Auth Templates: Deploy Keycloak, Vaultwarden, and More

Cap

The self-hosted CAPTCHA for the modern web. Official template for Railway.

Cap

238

Credential Protocol

Membership cards, tickets and collectibles you control yourself.

CrithLabs

46

Keycloak Identity Management | Open-Source Alternative to Auth0

Self Host Keycloak: SSO, MFA, LDAP federation, OIDC on Railway

Heimdall

67

API Key Manager

Deploy and Host API Key Manager with Railway

utsav-pal

81

Vaultwarden | Open Source Bitwarden Alternative

Self Host Vaultwarden: Encrypted passwords, 2FA, organizations & more

Heimdall

53

VPN border0

Zero-trust Border0 tunnel: SSO access to private services. [Oct '26]

wotonews

14

Authentik | Open Source Okta, Auth0 Alternative on Railway

Self Host Authentik - OAuth2, SAML, LDAP, MFA and more.

Heimdall

30

Docuseal (Open-Source E-Signature & Document Signing Service)

Docuseal [Oct ’26] (DocuSign & HelloSign alternative) Self Host

shinyduo

73

Keycloak

[2026-11-04] Keycloak with keywind theme + Apple & Discord providers

beuz

755

Infisical

HashiCorp Vault alternative. Central secrets, rotation, dynamic credentials

A3A

5

Zitadel

A fully configured Zitadel instance with an optional V2 Login UI.

Truer Projects

9

lua-protector

Test deployed my project first

trianaq765-cmd's Project

37

Better Auth

A ready to use auth server! Secure by default and extremely configurable.

Medim

87

OpenFGA

OpenFGA: Zanzibar-style fine-grained auth engine, backed by Postgres

A3A

4

KEYCLOAK

Auth0 Alternative. Open-source SSO, OIDC and SAML identity server

A3A

4

Basic Auth Proxy — Password-Protect Any Service

Put any service behind a username & password — nginx proxy

SilverBanana

6

Keycloak

Keycloak — enterprise identity and access management with SSO and SAML

INAPP

6

Passbolt | Open Source Team Password Manager

Self Host Passbolt. Team password vault with end-to-end encryption

Heimdall

18

Infisical — Open Source Doppler, HashiCorp Vault Alternative

Self Host Infisical, Manage API keys, certs, & other secrets on Railway

Heimdall

33

tailscale-vpn

VPN Tailscale Userspace ligera. Incluye Exit Node y Proxy SOCKS5.

WarBush

20

nginx-password-auth

Put any service behind a username / password

Ben Williams

28

Logto

Modern open-source auth with multi-tenancy, SSO, and RBAC

Rees

62

Pocket ID

A simple and easy-to-use OIDC provider

Rémi A.

35

Passbolt

Password manager for teams, with end-to-end encrypted sharing

A3A

3

Casdoor

Single sign-on server that manages logins for your apps

A3A

3

tank3 one-click push relay

host your own push notification relay for your tank projects

Brian Whitton

3

Authentik

Self-host Authentik, the open source identity provider for SSO and MFA

A3A

3

RustyAuth

RustyAuth 1.0.0: dashboard, private API, SableDB, encrypted backups.

Livermore Ledger

3

Authentik

[2026-11-04] authentik 2026.8.5. BREAKING: Redis dropped upstream.

beuz

152

Agora Token Deployment

Token generator for Agora RTM, Video SDK, and Chat.

Max Cobb

1.2K

Authorizer

Open-source authentication and authorization solution for your business.

Lakhan Samani

652

Infisical

Infisical secrets manager with the admin created and sign-up closed on boot

Two Workspaces

2

Casdoor

Casdoor 4.9 identity provider with OAuth 2.0, OIDC, SAML and a web UI.

Agaz Self-Host

2

Infisical Secrets Platform

Self-hosted Infisical secrets platform with Postgres and Redis included

Protemplate

2

OpenBao

Store and share API keys, passwords and certificates securely

A3A

2

Logto

Open-source identity provider with hosted sign-in, SSO, RBAC and MFA

A3A

2

Vaultwarden

Open-source password manager server that works with all Bitwarden apps

A3A

2

SpiceDB relationship authorization

Durable relationship-based authorization with PostgreSQL.

Anton Orel

2

Nango

[Updated Nov 2026] Connect your product & AI agents with 800+ APIs.

Ramadan Omar

5

Nango Production Template

[Updated Nov 2026] Connect your product & AI agents with 800+ APIs.

