Variables

The deploy form is on the Paperclip service. CloudCLI takes its values from Paperclip by reference, so you change them in one place.

On the deploy form

Variable	Required	Default	What it is
ADMIN_EMAIL	Yes		Your email. With the password, your login for both Paperclip and CloudCLI.
ADMIN_PASSWORD	Yes		Your password for both apps, 8 to 128 characters. To change it, see Change your password.
TZ	No	UTC	Advanced; leave as is. Both apps’ clocks, and the default zone of new jobs until you choose one on the setup page. An IANA name, such as America/Toronto.

Optional, instead of the setup page

Not on the form. Set them on both Paperclip and CloudCLI, then redeploy. See Set up without the setup page.

Variable	What it is
CLAUDE_CODE_OAUTH_TOKEN	A Claude token from claude setup-token. Also turns off the redirect to /setup.
GH_TOKEN	A GitHub token for git and gh in both apps. Stored in Paperclip as the secret GITHUB_TOKEN.
REPO_URL	An https:// repo address, cloned into both apps at start.

Paperclip, generated

Set by the template; leave them as they are.

Variable	Default	What it is
DATABASE_URL	${{Postgres.DATABASE_URL}}	The private Postgres database.
PAPERCLIP_PUBLIC_URL	https://${{RAILWAY_PUBLIC_DOMAIN}}	Paperclip’s public address, for sign-in cookies and links.
PAPERCLIP_DEPLOYMENT_MODE	authenticated	Everyone signs in.
PAPERCLIP_DEPLOYMENT_EXPOSURE	private	Paperclip’s mode for one owner or team. The first-admin setup and Paperclip’s own Claude and Codex sign-in need it.
PAPERCLIP_AUTH_DISABLE_SIGN_UP	true	Nobody can create an account from the sign-in page. Set false only while someone you trust signs up.
PAPERCLIP_AUTH_RATE_LIMIT_ENABLED	true	Limits repeated sign-in attempts.
PAPERCLIP_ALLOWED_HOSTNAMES	healthcheck.railway.app,${{RAILWAY_PRIVATE_DOMAIN}}	Hostnames Paperclip answers besides its public address: Railway’s health check, and its private address, which the jobs skill uses.
PAPERCLIP_MIGRATION_AUTO_APPLY	true	Updates the database schema at start, including after an update.
BETTER_AUTH_SECRET	generated	Signs sign-in sessions.
PAPERCLIP_AGENT_JWT_SECRET	generated	Signs the short-lived keys agents use to call Paperclip.
PAPERCLIP_TOOL_ACTION_SIGNING_SECRET	generated	Signs approvals of agent tool actions.
PAPERCLIP_SECRETS_MASTER_KEY	generated	Encrypts the secrets you store in Paperclip. Keep it: without it they can’t be read.
PORT	3100	Paperclip’s port, used by Railway’s health check.
PAPERCLIP_DB_BACKUP_ENABLED	true	Paperclip’s own database dumps on its volume.
PAPERCLIP_DB_BACKUP_INTERVAL_MINUTES	60	Minutes between dumps.
PAPERCLIP_DB_BACKUP_RETENTION_DAYS	7	Shown at start. How long dumps are kept is set in Paperclip’s instance settings.
PAPERCLIP_DB_BACKUP_DIR	/paperclip/instances/default/data/backups	The dumps’ folder, on Paperclip’s volume.

CloudCLI

All by reference to Paperclip; change them there.

Variable	Value	What it is
CLOUDCLI_USERNAME	${{Paperclip.ADMIN_EMAIL}}	CloudCLI’s sign-in name.
CLOUDCLI_PASSWORD	${{Paperclip.ADMIN_PASSWORD}}	CloudCLI’s password.
TZ	${{Paperclip.TZ}}	The clock of CloudCLI, its logs and new jobs.
PAPERCLIP_URL	http://${{Paperclip.RAILWAY_PRIVATE_DOMAIN}}:${{Paperclip.PORT}}	Paperclip’s private address, for the jobs skill.
PAPERCLIP_PUBLIC_URL	${{Paperclip.PAPERCLIP_PUBLIC_URL}}	Paperclip’s public address, for the links Claude gives you.
PORT	3001	CloudCLI’s web port.

Services

Service	Built from	Port	Public	Volume
Paperclip	paperclip/ in the template’s repo: Paperclip’s official image, pinned, plus the template’s start scripts	3100	Yes	/paperclip
CloudCLI	cloudcli/: Node’s official image plus the template’s start scripts. CloudCLI, Claude Code, Codex and the GitHub CLI are installed at the first start.	3001	Yes	/home/node
Postgres	Railway’s Postgres image	5432	No	/var/lib/postgresql/data