u/cuebicai

My experience self hosting n8n more debugging than building

I got tired of setting up n8n on a VPS every time…

Not sure if it’s just me, but it always felt way more painful than it should be.

Same cycle every single time:

• Spin up a server

• Install Docker

• Configure SSL

• Set up domain

• Fix random issues

• Pray it works

And when something breaks…

You’re back to debugging infra instead of building workflows.

That honestly killed the whole experience for me.

What made it worse was hosting.

I used Hostinger and got locked into a yearly plan. Paid upfront… and then realized I wasn’t even happy with it.

Couldn’t switch easily. Just stuck.

So not only was setup painful I was committed to it.

So I tried fixing this for myself.

Built a simple way to deploy n8n in one click and server, SSL, domain, everything ready.

No DevOps. No setup loop.

And honestly… it felt different.

For the first time, I was just building workflows, not maintaining servers.

Letting a few people try it out for free.

Would really value honest feedback trying to do make this actually useful.

How are you guys hosting n8n?

Are you managing your own VPS, using something managed, or doing it another way?

u/cuebicai — 1 day ago
🔥 Hot ▲ 76 r/Supabase

Supabase Auth allows direct signup via anon key make sure you enable captcha

I ran into something interesting while building my SaaS (Cuebic AI).

I noticed users signing up, but none of my backend logs were triggered.

Turns out:
Supabase Auth allows direct access to /auth/v1/signup using the public anon key.

So even if you have:

  • Turnstile / bot protection
  • Email validation
  • Rate limiting

All of that can be bypassed if someone calls the auth API directly.

I confirmed it with a curl request — account gets created without hitting your backend.

Fix (what worked for me):

  • Enable Supabase captcha protection (Turnstile)
  • Pass captcha token via:
    • options.captchaToken (signup)
    • options.captchaToken (sign-in)

After that:

  • Direct API signup is blocked
  • All auth requests require captcha

Just sharing in case others assume their backend protections are enough (I did 😅)

Would love to know how others are handling auth abuse on Supabase.

reddit.com
u/cuebicai — 6 days ago