Infisical is the open source secret management platform that teams use to centralize their secrets like API keys, database credentials, and configurations.

this template deploys everything necessary to run a infisical instance (mongodb and redis) and connects everything. After it's deployed, you'll need to create an account using the e-mail method at the Infisical UI available at the default deploy URL.

If you need to configure integrations and everything else, here is the .env.example https://github.com/Infisical/infisical/blob/main/.env.example

Update 2026-10-27

Pinned infisical/infisical:v0.167.4 (was floating latest).
BREAKING (upstream): Infisical moved from MongoDB to PostgreSQL. The template now deploys Postgres 17 and wires DB_CONNECTION_URI / REDIS_URL / ENCRYPTION_KEY (hex) / AUTH_SECRET / SITE_URL. The old MongoDB service is unused and can be deleted; old Mongo-based deploys cannot update in place - see Infisical's mongo-to-postgres migration guide.
Redis switched from bitnami to redis:8.2.1.