Ramadan Omar

10

OpenFGA

Deploy and host OpenFGA with Railway

Andrés Aguiar

22

Zitadel

Deploy a modern IAM solution with Zitadel on Railway in minutes.

Sethumadhavan K

31

Keycloak

Single sign-on and identity on Postgres 17, admin created on first boot

Two Workspaces

1

Keycloak 26 Identity and SSO Server

Single sign-on, OAuth2/OIDC and SAML for your apps, backed by Postgres.

bento

1

Vaultwarden

A secure, self-hosted password manager for storing and syncing passwords.

Rakit

1

Rauthy

Rauthy 0.36: lightweight OIDC provider and SSO with passkeys, in Rust.

Agaz Self-Host

1

Zitadel

Zitadel 4.19: identity platform with OIDC, SAML, passkeys and multitenancy.

Agaz Self-Host

1

OpenBao

OpenBao 2.7 secrets manager with auto-unseal, admin login and KV store.

Agaz Self-Host

1

Pomerium

Identity-aware proxy that puts SSO in front of any web app

A3A

1

SpiceDB with PostgreSQL

Relationship authorization with PostgreSQL and authenticated API access.

orenaksakal

1

Hanko

Passkey-first authentication server for your own applications

A3A

1

SuperTokens

Authentication server for user accounts, logins and sessions

A3A

1

Authelia

Authelia SSO and 2FA portal with lldap directory, PostgreSQL & Redis

A3A

1

Zitadel

Identity provider for logins, single sign-on and user accounts

A3A

1

wallet-auth

Wallet auth API: SIWE, Nostr NIP-98 and Solana signature verification

INAPP

1

Pocket-Id

Auth0 alternative. OpenID Connect provider with passkey authentication

A3A

1

2FAuth

2FAuth | Self-hosted TOTP/HOTP manager (Authy alternative)

A3A

1

LLDAP directory server

Lightweight LDAP identity management with durable SQLite data.

Anton Orel

1

Infisical — Open Source Secrets Manager & Vault

Self-host Infisical — manage API keys, secrets & certs securely

SilverBanana

3

Logto — Open-Source Auth, SSO & Multi-Tenancy

Self-host Logto — modern auth with SSO, RBAC & multi-tenancy

SilverBanana

1

NetBird Peer Client

Deploy a NetBird peer to connect your service directly to your network.

coding_dynasty

1

casdoor

Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway

kmaki

2

Vaultwarden with PostgreSQL on Railway

Vaultwarden on Railway with PostgreSQL and persistent /data storage.

youta

9

PhaseTwo Keycloak

Keycloak with extensions for orgs, events, themes, and more.

Nuovar

8

FusionAuth

Customer Identity and Access Management (CIAM) platform

swegit

8

tsidp

A simple OIDC / OAuth Identity Provider (IdP) server for your tailnet.

Tailscale Strategic Projects

8

Logto: Identity and Access Management (IAM)

The better auth and identity infrastructure

Evaloote Studio

15

Casdoor

[2026-11-04] Casdoor v4.25.0. UI-first IAM / SSO platform.

beuz

41

railway-docker-nginx-basic-auth

Add basic auth to your web app.

toyjack

185

NEW

Stack Auth | (Just Updated) Auth0 and Clerk Alternative, Admin Login and Agent API Ready

Stack Auth server: self-hosted user auth API and dashboard, admin preset

SuperSlowSloth

0

NEW

Authelia | (Just Updated) SSO and OIDC Provider, Forward-Auth, Admin Login and Agent Token Ready

Authelia SSO server: OIDC provider, forward-auth, admin login preset

SuperSlowSloth

0

NEW

Casdoor | (Just Updated) SSO and OIDC Identity Provider, Postgres, Admin Password Generated on Deploy

Casdoor SSO and OIDC identity server, Postgres, generated admin password

SuperSlowSloth

0

NEW

Vault | (Just Updated) Secrets Manager with KV API, Auto-Unsealed, Root Token Generated, Data Survives Redeploys

Vault secrets manager: KV API, auto-unseal, generated root token

SuperSlowSloth

0

NEW

Pocket ID | (Just Updated) OIDC Provider with Passkeys, Admin and API Key Preset, Data Survives Redeploys

Pocket ID OIDC provider: passkey login, API key and admin preset

SuperSlowSloth

0

NEW

FusionAuth | (Just Updated) OAuth2 and OIDC Login Server, Admin and API Key Generated

