Deploy FusionAuth
Customer Identity and Access Management (CIAM) platform
FusionAuth
Just deployed
FusionAuth DB
Just deployed
/var/lib/postgresql/data
Deploy and Host FusionAuth on Railway
FusionAuth is a customer identity and access management (CIAM) platform that adds authentication, authorization, and user management to your applications. It provides login, registration, SSO, MFA, passwordless authentication, and more—with support for OAuth2, OIDC, and SAML v2 protocols out of the box.
About Hosting FusionAuth
Hosting FusionAuth on Railway provides a complete identity infrastructure with minimal configuration. The template automatically provisions a dedicated PostgreSQL database for storing users, applications, tenants, and identity data. FusionAuth runs as a single container exposing port 9011 for both the admin UI and API endpoints.
This template uses database-based search instead of Elasticsearch/OpenSearch, reducing resource requirements while maintaining full functionality. Both services run on Railway's private network by default, ensuring secure internal communication. Database migrations run automatically on startup, so you're ready to configure your first application immediately after deployment.
Common Use Cases
-
User Authentication: Add login, registration, password reset, and email verification to your application with customizable themed login pages.
-
Single Sign-On (SSO): Enable users to authenticate once and access multiple applications using OAuth2, OIDC, or SAML v2 protocols.
-
Multi-Factor Authentication (MFA): Secure user accounts with TOTP authenticator apps, SMS, email, or passkey-based verification.
-
Multi-Tenant SaaS: Manage separate user pools and configurations for each customer or organization in your B2B application.
Dependencies for FusionAuth Hosting
- PostgreSQL Database — Included in this template, configured with private network connections
Deployment Dependencies
- FusionAuth Documentation
- FusionAuth Quickstarts — Step-by-step integration guides
- FusionAuth API Reference
- FusionAuth Docker Guide
Implementation Details
Private Network Communication: All communication between FusionAuth and PostgreSQL occurs over Railway's private network. The database is not accessible from outside the private network by default.
Initial Setup: After deployment, access the FusionAuth admin UI to complete the setup wizard. You'll create an admin user and configure your first application.
Connecting Your Application: Configure your application to use FusionAuth as an OAuth2/OIDC provider using the client credentials from the admin UI.
Health Checks: FusionAuth exposes a status endpoint at /api/status on port 9011 for monitoring service health.
Why Deploy FusionAuth on Railway?
Railway is a singular platform to deploy your infrastructure stack. Railway will host your infrastructure so you don't have to deal with configuration, while allowing you to vertically and horizontally scale it.
By deploying FusionAuth on Railway, you are one step closer to supporting a complete full-stack application with minimal burden. Host your servers, databases, AI agents, and more on Railway.
Template Content
FusionAuth
fusionauth/fusionauth-app:latestFusionAuth DB
ghcr.io/railwayapp-templates/postgres-ssl:17
