homelab Lock Down Self-Hosted n8n: Expose Only Webhooks Minimize your n8n attack surface by restricting external access to webhook paths only, using NPM Access Lists and Custom Locations with a single allow all directive.