Update start.sh

start.sh

@@ -133,46 +133,79 @@ else
 fi
 
 
-
 # --- n8n Start (as n8nuser) ---
 echo "--- n8n Setup (running as $(whoami)) ---"
 
-# Check for essential secrets first
 if [ -z "$N8N_ENCRYPTION_KEY" ]; then 
-    echo "ERROR: N8N_ENCRYPTION_KEY is not set. Please set it as a Space secret."
+    echo "ERROR: N8N_ENCRYPTION_KEY is not set."
     exit 1
 fi
 if [ -z "$DB_POSTGRESDB_PASSWORD" ]; then 
-    echo "ERROR: DB_POSTGRESDB_PASSWORD is not set. Please set it as a Space secret."
-    exit 1 # This check might be redundant if PG setup already exited, but good for clarity
+    echo "ERROR: DB_POSTGRESDB_PASSWORD is not set."
+    exit 1
 fi
 
-# Set up n8n environment variables
 export N8N_USER_FOLDER="/home/n8nuser/.n8n"
-export GENAI_MODELS_N8N_DEFAULT_MODEL="$DEFAULT_MODEL" # DEFAULT_MODEL is from Ollama section
-export DB_POSTGRESDB_PORT="$POSTGRES_PORT" # POSTGRES_PORT is from PostgreSQL section
+export GENAI_MODELS_N8N_DEFAULT_MODEL="$DEFAULT_MODEL"
+export DB_POSTGRESDB_PORT="$POSTGRES_PORT"
 
-# Security headers for Hugging Face embedding
-export N8N_SEC_EMBEDDER_HEADER_ALLOW_FROM_REGEX="^https?:\/\/([a-zA-Z0-9\-]+\.)*hf\.space$"
-export N8N_SEC_ALLOW_ALL_ORIGINS_FOR_WEBHOOKS="true" 
+# --- Embedding Configuration ---
+# Option A: General hf.space (Try this first)
+# This regex allows embedding from any subdomain of hf.space.
+HF_SPACE_DOMAIN_REGEX="^https?:\/\/([a-zA-Z0-9\-]+\.)*hf\.space$"
+
+# Option B: Very Specific to your Space URL (If Option A doesn't work)
+# Replace 'leon4gr45-n8n-suite.hf.space' with your exact space URL if different.
+# SPECIFIC_SPACE_URL_REGEX="^https:\/\/leon4gr45-n8n-suite\.hf\.space$"
+
+# CHOOSE ONE REGEX:
+# Uncomment the one you want to use for N8N_SEC_EMBEDDER_HEADER_ALLOW_FROM_REGEX
+# export N8N_SEC_EMBEDDER_HEADER_ALLOW_FROM_REGEX="$SPECIFIC_SPACE_URL_REGEX"
+export N8N_SEC_EMBEDDER_HEADER_ALLOW_FROM_REGEX="$HF_SPACE_DOMAIN_REGEX" 
+# --- End Embedding Configuration ---
 
-# Enable task runners (recommended by n8n deprecation notice)
+export N8N_SEC_ALLOW_ALL_ORIGINS_FOR_WEBHOOKS="true" 
 export N8N_RUNNERS_ENABLED="true"
 
-# Configure URLs if HF_SPACE_HOST_WITH_PROTOCOL is available
 if [ -n "$HF_SPACE_HOST_WITH_PROTOCOL" ]; then
     export WEBHOOK_URL="$HF_SPACE_HOST_WITH_PROTOCOL/"
     export N8N_EDITOR_BASE_URL="$HF_SPACE_HOST_WITH_PROTOCOL/"
-    echo "N8N URLs set for Hugging Face Space: $N8N_EDITOR_BASE_URL"
+    echo "N8N URLs set via HF_SPACE_HOST_WITH_PROTOCOL: $N8N_EDITOR_BASE_URL"
 elif [ -n "$SPACE_HOST" ]; then
-    # Fallback using SPACE_HOST if available
     DERIVED_URL="https://$SPACE_HOST/"
     export WEBHOOK_URL="$DERIVED_URL"
     export N8N_EDITOR_BASE_URL="$DERIVED_URL"
     echo "N8N URLs derived from SPACE_HOST: $N8N_EDITOR_BASE_URL"
 else
-    echo "Warning: Neither HF_SPACE_HOST_WITH_PROTOCOL nor SPACE_HOST found. n8n URLs may not be set optimally."
+    echo "Warning: Neither HF_SPACE_HOST_WITH_PROTOCOL nor SPACE_HOST found."
 fi
 
 echo "Starting n8n..."
-exec n8n start # This is the single, final command to start n8n
+exec n8n start
+
+    
+
+IGNORE_WHEN_COPYING_START
+Use code with caution. Bash
+IGNORE_WHEN_COPYING_END
+
+How to Use the Options:
+
+    Try Option A first: The line export N8N_SEC_EMBEDDER_HEADER_ALLOW_FROM_REGEX="$HF_SPACE_DOMAIN_REGEX" is already active in the script above. This is generally robust.
+
+    If Option A still doesn't work, then try Option B:
+
+        Comment out: # export N8N_SEC_EMBEDDER_HEADER_ALLOW_FROM_REGEX="$HF_SPACE_DOMAIN_REGEX"
+
+        Uncomment: export N8N_SEC_EMBEDDER_HEADER_ALLOW_FROM_REGEX="$SPECIFIC_SPACE_URL_REGEX"
+
+        Make sure leon4gr45-n8n-suite.hf.space in SPECIFIC_SPACE_URL_REGEX exactly matches your Space's hostname.
+
+The Most "Forceful" (but less secure and for testing/diagnosis only):
+If neither of the above works, and you want to see if n8n's mechanism is responding at all, you could temporarily allow embedding from anywhere. This is not recommended for a live or public Space due to security risks (clickjacking).
+
+      
+# FOR DIAGNOSTIC PURPOSES ONLY - INSECURE
+# export N8N_SEC_EMBEDDER_HEADER_ALLOW_FROM_REGEX=".*"
+
+