Deploy securo

Deploy and Host Securo on Railway

Securo is an open-source, privacy-first personal finance manager for tracking accounts, transactions, budgets, investments, invoices, and household financial goals. It keeps data under your control while providing a polished browser interface, multi-user workspaces, bank integrations, reports, imports, and secure local authentication for self-hosted financial organization.

About Hosting Securo on Railway

Railway runs the pinned official GHCR frontend and backend images alongside pgvector PostgreSQL and Redis. The frontend receives the public domain and proxies API requests over Railway private networking, while volumes preserve the database and uploaded attachments.

Tech Stack

• React, Vite, and nginx frontend
• FastAPI and Uvicorn backend
• PostgreSQL 16 with pgvector
• Redis 8
• Alembic database migrations
• Railway private networking and persistent volumes

Why Deploy Securo on Railway

Railway provides a fast one-click deployment path with managed networking, generated HTTPS domains, private service DNS, environment variable references, and persistent volumes. This keeps the browser UI public while the API and data services stay private to the project.

Common Use Cases

• Track household accounts, transactions, budgets, and savings goals.
• Import statements and review financial reports in a browser.
• Manage investments, invoices, recurring transactions, and attachments.
• Run a privacy-first personal finance workspace without sending core data to a hosted SaaS.

Deployment Notes

• The public frontend listens on container port 8080; Railway routes the generated HTTPS domain to that port.
• The backend listens privately on port 8000 and is reached by the frontend through BACKEND_URL.
• The backend startup command runs Alembic migrations before Uvicorn because the published backend image does not run migrations by default.
• PostgreSQL uses pgvector and persists /var/lib/postgresql/data; the backend persists uploaded attachments at /app/data/attachments.
• Agents are disabled by default. Agent knowledge and embedding-model paths are therefore ephemeral in this minimal deployment.
• The first administrator is created from the Securo setup screen; this release does not provide fixed initial credentials or credential environment variables.
• This minimal template omits Celery worker and beat services. Core web use is available immediately; background bank synchronization and scheduled jobs require adding those services.

Dependencies for Securo on Railway

The frontend depends on the private backend service. The backend depends on PostgreSQL for application data and Redis for rate limiting and task-broker connectivity.

Deployment Dependencies