feat(n8n): enable task runners

hosts/AZ-CLD-1/secrets.nix

@@ -28,6 +28,9 @@
       n8n-env = {
         file = ../../secrets/n8n-env.age;
       };
+      n8n-runner-auth-token = {
+        file = ../../secrets/n8n-runner-auth-token-cld.age;
+      };
       netbird-auth-secret = {
         file = ../../secrets/netbird-auth-secret.age;
       };

hosts/AZ-CLD-1/services/n8n.nix

@@ -4,7 +4,13 @@
 in {
   services.${serviceName} = {
     enable = true;
-    environment.WEBHOOK_URL = "https://wf.az-gruppe.com";
+    environment = {
+      WEBHOOK_URL = "https://wf.az-gruppe.com";
+      N8N_RUNNERS_ENABLED = true;
+      N8N_NATIVE_PYTHON_RUNNER = true;
+      N8N_RUNNERS_AUTH_TOKEN_FILE = config.age.secrets.n8n-runner-auth-token.path;
+    };
+    taskRunners.enable = true;
   };
 
   systemd.services.${serviceName}.serviceConfig = {

hosts/AZ-PRM-1/secrets.nix

@@ -16,6 +16,9 @@
       n8n-env = {
         file = ../../secrets/n8n-env-prm.age;
       };
+      n8n-runner-auth-token = {
+        file = ../../secrets/n8n-runner-auth-token-prm.age;
+      };
       pgadmin-pw = {
         file = ../../secrets/pgadmin-pw.age;
         owner = "pgadmin";

hosts/AZ-PRM-1/services/n8n.nix

@@ -1,8 +1,4 @@
-{
-  config,
-  lib,
-  ...
-}: let
+{config, ...}: let
   serviceName = "n8n";
   servicePort = config.m3ta.ports.get serviceName;
 in {
@@ -12,8 +8,11 @@ in {
       WEBHOOK_URL = "https://wf.l.az-gruppe.com";
       NODES_EXCLUDE = "[]";
       N8N_RESTRICT_FILE_ACCESS_TO = "/mnt/DMS-INBOX;/mnt/DMS-ALT-INBOX";
-      N8N_RUNNERS_ENABLED = lib.mkForce "false";
+      N8N_RUNNERS_ENABLED = true;
+      N8N_NATIVE_PYTHON_RUNNER = true;
+      N8N_RUNNERS_AUTH_TOKEN_FILE = config.age.secrets.n8n-runner-auth-token.path;
     };
+    taskRunners.enable = true;
   };
 
   systemd.services.n8n.serviceConfig = {