← Templates · Identity & Access
OP
OpenFGA
CommunityOpen-source, high-performance authorization engine implementing Google's Zanzibar paper — relationship-based fine-grained permissions.
| Runs | openfga/openfga:v1.22.0 |
|---|---|
| Stack | go |
| Provisioned for it | postgres |
| Verified | Not yet |
Why deploy on Railyard
Railyard provisions postgres alongside it automatically — zero-downtime deploys, automatic backups and scaling come from the same platform, on a server you already pay for.
Deploying OpenFGA is one piece of a bigger stack you can keep building — add a database, a worker, a cache, or another app, all on the same servers you already pay for.
Good for
- Fine-grained, relationship-based authorization (ReBAC) for a multi-tenant app
- Replacing hand-rolled RBAC checks scattered across a codebase
- Centralized permission checks shared across multiple services
Good to know
- Postgres is wired up automatically; the release phase runs the schema migration before boot
- The gRPC port (8081) and Playground (3000) aren't exposed by this template — add them if you need direct gRPC or the built-in playground UI