Deploy and Host Shadowbroker on Railway

About Hosting

Shadowbroker is a self-hosted, open-source geospatial OSINT dashboard that combines aviation, maritime, satellite, conflict, environmental, and network intelligence overlays into a single map interface.

This template deploys Shadowbroker as a two-service architecture aligned with upstream containers:

shadowbroker (Next.js frontend, public)
shadowbroker-backend (FastAPI backend, private)

Both services use upstream GHCR images pinned by digest for deterministic deployments:

ghcr.io/bigbodycobain/shadowbroker-frontend@sha256:eca2fdaedc3029934287daf61f8385ce205dd2d098fa8ebe55214d81271461a3
ghcr.io/bigbodycobain/shadowbroker-backend@sha256:64b70ad2c98dbdb6460737dea71a4061b5ad4b56c2dd4984c72ca72fbf6db9ea

Why Deploy

Complete self-hosted OSINT node — run a powerful global intelligence dashboard under your control.
Separated frontend/backend topology — public UI with private API service over Railway private networking.
No mandatory external DB — backend stores runtime data directly under /app/data.
Upstream-pinned images — stable template behavior with explicit version tags.
Template-ready rollout — reusable, one-click baseline for personal or team deployments.

Common Use Cases

Personal geopolitical and situational awareness dashboard.
OSINT research workstation with many public signal layers in one map.
Team-shared threat monitoring node with controlled admin access.
Private deployment for analysts who do not want third-party telemetry collection.
Reproducible infrastructure baseline for extending Shadowbroker with custom data sources.

Dependencies for Deployment

Deployment Dependencies

Dependency	Details
Frontend Image	`ghcr.io/bigbodycobain/shadowbroker-frontend@sha256:eca2fdaedc3029934287daf61f8385ce205dd2d098fa8ebe55214d81271461a3`
Backend Image	`ghcr.io/bigbodycobain/shadowbroker-backend@sha256:64b70ad2c98dbdb6460737dea71a4061b5ad4b56c2dd4984c72ca72fbf6db9ea`
Public Port	`shadowbroker` on `3000` (`PORT=3000`)
Backend Port	`shadowbroker-backend` on `8000`
Private Networking	`BACKEND_URL=http://${{shadowbroker-backend.RAILWAY_PRIVATE_DOMAIN}}:8000`
Required Security Var	`ADMIN_KEY` (recommended as generated secret)
Optional Data Vars	`AIS_API_KEY`, `OPENSKY_CLIENT_ID`, `OPENSKY_CLIENT_SECRET`, `LTA_ACCOUNT_KEY`
Database/Cache	None required by default
Start Command Override	Not required (use upstream image defaults)