Deploy and Host TrueForge with Railway

TrueForge is an open-source agent harness for model calls, MCP tools, skills, sandboxing, approvals and persistent agent sessions.

About Hosting TrueForge

This community template deploys the hosted TrueForge topology with no required input:

Proxy - public Caddy endpoint with Railway-generated Basic Auth credentials
TrueForge - private hosted-mode application service
Postgres - private durable system of record with a persistent volume
Redis - private executor-peering service with AOF persistence

Only Proxy receives a public Railway domain. TrueForge, Postgres and Redis remain on Railway private networking.

Why Deploy TrueForge on Railway

Railway provides private service networking, generated reference variables, persistent volumes and one-click project provisioning. The template captures the working hosted topology so users do not need to assemble four services manually.

Common Use Cases

Run a private shared AI-agent harness
Connect agents to MCP tools and external model providers
Add approval checkpoints and durable sessions to agent workflows
Provide a protected browser UI and HTTP API
Connect an external sandbox provider for code and file execution

Dependencies for TrueForge Hosting

Caddy public authentication proxy
TrueForge hosted-mode service
PostgreSQL for durable state
Redis for executor peering
Optional model, MCP and sandbox provider credentials configured after deployment

Deployment Dependencies

Upstream project: https://github.com/truefoundry/trueforge
TrueForge documentation: https://trueforge.dev/quickstart
Authentication guidance: https://trueforge.dev/authentication/overview
Community Railway wrapper: https://github.com/just-deploy-it/trueforge-railway

After Deployment

Open the Proxy service variables.
Copy the generated BASIC_AUTH_USERNAME and BASIC_AUTH_PASSWORD.
Open the generated Proxy domain and authenticate.
In TrueForge Settings, configure a model provider and any MCP or sandbox integrations you need.

Security

TrueForge hosted mode has no built-in login unless you configure OIDC. This template therefore protects the public endpoint with generated Basic Auth and keeps the TrueForge service private. Organizations requiring individual user identity should additionally configure TrueForge OIDC.

Persistence

PostgreSQL data is stored at /var/lib/postgresql/data with PGDATA in a child directory. Redis AOF data is stored at /data. Both volumes are included in fresh template deployments.

The wrapper is used only because Railway cannot serialize the upstream JFrog image or external upstream repository into an owned template. It is automatically updated from verified npm releases and fails closed when release metadata or tests do not pass.

This template is maintained by Just Ship It and is not affiliated with or endorsed by TrueFoundry.