icubaby / SideRail

**A bold, neobrutalist control panel — shipped to   in one click.**
*Clean dashboards. Live stats. Gorgeous pages. No config, no fuss.*
**One job, done right**
No feature bloat. SideRail masters **HTTP-based transports behind a TLS edge** — every connection is clean, standard, and always `security=tls` on port `443`.
**Impossible to ignore**
A loud **neobrutalist** UI — thick borders, hard shadows, animated icons — that looks razor-sharp on phone and desktop alike.
**Deploy and forget**
The core engine pulls itself on first boot, the session secret is generated for you, and the DB just works. **Zero environment variables required.**
**Team-friendly**
The Owner adds Admins with scoped page access and personal data quotas — and every Admin only ever sees the users they created.
 Dashboard 
 Live CPU, RAM, Swap and Storage metrics, plus one-click Backup & Restore of users, inbounds, admins and settings. 
 Users 
 Rich create form, summary cards, a fully responsive table, live Connected IPs , and per-user actions. 
 Inbounds 
 Five HTTP inbounds auto-seeded on first boot. Enable or disable only, each with a unique port and a random /api/... path. 
 Activity Log 
 A live timeline of every administrative event. 
 Settings & Admins 
 Owner and Admin roles, scoped permissions, and per-admin data quotas. 
 Subscription 
 A gorgeous per-user page with a live usage chart, QR codes and a base64 export for clients. 
 Security 
 JWT sessions, built-in rate limiting, and sniffing fully disabled for stability. 
**No code required. Just follow these steps:**
**1. Fork this repository** — click **Fork** at the top-right to copy it to your GitHub account.
**2. Create a Railway project** — head to  , then **New Project → Deploy from GitHub repo**, and pick your fork.
**3. Deploy** — Railway reads the `Dockerfile` and `railway.json` and builds automatically.
**4. Expose port `8080`** — open **Settings → Networking → Generate Domain**, and set the port to **`8080`**.
> [!IMPORTANT]
> SideRail listens on port **`8080`** — this is the **only** port you expose. The ports `10085` and `20000–20004` are the core engine's internal ports bound to `127.0.0.1`; they are private and must **not** be exposed.
**5. Add a volume (optional)** — attach a **Volume** at **`/data`** so users, admins and settings survive redeploys.
**6. Open your panel** — visit the generated `*.up.railway.app` domain, land on the **Setup** page, and create your **Owner** account.
**All optional.**
| Variable | Default | Description |
|:--|:--|:--|
| `PORT` | `8080` | HTTP port. **Expose this one on Railway.** |
| `JWT_SECRET` | *auto* | Signs admin session cookies. Auto-generated and persisted if unset. |
| `CORE_VERSION` | `v26.9.9` | Core engine release fetched on first boot. |
| `SIDERAIL_DATA_DIR` | `/data` | Persistent data directory (mount a volume here). |
| `PUBLIC_DOMAIN` | *auto* | Override for a custom domain. Falls back to `RAILWAY_PUBLIC_DOMAIN`. |
| `CORE_API_PORT` | `10085` | Internal core