---
title: "Deploy Infisical (with postgres)"
description: "Platform to securely manage application configuration and secrets"
category: "Other"
url: https://railway.com/deploy/CZTj7E
---

# Deploy Infisical (with postgres)

Platform to securely manage application configuration and secrets

**[Deploy Infisical (with postgres) on Railway](https://railway.com/template/CZTj7E)**

Machine-readable deploy manifest (JSON, validated by TemplateCI): https://railway.com/deploy/CZTj7E/manifest.json

- **Creator:** ZekTec
- **Category:** Other
- **Total deploys:** 108

## Template content

### Redis https://devicons.railway.app/i/redis.svg

- **Image:** bitnami/redis

### Postgres https://devicons.railway.app/i/postgresql.svg

- **Image:** ghcr.io/railwayapp-templates/postgres-ssl:latest

### Infisical

- **Image:** infisical/infisical:latest-postgres
- **Public domain:** Yes

## Documentation

## Setup
This guide explains how to set up self-hosted [Infisical](https://infisical.com/) using Docker this setup is based on the new Infisical Backend that uses Postgres. Infisical recommends using Kubernetes for high availability and large teams instead of Docker.

The default configuration are good to get you started. If you want to customize some of the functionality, you can do it now or later on.

## Email services
To enable multi-factor authentication and other features it is required to add your own email service. Infisical has [great documentation](https://infisical.com/docs/self-hosting/configuration/envars#email-service) on how to set up an email service if you don’t have one, I would recommend resend.com and it is really simple to set up and free for low usage.
In your Railway project, in the “Infisical” service, add the following environment variables (if you already deployed the service make sure to redeploy for the changes to take effect):

```
SMTP_HOST=
SMTP_USERNAME=
SMTP_PASSWORD=
SMTP_PORT=
SMTP_SECURE=
SMTP_FROM_ADDRESS=
SMTP_FROM_NAME=
```
Note: I faced issues using port `587` from resend, and recommend using port `2465` instead.

###SSO
Follow Infisicals documentation [here](https://infisical.com/docs/self-hosting/configuration/envars#sso-based-login).

###External services
This is why you have chosen Infisical, right? Infisical has a [full list](https://infisical.com/docs/self-hosting/configuration/envars#native-secret-integrations) of the services that are supported and the environment variables that are required to be set. There is also [great documentation](https://infisical.com/docs/integrations/cloud/aws-parameter-store) on how to get the variables from the services you use.

## Similar templates

- [Rocky Linux](https://railway.com/deploy/rocky-linux) — Hosted Rocky Linux 9 workspace with SSH and persistent storage. 🚀
- [Foundry Virtual Tabletop](https://railway.com/deploy/X5tR6G) — A Self-Hosted & Modern Roleplaying Platform
- [Letta Code Remote](https://railway.com/deploy/letta-code-remote) — Run a Letta Code agent 24/7. No inbound ports, just deploy.

Open this page in a browser: https://railway.com/deploy/CZTj7E