n8n-multi-tenant-architecture

n8n Architecture (Three Layers)

1. Internal: qcs1.quiknation.com → QCS1 Mac M4 Pro → private swarm orchestrator (NOT public)
2. Per-Client: <client>.quiknation.com → Fargate per client → client-facing n8n dashboard showing their agents working
3. Ephemeral Workers: t3.micro instances spun up by n8n → run agents → commit → self-destruct

Why: Clients need to SEE their agents working. n8n provides the visual dashboard. Each client gets their own subdomain. IaC provisions the entire stack per client with one command.

How to apply:

• CDK manages: Fargate task defs, Cloudflare tunnels/DNS, IAM roles, security groups, n8n config per client
• AWS SDK manages: ephemeral t3.micro lifecycle (launch → monitor → terminate)
• Cloudflare Tunnel manages: subdomain routing (no public IPs exposed)
• Domain: quiknation.com (subdomains via Cloudflare)
• NOT equitation.com (that was a typo from phone autocorrect)