grafana (grafana.yourdomain.com) to see dashboards monitoring your system's performance (data sourced from Prometheus). - The n8n Monitoring dashboard includes a Workflow Executions section, and four alert rules are pre-provisioned: n8n workflow failed (non-manual executions only, so testing in the editor does not page), n8n workflow stalled (an active workflow with no success for 24 hours), n8n workflow has no recorded success (active for 24 hours without ever succeeding since monitoring started) and n8n metrics target down. The 24-hour thresholds are global, so workflows that run less than daily will alert; tune them in grafana/provisioning/alerting/n8n-workflows.yml. Alerts follow Grafana's default notification policy, whose built-in email contact point delivers nothing without SMTP: create a contact point (Telegram, Slack, Email with GF_SMTP_*, ...) under Alerting → Contact points and select it in Alerting → Notification policies.

Secure Access with Cloudflare Tunnel (Optional)

Cloudflare Tunnel provides zero-trust access to your services without exposing any ports on your server. All traffic is routed through Cloudflare's secure network, providing DDoS protection and hiding your server's IP address.

Custom Configuration That Survives Updates

make update resets tracked files (like Caddyfile and docker-compose.yml) to the latest version, so never edit them directly. Instead, use the dedicated extension points — the files you create there are gitignored, so they are preserved across updates:

• Custom Caddy entries (e.g. reverse proxy for a service running outside this stack): drop a site-*.conf file into caddy-addon/. It is imported automatically by the main Caddyfile. See caddy-addon/README.md for examples.
• Docker Compose overrides (change any service property): create a docker-compose.override.yml in the project root. It is picked up automatically with the highest precedence.
• Settings: values you set in .env are preserved by the updater (except GOST_NO_PROXY, which is regenerated so it always covers newly added services).

Diagnostics & Configuration

Run make help for the full list of available commands.

Included Community Workflows

Get started quickly with a vast library of pre-built automations (optional import during setup)! This collection includes over 300 workflows covering a wide range of use cases:

🚦 What's inside?

• AI Agents & Chatbots: RAG, LLM, LangChain, Ollama, OpenAI, Claude, Gemini, and more
• Gmail & Outlook: Smart labeling, auto-replies, PDF handling, and email-to-Notion
• HR, E-commerce, IT, Security, Research, and more!
• Notion, Airtable, Google Sheets: Data sync, AI summaries, knowledge bases
• PDF, Image, Audio, Video: Extraction, summarization, captioning, speech-to-text
• Slack, Mattermost: Ticketing, feedback analysis, notifications
• Social Media: LinkedIn, Pinterest, Instagram, Twitter/X, YouTube, TikTok automations
• Telegram, WhatsApp, Discord: Bots, notifications, voice, and image workflows
• WordPress, WooCommerce: AI content, chatbots, auto-tagging

Troubleshooting

Here are solutions to common issues you might encounter: