Adam

BoxyHQ / Jackson SSO

Home

Templates

Authentication

Railway is a platform that makes it easy to deploy and manage your applications in the cloud.

Railway

You can deploy BoxyHQ / Jackson SSO on Railway by clicking the "Deploy Now" button on this page. Railway will automatically set up all the necessary services and configurations for you.

How do I deploy BoxyHQ / Jackson SSO on Railway?

Railway handles all the infrastructure requirements. You only need a web browser to deploy and manage your application.

What are the system requirements?

Yes, this template is free to use within your existing Railway account.

Is this template free to use?

Yes, you can fully customize this template. After deployment, you will have full control of what you've deployed in your Railway project.

Can I customize this template?

You can get support through our community forum: boxy-hq-jackson-sso-afaa29ca, or join our Discord community for more assistance.

How do I get support for this template?

Adam's Projects

Postgres

Public URL to connect to Postgres database, used by the Data panel.

Location where the database will be initialized

Default database created when image is started.

jackson

The database URL to connect to. If you are using self-signed certificates then pass sslmode=no-verify instead of sslmode=require in the DB_URL. This is because self-signed certs will be rejected as unauthorized in strict mode. Also, set DB_SSL=true and DB_SSL_REJECT_UNAUTHORIZED=false 

The public URL to reach this service. This is used internally to construct the callback url at which the SAML/OIDC IdP sends back the authorization response.

A comma separated list of API keys that will be validated when serving the API requests for SSO connection (/api/v1/connections) and Directory Sync (/api/v1/directory-sync).  For example JACKSON_API_KEYS=key1,key2,key3

Set this to a comma separated string of the pattern email:password to enable login to the Admin Portal, for example NEXTAUTH_ADMIN_CREDENTIALS=deepak@boxyhq.com:Password123. If you don't specify any value access is denied to all.

Set this to a random string. You can use openssl rand -base64 32 to get one. This secret is used to encrypt JWT and hash the email verification token. 