Different URL for Webhook in Cloudron
-
Hello @firmansi
Some follow-up questions. Since this might be something we should solve on a platform level instead of specific to N8N.How are sensitive web apps access protected these days?
VPN, Firewall, Proxy?With Cloudron 10 VPN protection for apps is introduced.
I just tested that with N8N andmultiDomainandN8N_WEBHOOK_URL.
When VPN protection is enabled for the N8N app you can only access N8N with the VPN and alsopostto a webhook node only works when connected to the VPN.What if we'd make it possible to configure VPN protection more precisely?
For example protecting domains, subdomains, aliases from an app individually.
This way with the N8N example, the main domain could be protected by VPN and the webhook alias not.
APOSTagainst the webhook alias would go through but when visiting the alias it redirects to the main domain which is then protected by the VPN and displays you need a VPN.
This feature could be expanded even more in depth like protecting certain paths from an app.
One example I could think of is the WordPress login page, that could then be protected by the VPN.Do you people have thoughts on that?
On another topic with N8N and
N8N_WEBHOOK_URL.
Wildcard domains are actually working.
You could configure e.g.:*.webhook.cloudron.devandwebhook.cloudron.devas an alias for the N8N app and then set:export N8N_WEBHOOK_URL="https://webhook.cloudron.dev/"Then you can do stuff like:
curl -sk -X POST "https://that-is-one-random-subdomain.webhook.cloudron.dev/webhook-test/b419e0e2-d7df-4c57-9750-37d6a2074b9c" \ -H "Content-Type: application/json" \ -d '{"IsCloudronAwesome": true}' {"message":"Workflow was started"}@james These days i use Cloudflare Zero trust to protect certain domains from public access, for example like in wordpress, I protect the access to wp admin with cloudflare, not some kind of vpn that need another private layer to connect with (as far as I know that how VPN Works)
I have been using N8N for years, and frankly never had once the webhook of N8N exposed to public on front end code, always use only in backend.
What you explain is really nice , but to my understanding of VPNs is that they require a client for access and introduce overhead, which can reduce overall connection speed
I think a proxy firewall solution is more interesting, like what Cloudflare does. But when I first saw the article about using another domain for webhooks, I thought it was similar to Typebot's setup, where the console and the chat window use different domains.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login