--- title: "Deploy Bytebot Protected AI Desktop Stack" description: "AI desktop agent with Postgres and a generated-password access gateway." category: "AI/ML" url: https://railway.com/deploy/bytebot-protected-ai-desktop-stack --- # Deploy Bytebot Protected AI Desktop Stack AI desktop agent with Postgres and a generated-password access gateway. **[Deploy Bytebot Protected AI Desktop Stack on Railway](https://railway.com/template/bytebot-protected-ai-desktop-stack)** Machine-readable deploy manifest (JSON, validated by TemplateCI): https://railway.com/deploy/bytebot-protected-ai-desktop-stack/manifest.json - **Creator:** dankeewithtwoes's Projects - **Category:** AI/ML ## Template content ### Postgres https://devicons.railway.app/i/postgresql.svg - **Image:** ghcr.io/railwayapp-templates/postgres-ssl@sha256:34c3e49e7ed2aaef6c575fb23bb37b878007e97752d3bf27ccb550046f893ca7 ### bytebot-ui - **Image:** ghcr.io/bytebot-ai/bytebot-ui@sha256:492d57da67513582dd15cde892dc8b29b9a6deec62c9e2b4e2c86e168c22302f ### Access Gateway - **Image:** caddy@sha256:d8542f48d34a9cf4e4c11a478865229840e87e4c96ea3f439101f31a5d35f75f - **Start command:** `/bin/sh -c 'set -eu; hash=$(caddy hash-password --plaintext "$PROXY_PASSWORD"); printf "{\n admin off\n auto_https off\n}\n:8080 {\n basic_auth {\n operator %s\n }\n reverse_proxy %s\n}\n" "$hash" "$UPSTREAM" > /tmp/Caddyfile; exec caddy run --config /tmp/Caddyfile --adapter caddyfile'` - **Public domain:** Yes ### bytebot-agent - **Image:** ghcr.io/bytebot-ai/bytebot-agent@sha256:a36e65ce6db772a4c6fa340a68c50bca0a493bc16b6f86d566ac8fc11c122b29 ### bytebot-desktop - **Image:** ghcr.io/bytebot-ai/bytebot-desktop@sha256:e974e7ac93c8f755e98b8a437e5497a63175c7096b51a348f5f1d9320598a1c9 ## Documentation # Deploy and Host Bytebot Protected AI Desktop Stack on Railway AI desktop agent with Postgres and a generated-password access gateway. ## About Hosting Bytebot Protected AI Desktop Stack This deployment fork provisions bytebot-ui, bytebot-agent, Postgres, bytebot-desktop, Access Gateway. Application domains and any authored TCP endpoints are generated for each new deployment. Database and queue services are private by default. ## Why Deploy Bytebot Protected AI Desktop Stack on Railway - New setup and maintenance documentation with attribution to the original template. - Public container sources are locked by image digest and public Git repositories by commit SHA. - Database and queue services use private networking; external database access is an explicit deployer choice. - A generated-password gateway protects the public UI and WebSockets while agent and desktop services stay private. ## Common Use Cases - Automate a desktop task using your own model API. - Experiment with an AI agent controlling an isolated desktop. - Review the agent session through its web UI. ## Dependencies for Bytebot Protected AI Desktop Stack - A Railway account with capacity for 5 service definitions and the authored storage. - Your own external accounts and credentials when an integration or model provider is needed. No paid provider subscription is included. - Local passwords and service secrets are generated or referenced at deployment; external integrations are configured by the deployer. ## First Launch Supply at least one supported model API key on bytebot-agent. Wait for the five services, then open Access Gateway. Log in as operator with PROXY_PASSWORD from its variables. The agent and desktop endpoints remain private. ## Included Services and Storage | Service | Persistent paths | | --- | --- | | bytebot-ui | No attached volume | | bytebot-agent | No attached volume | | Postgres | `/var/lib/postgresql/data` | | bytebot-desktop | No attached volume | | Access Gateway | No attached volume | ## Operations The gateway protects UI requests and WebSocket traffic. No model API credit is included. Do not store irreplaceable files in the desktop container; PostgreSQL persists agent records, but the desktop filesystem is ephemeral. Restrict who receives gateway access. Railway bills the deployer for actual services, storage and network use. Back up persistent data before source/version changes. This publication was checked against Railway's configuration schema and upstream source/registry availability; a full runtime deployment test has not been performed. ## Attribution and Source Based on [Bytebot](https://railway.com/template/bytebot) by Bytebot. It appeared at position 16 in Railway's backend Popular/browse results captured on 2026-10-18, with 2,615 deployments reported for the original. That count belongs to the original, not this new fork. The original software and repositories remain owned by their upstream authors and retain their licenses. This is a deployment configuration fork with new documentation, not a claim of software authorship or official vendor affiliation. For template wiring issues, use this template's discussion link and share redacted logs. Never post passwords, API keys or login tokens. ## Deploy this recipe [![Deploy on Railway](https://railway.com/button.svg)](https://railway.com/new/template/bytebot-protected-ai-desktop-stack?utm_source=railway-marketplace&utm_medium=listing&utm_campaign=toolkit-discovery&utm_content=bytebot-protected-desktop-stack) Review the required inputs and hosting resource costs before deploying. ### Related deployment recipes - [LibreChat Multi-Model Chat Starter](https://railway.com/template/librechat-multi-model-chat-starter) — AI chat with MongoDB, private search and a vector-backed document API. - [AI Provider Gateway Starter](https://railway.com/template/ai-provider-gateway-starter) — 9Router with generated login, persistent config and your own AI providers. These are separate deployments; no preconfigured integration between the applications is implied. Disclosure: this template is maintained independently. Its maintainer may earn Railway usage kickbacks when other people deploy it. Railway bills hosting separately; no paid software subscription or provider credits are included. ## Similar templates - [Chat Chat](https://railway.com/deploy/-WWW5r) — Chat Chat, your own unified chat and search to AI platform. - [stella](https://railway.com/deploy/stella) — Self-host stella with web, API, Postgres, Redis, and object storage. - [Hermes Agent | OpenClaw Alternative with Dashboard](https://railway.com/deploy/hermes-agent-or-openclaw-alternative-wit) — Self-Hosted Hermes AI Agent for Telegram, Discord & Slack Open this page in a browser: https://railway.com/deploy/bytebot-protected-ai-desktop-stack