Deploy and Host Vaultwarden on Railway

Vaultwarden is an unofficial, lightweight Bitwarden-compatible server written in Rust. It lets you self-host your end-to-end encrypted password vault while staying compatible with most official Bitwarden clients — web vault, browser extensions, desktop, and mobile apps.

About Hosting Vaultwarden

Hosting Vaultwarden means running a single Rust container that serves the Bitwarden web vault and client API over HTTPS. All vault data lives in an embedded SQLite database plus file attachments, so a persistent volume mounted at /data is the only storage requirement — no external database service is needed. HTTPS is mandatory: modern Bitwarden clients and WebAuthn/passkeys reject plain HTTP, and the DOMAIN variable must match the public URL for invite links and passkeys to work. On Railway, TLS is terminated automatically on the generated public domain, and the volume keeps the database and attachments durable across redeploys.

Common Use Cases

Self-hosting a personal or family password manager compatible with official Bitwarden clients
Running a private, organization-enabled vault for a small team with invitations and collections
Evaluating or migrating away from the official Bitwarden server with a lighter, single-container alternative

Dependencies for Vaultwarden Hosting

None — SQLite is embedded in the service; no external database or cache is required
A persistent volume mounted at /data (provisioned automatically by the template)

Deployment Dependencies

Implementation Details

Single service + volume: one Vaultwarden service from the immutable image vaultwarden/server:1.36.0, with a persistent volume mounted at /data holding the SQLite database, attachments, and RSA keys.
HTTPS via Railway: Railway terminates TLS on the generated public domain, so no reverse proxy or certificate management is required. DOMAIN=https://${{Vaultwarden.RAILWAY_PUBLIC_DOMAIN}} is composed from the service's own public domain, so WebAuthn and invite links always match the real URL.
Signups: SIGNUPS_ALLOWED=true is prefilled so you can create your first account (no SMTP is configured). Set it to false after creating your accounts to close public registration.

Why Deploy Vaultwarden on Railway?

Railway is a singular platform to deploy your infrastructure stack. Railway will host your infrastructure so you don't have to deal with configuration, while allowing you to vertically and horizontally scale it.

By deploying Vaultwarden on Railway, you are one step closer to supporting a complete full-stack application with minimal burden. Host your servers, databases, AI agents, and more on Railway.