Deploy Infisical (Open-Source Secrets Management & Env Vault) with Resend

A production-ready secrets management platform combining Infisical, PostgreSQL, Redis, and a Resend SMTP gateway for secure team secret management and email notifications.

What's Included

• Infisical: Open-source secrets vault for managing environment variables and secrets
• PostgreSQL: Persistent relational database for Infisical data storage
• Redis: In-memory cache for session management and performance
• Resend Railway Gateway: SMTP relay service for email delivery

Features

• Secure encrypted secrets management with zero-knowledge architecture
• Multi-environment and multi-tenant support
• Email notifications and alerts via Resend
• HA cluster support for high availability
• Role-based access control for team collaboration
• Automatic inter-service networking and configuration

Getting Started

1. Click Deploy to provision all services
2. Provide your Resend API key and SMTP credentials
3. Access Infisical at the generated domain
4. Create your admin account and invite team members
5. Start managing secrets across your organization

Configuration

All services are pre-wired with reference variables. You only need to provide:

• RESEND_API_KEY: Your API key from Resend for email delivery
• SMTP_USER & SMTP_PASS: Custom credentials for the SMTP gateway
• SITE_URL: Public domain for accessing Infisical (optional, defaults to http://localhost:8080)

Database connections and Redis are automatically configured.

Deploy and Host

1. Click Deploy to create all services simultaneously
2. Railway provisions PostgreSQL with persistent volume and backup support
3. Redis cache is initialized with persistent storage
4. Infisical starts with health checks enabled
5. Resend Gateway connects to Infisical on private network
6. Public domain is automatically generated for web access

All infrastructure is managed by Railway with automatic scaling, monitoring, and failover capabilities.

About Hosting

Railway provides fully managed hosting for each component:

• PostgreSQL: Managed relational database with SSL connections, automatic backups, and point-in-time recovery. Supports HA Patroni clusters for production deployments.
• Redis: Managed in-memory cache with persistent disk storage. Supports HA Sentinel failover with HAProxy routing.
• Infisical: Containerized application with automatic health checks, rolling deployments, and public HTTP domain.
• Resend Gateway: Lightweight SMTP relay running on private network, no public internet access needed.

All services communicate via Railway's private network. Data persists across deployments via managed volumes. No manual server management required.

Why Deploy

• Eliminate .env sprawl: Replace scattered environment files with centralized, audited secret storage
• Secure team collaboration: Share secrets safely without exposing raw values in chat or email
• Compliance ready: Full audit logging of who accessed which secrets and when
• Developer experience: Simple CLI and SDKs for integrating secrets into applications
• Production-ready: HA clustering, backups, and disaster recovery built-in
• Cost effective: Open-source software hosted on affordable Railway infrastructure

Common Use Cases

• Microservices architecture: Centralized secret source for service-to-service authentication and API keys
• CI/CD pipelines: Inject secrets into build and deployment workflows securely
• Multi-tenant SaaS: Isolate and manage secrets per customer or environment
• Database credential rotation: Automate periodic rotation of database passwords
• Third-party API keys: Centralize management of Stripe, AWS, GitHub tokens
• Team onboarding: Quickly provision new developers with appropriate secret access
• Development workflows: Local secret injection matching production environments

Dependencies for Each Service

Infisical depends on PostgreSQL for persistent data storage, Redis for caching and session management, and the Resend SMTP Gateway for email delivery. It also requires private network connectivity to PostgreSQL and Redis.

PostgreSQL is a self-contained database service and requires a persistent volume for database storage. SSL/TLS is enabled for secure database connections.

Redis is a self-contained cache service and requires a persistent volume for persistence. Password authentication is configured automatically.

The Resend Railway Gateway requires a Resend API key and SMTP credentials. It is a stateless service and does not require a database. Infisical connects to the gateway through Railway's private network.