← Templates · Identity & Access
PO
Pomerium
CommunityOpen-source, identity-aware access proxy — zero-trust access to internal apps without a VPN.
| Runs | pomerium/pomerium:v0.33.4 |
|---|---|
| Stack | go |
| Provisioned for it | Nothing, it's self-contained |
| Verified | Not yet |
Why deploy on Railyard
Railyard runs it standalone on a server you already pay for — no addons to provision, with zero-downtime deploys and scaling still included.
Deploying Pomerium is one piece of a bigger stack you can keep building — add a database, a worker, a cache, or another app, all on the same servers you already pay for.
Good for
- Zero-trust access to internal admin tools without a VPN
- A single sign-on gateway in front of several internal apps at once
- Per-request policy enforcement (identity, device, context) for sensitive services
Good to know
- Ships with no identity provider or routes configured — mount your own config.yaml with idp_* settings and route policies onto the config volume
- Needs a real TLS certificate or its own autocert setup; adjust the listen config if it sits behind another TLS-terminating proxy