{ "manifest_version": "1.0.0", "template": { "id": "8a15f506-ecbe-4fc3-b37c-e76aca0d564c", "slug": "authorizer-or-self-hosted-auth-with-post", "name": "Authorizer | Self-Hosted Auth with Postgres, Zero Setup Questions", "description": "Self-host Authorizer on Railway: keys generated, nothing to fill in first", "url": "https://railway.com/deploy/authorizer-or-self-hosted-auth-with-post", "upstream": { "image": "lakhansamani/authorizer:2.2.1" } }, "status": "unvalidated", "validated_at": null, "success_rate_30d": null, "services": [ { "name": "Authorizer", "source": { "image": "lakhansamani/authorizer:2.2.1" }, "needs_volume": false, "http": true }, { "name": "Postgres", "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:17" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false } ], "required_inputs": [ { "key": "ENV", "service": "Authorizer", "description": "Provide a value for ENV.", "secret": false, "strategy": "default", "default": "production" }, { "key": "PORT", "service": "Authorizer", "description": "Provide a value for PORT.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "JWT_TYPE", "service": "Authorizer", "description": "Provide a value for JWT_TYPE.", "secret": false, "strategy": "default", "default": "HS256" }, { "key": "CLIENT_ID", "service": "Authorizer", "description": "Provide a value for CLIENT_ID.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "JWT_SECRET", "service": "Authorizer", "description": "Provide a value for JWT_SECRET.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "ADMIN_SECRET", "service": "Authorizer", "description": "Provide a value for ADMIN_SECRET.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "DATABASE_URL", "service": "Authorizer", "description": "Provide a value for DATABASE_URL.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CLIENT_SECRET", "service": "Authorizer", "description": "Provide a value for CLIENT_SECRET.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "DATABASE_TYPE", "service": "Authorizer", "description": "Provide a value for DATABASE_TYPE.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "AUTHORIZER_URL", "service": "Authorizer", "description": "Provide a value for AUTHORIZER_URL.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "DISABLE_PLAYGROUND", "service": "Authorizer", "description": "Provide a value for DISABLE_PLAYGROUND.", "secret": false, "strategy": "default", "default": "true" }, { "key": "PGDATA", "service": "Postgres", "description": "Provide a value for PGDATA.", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "PGHOST", "service": "Postgres", "description": "Provide a value for PGHOST.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGPORT", "service": "Postgres", "description": "Provide a value for PGPORT.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "PGUSER", "service": "Postgres", "description": "Provide a value for PGUSER.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGDATABASE", "service": "Postgres", "description": "Provide a value for PGDATABASE.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGPASSWORD", "service": "Postgres", "description": "Provide a value for PGPASSWORD.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_DB", "service": "Postgres", "description": "Provide a value for POSTGRES_DB.", "secret": false, "strategy": "default", "default": "authorizer" }, { "key": "DATABASE_URL", "service": "Postgres", "description": "Provide a value for DATABASE_URL.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_USER", "service": "Postgres", "description": "Provide a value for POSTGRES_USER.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "POSTGRES_PASSWORD", "service": "Postgres", "description": "Provide a value for POSTGRES_PASSWORD.", "secret": true, "strategy": "generate", "generate": "strong_password" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "authorizer-or-self-hosted-auth-with-post" } }, "cli": "railway deploy --template authorizer-or-self-hosted-auth-with-post", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "8a15f506-ecbe-4fc3-b37c-e76aca0d564c", "serializedConfig": { "buckets": {}, "services": { "f068f2d4-d926-4418-8a31-16e5047f64c3": { "icon": null, "name": "Authorizer", "deploy": { "startCommand": "/bin/sh -c \"exec ./authorizer --admin-secret \\\"$ADMIN_SECRET\\\" --database-type postgres --database-url \\\"$DATABASE_URL\\\" --env production --jwt-type HS256 --jwt-secret \\\"$JWT_SECRET\\\" --client-id \\\"$CLIENT_ID\\\" --client-secret \\\"$CLIENT_SECRET\\\" --allowed-origins \\\"$AUTHORIZER_URL\\\"\"", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "lakhansamani/authorizer:2.2.1" }, "variables": { "ENV": { "isOptional": false, "defaultValue": "production" }, "PORT": { "isOptional": false, "defaultValue": "8080" }, "JWT_TYPE": { "isOptional": false, "defaultValue": "HS256" }, "CLIENT_ID": { "isOptional": false, "defaultValue": "{{CLIENT_ID}}" }, "JWT_SECRET": { "isOptional": false, "defaultValue": "{{JWT_SECRET}}" }, "ADMIN_SECRET": { "isOptional": false, "defaultValue": "{{ADMIN_SECRET}}" }, "DATABASE_URL": { "isOptional": false, "defaultValue": "${{Postgres.DATABASE_URL}}" }, "CLIENT_SECRET": { "isOptional": false, "defaultValue": "{{CLIENT_SECRET}}" }, "DATABASE_TYPE": { "isOptional": false, "defaultValue": "postgres" }, "AUTHORIZER_URL": { "isOptional": false, "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}" }, "DISABLE_PLAYGROUND": { "isOptional": false, "defaultValue": "true" } }, "networking": { "serviceDomains": { "": {} } } }, "fc255f21-7dfe-46d6-baaf-db0628760cba": { "icon": null, "name": "Postgres", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:17" }, "variables": { "PGDATA": { "isOptional": false, "defaultValue": "/var/lib/postgresql/data/pgdata" }, "PGHOST": { "isOptional": false, "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "PGPORT": { "isOptional": false, "defaultValue": "5432" }, "PGUSER": { "isOptional": false, "defaultValue": "${{POSTGRES_USER}}" }, "PGDATABASE": { "isOptional": false, "defaultValue": "${{POSTGRES_DB}}" }, "PGPASSWORD": { "isOptional": false, "defaultValue": "${{POSTGRES_PASSWORD}}" }, "POSTGRES_DB": { "isOptional": false, "defaultValue": "authorizer" }, "DATABASE_URL": { "isOptional": false, "defaultValue": "postgresql://${{POSTGRES_USER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{POSTGRES_DB}}" }, "POSTGRES_USER": { "isOptional": false, "defaultValue": "postgres" }, "POSTGRES_PASSWORD": { "isOptional": false, "defaultValue": "{{POSTGRES_PASSWORD}}" } }, "volumeMounts": { "fc255f21-7dfe-46d6-baaf-db0628760cba": { "mountPath": "/var/lib/postgresql/data" } }, "haTemplateCode": "postgres-ha", "haConversionConfig": { "edge": { "label": "Reverse Proxy", "options": [ 2, 3, 4, 5 ], "nodeLabel": "HAProxy", "description": "Routes traffic to the primary", "defaultValue": 3 }, "replica": { "label": "Replicas", "options": [ 2, 3, 4, 5, 6, 7 ], "nodeLabel": "Postgres", "description": "Streaming replicas for automatic failover", "defaultValue": 2 }, "internal": { "label": "Coordinator Nodes", "options": [ 3, 5, 7, 9 ], "nodeLabel": "etcd", "defaultValue": 3 }, "description": "This will convert your Postgres database to an HA cluster with Patroni failover and etcd consensus." } } } } } } } } }, "post_deploy": {}, "resources": { "expected_services": 2, "needs_volume": true }, "generated_at": "2026-09-04T17:54:19.363Z", "generator_version": "0.1.0" }