Installing n8n on Hetzner: server type, Docker Compose with Caddy, and why the German server location matters for GDPR-compliant automation.
n8n can be self-hosted on a Hetzner Cloud server via Docker Compose: the official n8n documentation recommends the CPX11 server type for Hetzner deployment, along with the Caddy reverse proxy for TLS encryption and domain connection. Because Hetzner operates German and other European data centers, workflow data, credentials, and connections to third-party systems remain within the EU, which creates the basis for GDPR-compliant automation. Anyone who self-hosts n8n also takes on full responsibility for server maintenance, updates, and security. As of: July 2026.
For most use cases, the smallest cloud server type, CPX11, is sufficient according to the n8n documentation. When creating the server, select the Docker CE image directly in the Apps section so that Docker is already preinstalled. For access to the server, n8n recommends SSH authentication instead of a password, since it is significantly more secure. Only when workflows process very many parallel executions or large amounts of data does a larger server type with more memory become worthwhile.
The installation follows a fixed process, which the official Hetzner guide from n8n describes.
For updates, the same three-step process applies as for any Docker Compose installation: pull the new image, stop the container, restart the container with the new version.
The server location is an important but not the only building block of GDPR compliance. If n8n runs at a German or European Hetzner location, personal data from your workflows generally does not leave the European legal area, provided that connected third-party systems such as email delivery, CRM, or AI services are also chosen accordingly. Full compliance additionally depends on a data processing agreement with Hetzner, a well-thought-out backup strategy, and securing the server against unauthorized access. n8n explicitly points out in its own documentation that self-hosting requires expertise in server configuration, container management, scaling, and security, and that mistakes can lead to data loss, security vulnerabilities, or downtime.
The Hetzner-specific guide relies on Caddy as the reverse proxy, while n8n's general Docker Compose guide uses Traefik. Both variants perform the same task: they handle TLS encryption via Let's Encrypt and forward requests to the n8n container on port 5678. In the generic variant, you configure, among other things, the variables N8N_HOST for the reachable domain, N8N_PROTOCOL for https, WEBHOOK_URL for the public webhook address, and GENERIC_TIMEZONE for the time zone of your planned workflows, as n8n's Docker Compose documentation describes. For productive use with multiple users, switching from the included SQLite database to PostgreSQL is also recommended.
Self-hosting is worthwhile above all for companies that have their own server expertise in-house or commission a fixed contact person for maintenance and security. n8n itself recommends the hosted cloud variant to beginners without experience in server administration, because with self-hosting, updates, backups, and security patches are entirely the user's own responsibility. For SMEs that value German data sovereignty but do not want to build up their own capacity for server operation, we at NordFlux take over the setup and handover of a Hetzner-based n8n server as a fixed-price project, see our n8n services. This gives you a documented, maintainable server without having to familiarize yourself with Caddy configuration and Docker networks.
A Hetzner server in a German or European data center forms a solid basis for GDPR-compliant hosting, because data remains within the European legal area. Full compliance additionally requires a data processing agreement, a documented backup strategy, and careful protection of the server against unauthorized access.
According to the n8n documentation, the smallest cloud server type, CPX11, is sufficient for most usage levels. Only with many parallel workflow executions or large amounts of data does a more powerful server become worthwhile.
Yes, a secure HTTPS connection via Caddy or Traefik requires a subdomain that points to the server IP via a DNS A record. Without a valid domain, no automatic Let's Encrypt certificate can be obtained, which would leave webhooks and access to the interface insecure.
n8n itself names Docker as the variant recommended for most deployments, among other things because it avoids operating system and tooling incompatibilities and simplifies database and environment management. According to the documentation, an installation via npm is rather intended for local development, testing, or simple single-server deployments, not for a productively running Hetzner server.
Founder of NordFlux. Spent four years automating processes at enterprise scale at Dräger, and now brings that depth to the mid-market — pragmatic and with full data sovereignty.
Certifications
n8n Cloud or self-hosting on Hetzner? Cost comparison over 3 years including server and operational effort, with current prices from n8n and Hetzner.
How to install n8n with Docker Compose: Postgres instead of SQLite, .env, volumes and updates step by step.
n8n bills per workflow run, Zapier per action step. The difference determines which plan actually fits your automation.
Choosing the right server type, the Docker Compose setup, and Caddy configuration are just the start; ongoing operation with updates, backups, and GDPR-compliant safeguards is the real task. NordFlux runs managed n8n operation on your Hetzner infrastructure or in our hosting, with monitoring, updates, and tested backups. In an initial conversation, we look at your setup and show where it gets critical in continuous operation.
