Beş adım.
Çalışan bir n8n.

bash <<'DOCKER_KUR'
set -Eeuo pipefail
trap 'printf "\nDURDU: Docker hazirligi tamamlanamadi (satir %s). Son hata mesajini kontrol et.\n" "$LINENO" >&2' ERR
. /etc/os-release
if [[ "$ID" != ubuntu || "$VERSION_ID" != 24.04 || "$(uname -m)" != x86_64 ]]; then
  echo "DURDU: Bu rehber Ubuntu 24.04 LTS / x86_64 icindir." >&2
  exit 1
fi
sudo apt-get update
sudo env DEBIAN_FRONTEND=noninteractive apt-get install -y ca-certificates curl openssl dnsutils
if ! command -v docker >/dev/null 2>&1; then
  sudo install -m 0755 -d /etc/apt/keyrings
  sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
  sudo chmod a+r /etc/apt/keyrings/docker.asc
  sudo tee /etc/apt/sources.list.d/docker.sources >/dev/null <<'REPO'
Types: deb
URIs: https://download.docker.com/linux/ubuntu
Suites: noble
Components: stable
Architectures: amd64
Signed-By: /etc/apt/keyrings/docker.asc
REPO
  sudo apt-get update
  sudo env DEBIAN_FRONTEND=noninteractive apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
fi
sudo systemctl enable --now docker
sudo docker compose version
sudo docker run --rm hello-world
echo "TAMAM: Docker hazir. 3. adima gecebilirsin."
DOCKER_KUR

bash <<'N8N_DOSYALAR'
set -Eeuo pipefail
trap 'printf "\nDURDU: Dosya hazirligi tamamlanamadi (satir %s). Mevcut dosyalari silme; yardim bolumune bak.\n" "$LINENO" >&2' ERR
[[ "$(whoami)" == ubuntu ]] || { echo "DURDU: Sunucuya ubuntu kullanicisi ile baglan."; exit 1; }
sudo docker compose version >/dev/null
n8n_domain='n8n.example.com'
[[ "$n8n_domain" != *.example.com ]] || { echo "DURDU: Once rehbere kendi adreslerini uygula."; exit 1; }
sudo install -d -o ubuntu -g ubuntu -m 750 /opt/n8n
cd /opt/n8n
if [[ -e .env || -e compose.yaml || -e Caddyfile || -e .rehber-v2 ]]; then
  if [[ -f .rehber-v2 && -f .env && -f compose.yaml && -f Caddyfile ]] &&
     grep -Fxq "N8N_DOMAIN=$n8n_domain" .env; then
    sudo docker compose config --quiet
    echo "TAMAM: Bu rehberin dosyalari zaten hazir; anahtar degismedi. 4. adima gec."
    exit 0
  fi
  echo "DURDU: Bu klasorde mevcut veya yarim bir kurulum var. Uzerine yazilmadi."
  echo "Yardim bolumundeki 'Mevcut veya yarim kurulum' aciklamasini oku."
  exit 1
fi
umask 077
set -C
n8n_key=$(openssl rand -hex 32)
printf '%s\n' "N8N_DOMAIN=$n8n_domain" "N8N_ENCRYPTION_KEY=$n8n_key" 'GENERIC_TIMEZONE=Europe/Istanbul' > .env
unset n8n_key
cat > compose.yaml <<'YAML'
name: n8n-egitim