FusionAuth: OAuth2, OIDC and SAML login server with REST API

SuperSlowSloth

0

NEW

Zitadel | (Just Updated) OIDC and SAML Identity Provider, Admin Login and API Token Ready

Zitadel identity provider: OIDC, SAML, SSO, generated admin and API token

SuperSlowSloth

0

Logto | (Just Updated) Auth0 Alternative, OIDC Identity Server, Admin Login and API Client Ready

Logto auth server: OIDC, OAuth, SSO, generated admin and API client

SuperSlowSloth

0

Authentik | (Just Updated) SSO Identity Provider, OIDC and SAML, Admin Login and API Token Ready

Authentik SSO identity provider: OIDC, SAML, LDAP, generated admin login

SuperSlowSloth

0

Authorizer | (Just Updated) Auth0 Alternative, Login Page + Postgres Included

Auth0 alternative: login page, admin dashboard and Postgres included

SuperSlowSloth

0

Bitwarden Lite

A secure password manager for storing and syncing credentials.

Rakit

0

Pocket ID passkey SSO

Passkey OIDC identity with guarded setup and persistent SQLite.

Anton Orel

0

Cap CAPTCHA | Self-Hosted Proof-of-Work CAPTCHA That Passes Its Health Check

Self-host Cap on Railway — proof-of-work CAPTCHA, pinned, health-checked.

Templates Guru

0

Authorizer | Self-Hosted Auth with Postgres, Zero Setup Questions

Self-host Authorizer on Railway: keys generated, nothing to fill in first

Templates Guru

0

Ory Hydra

Ory Hydra 26.2: OAuth 2.0 and OpenID Connect server on Postgres.

Agaz Self-Host

0

Ory Kratos

Ory Kratos 26.2: headless identity and user management API on Postgres.

Agaz Self-Host

0

Cerbos

Cerbos 0.55: authorization policy engine with Admin API and SQLite store.

Agaz Self-Host

0

LLDAP

LLDAP 0.6: light LDAP server for user management, with a web UI.

Agaz Self-Host

0

Authentik

authentik 2026.8: identity provider with SSO, OIDC, SAML, LDAP and MFA.

Agaz Self-Host

0

Pocket ID

Pocket ID 2.16 passkey-only OIDC provider for single sign-on.

Agaz Self-Host

0

OpenFGA

OpenFGA 1.21 Zanzibar-style authorization server with Postgres.

Agaz Self-Host

0

SpiceDB

SpiceDB 1.56 Zanzibar-style permissions database with Postgres.

Agaz Self-Host

0

SuperTokens

Self-hosted SuperTokens 12.2 auth core with Postgres, private API key.

Agaz Self-Host

0

hodor

A tiny reverse proxy to gate your app with single shared password.

Jonathan Stanley

0

twingate-template

Twingate zero-trust connector — private-network access in one click

Nameless

0

FerrisKey+PostgreSQL

Unofficial hardened ferriskey docker image from Danny

Danny

0

Keycloak | (Just Updated) Auth0 Alternative With A Working Admin Login

Keycloak 26 SSO with an admin login that exists. Postgres, prebuilt, pinned

SuperSlowSloth

0

Hexclave — Self-Hosted Auth, S3 Storage & Webhooks

Self-hosted auth, teams, analytics, and file uploads with built-in S3.

GH5T

0

Permify Latest

Permify is an open-source service for fine-grained authorization.

0

Authentik (SSO + MFA)

Self-hosted SSO IdP with MFA and a policy engine.

BURNI80

0

Cerbos authorization

Policy-based authorization with Git-synced policies and secure decisions.

Anton Orel

0

Zitadel — Modern Open Source IAM & Identity Platform

Self-host Zitadel — modern IAM with OIDC, SAML & multi-tenancy

SilverBanana

1

Pocket ID — Passkey-Only OIDC Provider

Self-host Pocket ID — passwordless passkey SSO for your apps

SilverBanana

0

Authorizer — Open Source Auth + AI Authorization

Self-host Authorizer — auth, login UI & permission-aware AI

SilverBanana

0

SuperTokens — Open Source Auth for Your App

Self-host SuperTokens — email, social & passwordless auth SDK

SilverBanana

0

Authentik — Self-Hosted SSO, OAuth2, SAML & LDAP

Self-host Authentik — SSO, OAuth2, SAML, LDAP & MFA identity

SilverBanana

0

Passbolt — Open Source Team Password Manager

Self-host Passbolt — end-to-end encrypted team password vault

SilverBanana

0

Vaultwarden

Self-hosted Bitwarden-compatible password manager server.

