refactor(infra): remove internal API, n8n connects PG directly

- Delete sync/router.py (dump + expire-links endpoints)
- Remove SYNC_TOKEN from config, deploy, docker-compose, .env.example
- Rewrite workflows: Postgres node queries PG directly
  - Tables fetched dynamically via information_schema
  - Link expiration via direct UPDATE query
- Remove broken credential auto-setup from init_n8n.sh
- Validated workflows via n8n MCP (typeVersion 2.6/4.7)

Credentials (Postgres + Google Sheets) set up manually in n8n UI.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: ImTotem

.env.example

@@ -30,9 +30,6 @@ POSTGRES_HOST=postgres
 POSTGRES_PORT=5432
 POSTGRES_VOLUME_PATH=/home/ubuntu/bcsd-data/postgres
 
-# 내부 API 인증 (n8n → API 동기화용)
-SYNC_TOKEN=change-me-random-string
-
 REDIS_PASSWORD=change-me
 REDIS_PORT=6379
 REDIS_VOLUME_PATH=/home/ubuntu/bcsd-data/redis

infra/docker/docker-compose.yml

@@ -35,7 +35,6 @@ services:
       N8N_BASIC_AUTH_USER: "${N8N_AUTH_USER}"
       N8N_BASIC_AUTH_PASSWORD: "${N8N_AUTH_PASSWORD}"
       N8N_ENCRYPTION_KEY: "${N8N_ENCRYPTION_KEY}"
-      SYNC_TOKEN: "${SYNC_TOKEN}"
       GOOGLE_SHEETS_ID: "${GOOGLE_SHEETS_ID}"
       N8N_BLOCK_ENV_ACCESS_IN_NODE: "false"
     volumes:

infra/scripts/deploy.sh

@@ -14,7 +14,7 @@ ENVSUBST_VARS='${API_BLUE_PORT} ${API_GREEN_PORT} ${N8N_PORT} ${FRONTEND_PORT} $
 REQUIRED_VARS=(
     POSTGRES_USER POSTGRES_PASSWORD POSTGRES_DB
     GOOGLE_SERVICE_ACCOUNT_FILE GOOGLE_SHEETS_ID
-    SYNC_TOKEN JWT_SECRET GOOGLE_CLIENT_ID
+    JWT_SECRET GOOGLE_CLIENT_ID
     API_BLUE_PORT API_GREEN_PORT N8N_PORT
 )
 

infra/scripts/init_n8n.sh

@@ -1,11 +1,11 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-# n8n workflow import + Google Sheets credential setup
-# Idempotent: skips if workflows already exist
+# n8n workflow import + owner setup
+# Idempotent: skips if already configured
+# Credentials (Postgres, Google Sheets) must be set up manually in n8n UI
 
 COMPOSE="sudo docker compose -p bcsd-app --env-file .env -f infra/docker/docker-compose.yml"
-N8N_CONTAINER="bcsd-app-n8n-1"
 MAX_RETRIES=15
 
 wait_n8n() {
@@ -24,7 +24,7 @@ wait_n8n() {
 workflow_exists() {
     local name="$1"
     local count
-    count=$($COMPOSE exec -T n8n n8n list:workflow 2>/dev/null | grep -c "$name" || true)
+    count=$($COMPOSE exec -T n8n n8n list:workflow 2>&1 | grep -c "$name" || true)
     [ "$count" -gt 0 ]
 }
 
@@ -39,45 +39,6 @@ import_workflow() {
     $COMPOSE exec -T n8n n8n import:workflow --input="$file"
 }
 
-activate_workflow() {
-    local name="$1"
-    local wf_id
-    wf_id=$($COMPOSE exec -T n8n n8n list:workflow 2>/dev/null | grep "$name" | awk -F'|' '{print $1}')
-    if [ -z "$wf_id" ]; then
-        echo "  WARNING: Could not find workflow '$name' to activate"
-        return 1
-    fi
-    $COMPOSE exec -T n8n n8n publish:workflow --id="$wf_id"
-    echo "  Activated '$name' (id: $wf_id)"
-}
-
-setup_credential() {
-    local existing
-    existing=$($COMPOSE exec -T n8n n8n list:credential 2>&1 | grep -c "Google Sheets SA" || true)
-    if [ "$existing" -gt 0 ]; then
-        echo "  Google Sheets credential already exists ($existing found) — skipping"
-        return 0
-    fi
-    echo "  Creating Google Sheets service account credential..."
-    local cred_json
-    cred_json=$(python3 -c "
-import json, sys
-sa = json.load(open('$GOOGLE_SERVICE_ACCOUNT_FILE'))
-cred = [{
-    'id': str(__import__('uuid').uuid4()),
-    'name': 'Google Sheets SA',
-    'type': 'googleApi',
-    'data': {
-        'email': sa['client_email'],
-        'privateKey': sa['private_key'],
-        'impersonateUser': ''
-    }
-}]
-json.dump(cred, sys.stdout)
-")
-    echo "$cred_json" | $COMPOSE exec -T n8n n8n import:credentials --input=/dev/stdin
-}
-
 setup_owner() {
     set -a; source .env; set +a
     local port
@@ -123,12 +84,5 @@ echo "4. Importing workflows..."
 import_workflow "/workflows/pg_sheets_sync.json" "PG → Sheets Sync (5min)"
 import_workflow "/workflows/link_auto_expire.json" "Link Auto-Expiration (hourly)"
 
-echo "5. Setting up Google Sheets credential..."
-set -a; source .env; set +a
-setup_credential
-
-echo "6. Activating workflows..."
-activate_workflow "PG → Sheets Sync"
-activate_workflow "Link Auto-Expiration"
-
 echo "=== n8n Init complete ==="
+echo "NOTE: Set up Postgres + Google Sheets credentials in n8n UI if first deploy"

src/bcsd_api/config.py

@@ -23,7 +23,6 @@ class Settings(BaseSettings):
     postgres_db: str = "bcsd"
     postgres_host: str = "postgres"
     postgres_port: int = 5432
-    sync_token: str = ""
     model_config = {"env_file": ".env", "extra": "ignore"}
 
     @property

src/bcsd_api/main.py

@@ -12,7 +12,6 @@
 from .member.router import router as member_router
 from .redirect import router as redirect_router
 from .shorten.router import router as shorten_router
-from .sync.router import router as sync_router
 from .track import router as track_router
 
 logger = logging.getLogger(__name__)
@@ -75,7 +74,6 @@ def create_app() -> FastAPI:
     app.include_router(member_router)
     app.include_router(track_router)
     app.include_router(shorten_router)
-    app.include_router(sync_router)
     app.include_router(redirect_router)
     return app