---
title: "Deploy Passbolt CE"
description: "Deploy and Host Passbolt CE (Open Source Team Password Manager) on Railway"
category: "Other"
url: https://railway.com/deploy/passbolt-ce
---

# Deploy Passbolt CE

Deploy and Host Passbolt CE (Open Source Team Password Manager) on Railway

**[Deploy Passbolt CE on Railway](https://railway.com/template/passbolt-ce)**

- **Creator:** orijins-abundance's Projects
- **Category:** Other
- **Total deploys:** 16

## Template content

### MySQL https://devicons.railway.app/i/mysql.svg

- **Image:** mysql:9.4
- **Start command:** `docker-entrypoint.sh mysqld --innodb-use-native-aio=0 --disable-log-bin --performance_schema=0 --innodb-buffer-pool-size=1G`

### Passbolt https://avatars.githubusercontent.com/u/4386228?s=48&v=4

- **Image:** passbolt/passbolt
- **Start command:** `/bin/bash -c "mkdir -p /var/lib/passbolt-data/gpg /var/lib/passbolt-data/jwt && chown -R www-data:www-data /var/lib/passbolt-data /var/lib/passbolt/tmp && rm -rf /etc/passbolt/gpg /etc/passbolt/jwt && ln -sf /var/lib/passbolt-data/gpg /etc/passbolt/gpg && ln -sf /var/lib/passbolt-data/jwt /etc/passbolt/jwt && chown -R root:www-data /var/lib/passbolt-data/jwt && chmod 750 /var/lib/passbolt-data/jwt && chmod 640 /var/lib/passbolt-data/jwt/* 2>/dev/null; /docker-entrypoint.sh"`
- **Public domain:** Yes

## Documentation

# Deploy and Host Passbolt CE on Railway

Passbolt is a hybrid credential platform. It is built-first for modern IT teams, yet simple enough for everyone.
A sovereign, battle-tested solution that delivers for a team of 5, or an organisation of 5000.

## About Hosting Passbolt CE

⚠️ This is not a one click deploy ⚠️

You will have to SSH to the server using [Railway CLI](https://docs.railway.com/guides/cli)

## Common Use Cases

- Team password management
- TOTP sharing
- Folder based access control

## Dependencies for Passbolt CE Hosting

- Maria DB (pre-installed by template)
- An SMTP server (you won't be able to login without it)
- Connecting to the container via SSH

## Post Deploy Setup

ℹ Below are *mandatory* one time setup after deploying the template:

1. Open a terminal, make sure you have the [Railway CLI](https://docs.railway.com/guides/cli) installed (run `railway login` if needed)
2. Let Passbolt instance start, right click on it in Railway and select `Copy SSH Command`.
3. Paste the terminal command from last step and press enter

You should now have a terminal session to your railway container, command invite should show `root@abcdefxxx:/usr/share/php/passbolt#`

#### Obtain and set GPG key fingerprint

1. Paste the following command, this will output your GPG key fingerprint
`
gpg --homedir /var/lib/passbolt/.gnupg --list-keys --with-colons | grep fpr | head -1 | cut -d: -f10
`
2. Copy the 40-character fingerprint
3. Add environment variable:
`
PASSBOLT_GPG_SERVER_KEY_FINGERPRINT=
`

#### Set up SMTP server variable:
Pick your favorite email service provider then set the following environment variables:
EMAIL_TRANSPORT_DEFAULT_HOST
EMAIL_TRANSPORT_DEFAULT_PORT
EMAIL_TRANSPORT_DEFAULT_USERNAME
EMAIL_TRANSPORT_DEFAULT_PASSWORD 

ℹ️ Logging in requires receiving a sign up link via email. You will not be able to login without it.

⚠️ == Restart your Railway container to apply the new EMAIL and GPG env variables == ⚠️ 

#### Create first admin user
SHH to the container as explained in previous steps.

Run the following command:
```bash
su -m -c "/usr/share/php/passbolt/bin/cake passbolt register_user \
  -u YOUR_EMAIL \
  -f YOUR_NAME \
  -l YOUR_LASTNAME \
  -r admin" -s /bin/sh www-data
```

Replace:
- `YOUR_EMAIL` - Your email address
- `YOUR_NAME` - Your first name
- `YOUR_LASTNAME` - Your last name

### Debug and healthchecks
Optionnally you can run the following command (via SSH):
```bash
su -s /bin/bash -c "/usr/share/php/passbolt/bin/cake passbolt healthcheck" www-data
```
The FORCE TLS issue is expected, Railway reverse proxy is handling https.

### Deployment Dependencies

Related resources:
- [Passbolt Docker install guide](https://www.passbolt.com/docs/hosting/install/ce/docker/)
- [Passbolt env variables reference](https://www.passbolt.com/docs/hosting/configure/environment-reference/)

## Why Deploy Passbolt CE on Railway?


Railway is a singular platform to deploy your infrastructure stack. Railway will host your infrastructure so you don't have to deal with configuration, while allowing you to vertically and horizontally scale it.

By deploying Passbolt CE on Railway, you are one step closer to supporting a complete full-stack application with minimal burden. Host your servers, databases, AI agents, and more on Railway.


## Similar templates

- [Rocky Linux](https://railway.com/deploy/rocky-linux) — Hosted Rocky Linux 9 workspace with SSH and persistent storage. 🚀
- [Foundry Virtual Tabletop](https://railway.com/deploy/X5tR6G) — A Self-Hosted & Modern Roleplaying Platform
- [Letta Code Remote](https://railway.com/deploy/letta-code-remote) — Run a Letta Code agent 24/7. No inbound ports, just deploy.

Open this page in a browser: https://railway.com/deploy/passbolt-ce