---
title: "Deploy Thumbor"
description: "Smart on-demand image cropping, resizing and filtering service"
category: "Other"
url: https://railway.com/deploy/thumbor-1
---

# Deploy Thumbor

Smart on-demand image cropping, resizing and filtering service

**[Deploy Thumbor on Railway](https://railway.com/template/thumbor-1)**

Machine-readable deploy manifest (JSON, validated by TemplateCI): https://railway.com/deploy/thumbor-1/manifest.json

- **Creator:** zer0person's Projects
- **Category:** Other
- **Total deploys:** 1

## Template content

### Thumbor

- **Image:** ghcr.io/thumbor/thumbor:latest
- **Start command:** `sh -c 'printf "ALLOW_UNSAFE_URL = False\nSECURITY_KEY = \"%s\"\n" "$SECURITY_KEY" > /tmp/thumbor.conf && exec thumbor -c /tmp/thumbor.conf -i 0.0.0.0 -p 8080'`
- **Health check:** /healthcheck
- **Public domain:** Yes

## Documentation

# Deploy and Host Thumbor on Railway

[Thumbor](https://github.com/thumbor/thumbor) is a smart imaging service. It crops, resizes, flips and filters images on demand, using face and feature detection to find the important part of a picture, and returns the result from a URL.

## About Hosting Thumbor

This template runs the official `ghcr.io/thumbor/thumbor:latest` image on port 8080, with a generated configuration file. It is stateless: no volume or database. Thumbor allows unsigned `/unsafe/` URLs by default, which would make a public instance an open image proxy for anyone. This template turns that off (`ALLOW_UNSAFE_URL = False`) and generates a random `SECURITY_KEY`, shown in the service Variables tab. Every request must carry an HMAC signature made with that key (see the [libthumbor](https://github.com/thumbor/libthumbor) clients and the [security docs](https://thumbor.readthedocs.io/en/latest/security.html)). Open `/healthcheck` to confirm the server is up.

## Common Use Cases

- Serve responsive, cropped and optimized images for a site or app
- Smart thumbnails that keep faces and subjects in frame
- A shared image processing endpoint for several apps

## Dependencies for Thumbor Hosting

- One stateless service; nothing else

### Deployment Dependencies

- [Thumbor on GitHub](https://github.com/thumbor/thumbor)
- [Documentation](https://thumbor.readthedocs.io)
- [Container image](https://github.com/thumbor/thumbor/pkgs/container/thumbor)

## Why Deploy Thumbor on Railway?

Railway gives you a public HTTPS URL, a generated signing key and automatic restarts with no server to maintain.


## Similar templates

- [Rocky Linux](https://railway.com/deploy/rocky-linux) — Hosted Rocky Linux 9 workspace with SSH and persistent storage. 🚀
- [Foundry Virtual Tabletop](https://railway.com/deploy/X5tR6G) — A Self-Hosted & Modern Roleplaying Platform
- [Letta Code Remote](https://railway.com/deploy/letta-code-remote) — Run a Letta Code agent 24/7. No inbound ports, just deploy.

Open this page in a browser: https://railway.com/deploy/thumbor-1