---
title: "Deploy Support Secret Drop with PrivateBin"
description: "Browser-encrypted support pastes with one-hour default expiry."
category: "Other"
url: https://railway.com/deploy/support-secret-drop-with-privatebin
---

# Deploy Support Secret Drop with PrivateBin

Browser-encrypted support pastes with one-hour default expiry.

**[Deploy Support Secret Drop with PrivateBin on Railway](https://railway.com/template/support-secret-drop-with-privatebin)**

Machine-readable deploy manifest (JSON, validated by TemplateCI): https://railway.com/deploy/support-secret-drop-with-privatebin/manifest.json

- **Creator:** dankeewithtwoes's Projects
- **Category:** Other

## Template content

### App

- **Image:** privatebin/nginx-fpm-alpine@sha256:4d4e8d8c05e7556a5fbf481375fc2f8311402d780ac0b074314b197544288156
- **Start command:** `/bin/sh -c 'set -eu; chown 65534:82 /srv/data; printf "%s" "$PRIVATEBIN_CONFIG" > /srv/cfg/conf.php; chmod 644 /srv/cfg/conf.php; exec su -s /bin/sh nobody -c '"'"'exec /etc/init.d/rc.local'"'"''`
- **Public domain:** Yes

## Documentation

# Deploy and Host Support Secret Drop with PrivateBin on Railway

Browser-encrypted support pastes with one-hour default expiry.

## About Hosting Support Secret Drop with PrivateBin

Support engineers exchanging short snippets with an external customer.

Paste a small diagnostic snippet, optionally add a paste password, review the expiry and burn-after-reading choices, and send the full generated link through an approved channel. The URL fragment contains the decryption key.

### Included services and storage

| Service | Persistent storage | Public access |
| --- | --- | --- |
| App | /srv/data | HTTPS domain |

### First deployment

1. Review required inputs in the deploy form and supply your own administrator email where requested.
2. Deploy the services and wait for the application and any database migrations to finish.
3. Open the generated HTTPS domain and follow the workflow above.

## Why Deploy Support Secret Drop with PrivateBin on Railway

The definition supplies an HTTPS endpoint, generated credentials where supported and explicit storage paths. PostgreSQL, when present, stays private. Public upstream image manifests are locked to immutable digests so an upstream tag change does not silently replace a running version.

## Common Use Cases

- Share a short diagnostic snippet.
- Exchange a temporary support secret.
- Send expiring instructions to one recipient.

## Dependencies for Support Secret Drop with PrivateBin

- [Upstream application and its documentation](https://github.com/PrivateBin/PrivateBin). The upstream authors own the application and its license. This recipe does not claim application authorship or official endorsement.
- A Railway plan with resources sufficient for these services. Hosting, storage and outbound traffic are billed by Railway; no software subscription, bank connection, SMTP account or provider credit is included.

### Operational limits and backups

Burn-after-reading is preselected, default expiration is one hour, uploads and comments are disabled, and paste size is capped at 1 MB. This is a public paste creation endpoint, so monitor abuse. A recipient, browser extension or link scanner may open or copy the content. Expiry and backups are not an enterprise deletion guarantee.

Run one replica for volume-backed applications. Schedule volume backups and export important application data; a persistent volume is not a backup. Keep generated secrets with the backups and review upstream migration notes before changing the pinned image. Credentials cannot all be rotated by changing first-run environment variables after accounts already exist.

### Validation status

Prepared on 2026-10-18 from upstream installation documentation and public image manifests. Railway schema, variable references and publication metadata are checked before publication. Application runtime boot checks were not performed. This is an independently authored deployment recipe for existing software, not a claim of novel software, audited security or Railway partner verification.


## Deploy this recipe

[![Deploy on Railway](https://railway.com/button.svg)](https://railway.com/new/template/support-secret-drop-with-privatebin?utm_source=railway-marketplace&utm_medium=listing&utm_campaign=toolkit-discovery&utm_content=support-secret-drop)

Review the required inputs and hosting resource costs before deploying.

### Related deployment recipes

- [Twenty CRM with Worker & Shared S3](https://railway.com/template/twenty-crm-with-worker-and-shared-s3) — CRM with Postgres, Redis, background worker and shared S3 file storage.
- [Ubuntu Browser Terminal Starter](https://railway.com/template/ubuntu-browser-terminal-starter) — Password-protected Ubuntu web terminal with a persistent workspace volume.
- [Ubuntu SSH and AI CLI Starter](https://railway.com/template/ubuntu-ssh-and-ai-cli-starter) — SSH development container with generated credentials and durable workspace.

These are separate deployments; no preconfigured integration between the applications is implied.

Disclosure: this template is maintained independently. Its maintainer may earn Railway usage kickbacks when other people deploy it. Railway bills hosting separately; no paid software subscription or provider credits are included.



## Similar templates

- [Rocky Linux](https://railway.com/deploy/rocky-linux) — Hosted Rocky Linux 9 workspace with SSH and persistent storage. 🚀
- [Foundry Virtual Tabletop](https://railway.com/deploy/X5tR6G) — A Self-Hosted & Modern Roleplaying Platform
- [Letta Code Remote](https://railway.com/deploy/letta-code-remote) — Run a Letta Code agent 24/7. No inbound ports, just deploy.

Open this page in a browser: https://railway.com/deploy/support-secret-drop-with-privatebin