services:
  n8n:
    image: docker.n8n.io/n8nio/n8n:2.37.10
    restart: unless-stopped
    stop_grace_period: 60s
    environment:
      N8N_HOST: ${N8N_DOMAIN:?Alan adi eksik}
      N8N_PORT: 5678
      N8N_PROTOCOL: https
      N8N_EDITOR_BASE_URL: https://${N8N_DOMAIN}/
      N8N_WEBHOOK_URL: https://${N8N_DOMAIN}/
      N8N_PROXY_HOPS: 1
      N8N_ENCRYPTION_KEY: ${N8N_ENCRYPTION_KEY:?Anahtar eksik}
      N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS: "true"
      GENERIC_TIMEZONE: ${GENERIC_TIMEZONE}
      TZ: ${GENERIC_TIMEZONE}
      NODE_ENV: production
      EXECUTIONS_DATA_PRUNE: "true"
      EXECUTIONS_DATA_MAX_AGE: 168
    volumes:
      - n8n_data:/home/node/.n8n
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  caddy:
    image: caddy:2.11.4
    restart: unless-stopped
    depends_on:
      - n8n
    ports:
      - "80:80"
      - "443:443"
    environment:
      N8N_DOMAIN: ${N8N_DOMAIN}
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy_data:/data
      - caddy_config:/config
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

volumes:
  n8n_data:
  caddy_data:
  caddy_config:
YAML
cat > Caddyfile <<'CADDY'
{$N8N_DOMAIN} {
    tls {
        issuer acme {
            disable_tlsalpn_challenge
        }
    }
    reverse_proxy n8n:5678
}
CADDY
chmod 600 .env
sudo docker compose config --quiet
printf '%s\n' 'n8n-aws-rehber-v2' > .rehber-v2
echo "TAMAM: Dosyalar hazir. Gizli anahtar ekrana yazilmadi. 4. adima gec."
N8N_DOSYALAR

bash <<'N8N_BASLAT'
set -Eeuo pipefail
trap 'printf "\nDURDU: Baslatma tamamlanamadi (satir %s). Son hata mesajini kontrol et.\n" "$LINENO" >&2' ERR
cd /opt/n8n
n8n_domain='n8n.example.com'
n8n_ip='203.0.113.10'
[[ "$n8n_domain" != *.example.com && "$n8n_ip" != 203.0.113.* ]] || { echo "DURDU: Once rehbere kendi adreslerini uygula."; exit 1; }
[[ -f .env && -f compose.yaml && -f Caddyfile ]] || { echo "DURDU: Once 3. adimi tamamla."; exit 1; }
grep -Fxq "N8N_DOMAIN=$n8n_domain" .env || { echo "DURDU: Rehberdeki domain ile .env farkli. Adresini kontrol et."; exit 1; }
n8n_dns=$(dig +short A "$n8n_domain" @1.1.1.1)
n8n_ipv6=$(dig +short AAAA "$n8n_domain" @1.1.1.1)
if [[ "$n8n_dns" != "$n8n_ip" || -n "$n8n_ipv6" ]]; then
  echo "DURDU: DNS henuz dogru degil. A kaydini ve varsa AAAA kaydini kontrol et."
  echo "DNS duzeldikten sonra ayni blogu yeniden calistir."
  exit 1
fi
sudo docker compose config --quiet
sudo docker compose pull
sudo docker compose run --rm --no-deps -T caddy caddy validate --config /etc/caddy/Caddyfile --adapter caddyfile </dev/null
sudo docker compose up -d
echo "HTTPS hazir olana kadar kontrol ediliyor..."
for n8n_attempt in {1..24}; do
  if curl --fail --silent --output /dev/null --connect-timeout 3 --max-time 5 \
      --resolve "$n8n_domain:443:127.0.0.1" "https://$n8n_domain/"; then
    sudo docker compose ps
    echo "TAMAM: n8n ve HTTPS sunucuda yanit veriyor."
    echo "Kendi tarayicinda ac: https://$n8n_domain"
    exit 0
  fi
  sleep 5
done
echo "BEKLIYOR: HTTPS henuz hazir degil. 80 portunu, DNS'i ve Caddy logunu kontrol et."
echo "Log komutu: cd /opt/n8n && sudo docker compose logs --tail=40 caddy n8n"
echo "Veriler silinmedi. Sorunu duzeltince ayni blogu yeniden calistir."
exit 1
N8N_BASLAT