Deploy MinIO - Isolated Services
S3-compatible object storage with isolated bucket and console services
MinIO Console
Just deployed
MinIO Bucket
Just deployed
/data
Deploy and Host MinIO — Isolated Services on Railway
About Hosting MinIO — Isolated Services
MinIO is an open-source, high-performance, S3-compatible object storage system designed for cloud-native workloads.
This Two Services template deploys MinIO using separate services on Railway: one service dedicated to the S3 Bucket API and another dedicated to the Web Console. This architecture enables stronger security boundaries, better scalability, and clearer separation of responsibilities compared to a single-service deployment.
You can configure security-sensitive options such as STS token duration, expose only the Console publicly, and keep the Bucket service private within Railway’s internal network. Data is persisted using Railway volumes.
Common Use Cases
- Production object storage with stricter security requirements
- Internal or private S3-compatible storage backends
- AI/ML pipelines requiring stable and isolated storage services
- Multi-application environments sharing a single storage backend
- Teams requiring controlled access to the MinIO Console
Dependencies for MinIO — Isolated Services
Deployment Dependencies
- Railway account
- Two Railway services (Bucket and Console)
- Railway volume (for persistent data)
- MinIO Docker image (official)
No external services are required.
Configuration
This template supports the following configurable options via Railway environment variables:
-
Root Credentials Set
MINIO_ROOT_USERandMINIO_ROOT_PASSWORDsecurely using Railway secrets. -
STS Duration Control temporary credential lifetime using
MINIO_STS_DURATION(for example:1h,12h). -
Network Separation The Bucket service runs on Railway’s private network, while the Console service is exposed publicly through a Railway-managed domain.
-
Public Access Control Only the Console is publicly accessible; the S3 API remains private by default.
-
Persistence Object data is stored on a Railway volume to survive restarts and redeployments.
Why Deploy MinIO — Two Services on Railway?
-
Improved Security Keep the S3 Bucket API private while exposing only the Console.
-
Clear Separation of Concerns Console and storage traffic are isolated into different services.
-
Better Scalability Scale Bucket and Console services independently.
-
Production-Ready Architecture Reduced blast radius and cleaner operational boundaries.
-
Full S3 Compatibility Works seamlessly with existing AWS S3 SDKs and tools.
This template is best suited for production environments or teams that require stronger isolation, better scalability, and improved security.
Template Content
MinIO Console
railwayapp-templates/minio-consoleMinIO Bucket
railwayapp-templates/minio