Deploy and Host Kviklet on Railway

Kviklet gives engineering teams a reviewed, auditable path to production database access. This template deploys its web application with a private PostgreSQL metadata store, generated administrator credentials, encrypted target-database credentials, health checks, and durable audit history.

About Hosting Kviklet

Kviklet provides pull-request-style review for individual SQL statements and time-limited database sessions. It supports PostgreSQL, MySQL, MariaDB, Microsoft SQL Server, and MongoDB targets, while Kviklet's own PostgreSQL service retains users, connections, approvals, comments, and execution history.

The template exposes only Kviklet's port 8080 web interface through Railway. PostgreSQL remains on private networking, and its data lives on a 5 GB persistent volume.

Why Deploy Kviklet on Railway

Railway generates the database password, initial administrator password, and credential-encryption key, then wires Kviklet to PostgreSQL over private networking. You supply one administrator email and receive a usable approval service without managing a VM or exposing the metadata database.

Common Use Cases

• Require peer approval before production SQL runs.
• Grant engineers time-limited database access without sharing standing credentials.
• Keep a searchable audit trail of requested, approved, and executed statements.
• Centralize access rules across several database engines.

Dependencies for Kviklet Hosting

The deployment includes Kviklet 0.7.0 and PostgreSQL 17.5. Target databases are external to the template and must be reachable from Kviklet.

Deployment Dependencies

• Kviklet container image from ghcr.io/kviklet/kviklet
• PostgreSQL metadata database with a persistent Railway volume
• A target PostgreSQL, MySQL, MariaDB, Microsoft SQL Server, or MongoDB database

After deployment, sign in with the email entered as INITIAL_USER_EMAIL and the generated INITIAL_USER_PASSWORD shown in the Kviklet service variables. Add target connections with least-privilege database roles and configure review rules before inviting users.