Agaz Self-Host

0

Logto

Logto — open-source auth provider: OIDC, OAuth 2.1, SSO, RBAC, MFA

INAPP

2

DocuSeal - Document Signing

Open-source DocuSign alternative for self-hosted document signing.

codestorm

3

vaultwarden

Lightweight self-hosted Bitwarden-compatible password manager in Rust

SuperSlowSloth

0

Keycloak — Self-Hosted Auth0 Alternative with SSO

Self-host Keycloak: SSO, OIDC, SAML. No per-MAU fees. Apple & Discord login

SilverBanana

1

Pocket ID

A simple OIDC provider that enables authentication with passkeys.

maxrn

1

Pocket ID

A simple, self-hosted OIDC provider with passkey-only authentication.

alphasec

3

Hemmelig.app

Hemmelig - Encrypted Secret Sharing

wrrd‘s projects

2

Authelia | Lightweight Open Source Keycloak Alternative

Self-Host Authelia - SSO, TOTP, WebAuthn, OpenID Connect, forward auth

Heimdall

7

SuperTokens | Open Source Auth0, AWS Cognito, Okta Alternative

Self Host SuperTokens. Email, Social & Passwordless Authentication

Heimdall

10

aliasvault

AliasVault is a privacy-first password manager with built-in email aliasing

koukyo_huang

1

DocuSeal – Open-Source DocuSign, PandaDoc Alternative on Railway

Self-host DocuSeal — Unlimited E-Signature & PDF Signing

Heimdall

17

Unkey API Management

One-click deploy for Unkey API, including MySQL and Redis.

esooLsIeicuJehT

2

Turnstile

A reverse proxy that authenticates users via Railway's OAuth flow.

Tinybox Software

2

Spicedb

Deploying Authzed Spicedb

Chronicle

2

Fusio - API Management Platform

fusio 6.2 Self-hosted API management with OAuth2, OpenAPI and admin UI.

Xav

4

Permify

Open-source fine-grained authorization inspired by Google Zanzibar

swegit

8

Vaultwarden

Vaultwarden, an open source, self-hostable Bitwarden backend

Joost van der Laan

3

Infisical HA

Platform to securely manage application configuration and secrets.

Medim

2

One Time Secret

Share sensitive information securely with self-destructing links

Karim Zarzour

1

Cap

Self-hosted CAPTCHA for the modern web.

dandandev

7

Go Auth Service

Deploy and Host Go Auth Service with Railway

Rubrion

0

caddy-password-auth

A lightweight Caddy reverse proxy with HTTP Basic Authentication.

Ilia Bukin

4

Caddy Auth Proxy

A lightweight Caddy-based authentication proxy that protects services.

Rubrion

3

SIWE-OIDC

Sign In With Ethereum OpenID Connect Provider

0

praetorian

A lightweight service for wrapping and unwrapping data encryption keys.

Karl Bateman

2

PSWD

Password Generation Should Be Simple And Secure.

Mex Delgado

0

Zitadel

Zitadel on Railway with PostgreSQL

Trần Huy Duẫn

9

StackAuth

auth0 and Clerk selfhostable alternative. robust, secured, and customizable

chin

17

Nextjs-pocketauth

Nextjs starter with simple auth by Pocketbase

chin

10

bknd

Feature-rich yet lightweight backend

10

Logto (Auth)

🧑‍🚀 The better identity infrastructure for developers

33

oauth2-proxy

Reverse proxy that provides auth with Google and more identity providers

Youssef Siam

18

SuperTokens | Open Source Auth0 Alternative for Authentication

Self-hosted auth with sessions and social login, Auth0 alternative

katsuba.dev

68

Supabase Auth

Authentication and User Management by Supabase

Rigo

59

Teleport

The easiest and most secure way to access and protect infrastructure.

Six

6

authentik

A working template to spin up authentik with minimal resources.

My Workspace

38

BoxyHQ / Jackson SSO

Security Building Blocks For Developers

Adam

11

Email authenticator

Email Authentication service.

Ashween Mankash

16

Zitadel

[2026-11-04] Zitadel v4.20.1, classic login kept (see README).

beuz

114

Deploy authentication services in one click

All 146 authentication templates