Update environment configuration for MN Service credentials in n8n

- Added new environment variables for Sembly and Google Service Account credentials in .
- Updated  to include new MN Service environment variables for seamless integration.
- Modified  to install the  package and updated the external modules allowlist.

These changes improve the n8n service by providing required credentials for MN Service integration and enhancing security with the addition of the  package.

Author: SashkoMarchuk

.env.example

@@ -77,3 +77,21 @@ N8N_SMTP_PASS=
 N8N_SMTP_SENDER=
 N8N_SMTP_SSL=false
 N8N_SMTP_TLS=true
+
+# MN Service credentials
+## Sembly credentials
+SEMBLY_USER=sembly_user
+SEMBLY_PASS=sembly_pass
+
+## MN Service — Google Service Account (SA)
+MN_SERVICE_SA_GOOGLE_TYPE=service_account
+MN_SERVICE_SA_GOOGLE_PROJECT_ID=mock-project-id
+MN_SERVICE_SA_GOOGLE_PRIVATE_KEY_ID=mock-private-key-id
+MN_SERVICE_SA_GOOGLE_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\nMOCK_PRIVATE_KEY_CONTENT\n-----END PRIVATE KEY-----\n"
+MN_SERVICE_SA_GOOGLE_CLIENT_EMAIL=mock-service-account@mock-project-id.iam.gserviceaccount.com
+MN_SERVICE_SA_GOOGLE_CLIENT_ID=000000000000000000000
+MN_SERVICE_SA_GOOGLE_AUTH_URI=https://accounts.google.com/o/oauth2/auth
+MN_SERVICE_SA_GOOGLE_TOKEN_URI=https://oauth2.googleapis.com/token
+MN_SERVICE_SA_GOOGLE_AUTH_PROVIDER_X509_CERT_URL=https://www.googleapis.com/oauth2/v1/certs
+MN_SERVICE_SA_GOOGLE_CLIENT_X509_CERT_URL=https://www.googleapis.com/robot/v1/metadata/x509/mock-service-account%40mock-project-id.iam.gserviceaccount.com
+MN_SERVICE_SA_GOOGLE_UNIVERSE_DOMAIN=googleapis.com

Dockerfile.n8n

@@ -5,6 +5,7 @@ ARG NODE_ENV=production
 ARG N8N_PORT=5678
 ARG SHOWDOWN_VERSION=^2.1.0
 ARG SLACKIFY_MARKDOWN_VERSION=^4.5.0
+ARG CRYPTO_VERSION=^4.2.0
 
 # Install git for backup script and other packages + install external packages in one layer
 USER root
@@ -14,11 +15,12 @@ RUN set -eux; \
     --legacy-peer-deps --no-workspaces \
     --unsafe-perm \
     showdown@${SHOWDOWN_VERSION} \
-    slackify-markdown@${SLACKIFY_MARKDOWN_VERSION} && \
+    slackify-markdown@${SLACKIFY_MARKDOWN_VERSION} \
+    crypto-js@${CRYPTO_VERSION} && \
   npm cache clean --force
 
 # Configure external modules allowlist used by Code/Function nodes
-ENV NODE_FUNCTION_ALLOW_EXTERNAL="showdown,slackify-markdown"
+ENV NODE_FUNCTION_ALLOW_EXTERNAL="showdown,slackify-markdown,crypto-js"
 
 # Create app directory
 WORKDIR /home/node

docker-compose.yml

@@ -34,6 +34,17 @@ services:
       - N8N_LOG_LEVEL=debug
       - N8N_LOG_OUTPUT=console
       - TZ=${TZ:-America/New_York}
+      - MN_SERVICE_SA_GOOGLE_TYPE=${MN_SERVICE_SA_GOOGLE_TYPE:-GOOGLE_TYPE}
+      - MN_SERVICE_SA_GOOGLE_PROJECT_ID=${MN_SERVICE_SA_GOOGLE_PROJECT_ID:-PROJECT_ID}
+      - MN_SERVICE_SA_GOOGLE_PRIVATE_KEY_ID=${MN_SERVICE_SA_GOOGLE_PRIVATE_KEY_ID:-PRIVATE_KEY_ID}
+      - MN_SERVICE_SA_GOOGLE_PRIVATE_KEY=${MN_SERVICE_SA_GOOGLE_PRIVATE_KEY:-PRIVATE_KEY}
+      - MN_SERVICE_SA_GOOGLE_CLIENT_EMAIL=${MN_SERVICE_SA_GOOGLE_CLIENT_EMAIL:-CLIENT_EMAIL}
+      - MN_SERVICE_SA_GOOGLE_CLIENT_ID=${MN_SERVICE_SA_GOOGLE_CLIENT_ID:-CLIENT_ID}
+      - MN_SERVICE_SA_GOOGLE_AUTH_URI=${MN_SERVICE_SA_GOOGLE_AUTH_URI:-AUTH_URI}
+      - MN_SERVICE_SA_GOOGLE_TOKEN_URI=${MN_SERVICE_SA_GOOGLE_TOKEN_URI:-TOKEN_URI}
+      - MN_SERVICE_SA_GOOGLE_AUTH_PROVIDER_X509_CERT_URL=${MN_SERVICE_SA_GOOGLE_AUTH_PROVIDER_X509_CERT_URL:-CERT_URL}
+      - MN_SERVICE_SA_GOOGLE_CLIENT_X509_CERT_URL=${MN_SERVICE_SA_GOOGLE_CLIENT_X509_CERT_URL:-CLIENT_CERT_URL}
+      - MN_SERVICE_SA_GOOGLE_UNIVERSE_DOMAIN=${MN_SERVICE_SA_GOOGLE_UNIVERSE_DOMAIN:-UNIVERSE_DOMAIN}
     volumes:
       - n8n_data:/home/node/.n8n
       - ./scripts:/home/node/scripts