{
  "manifest_version": "1.0.0",
  "template": {
    "id": "4e196b2d-4e4f-438d-96ea-9e971ab16893",
    "slug": "bonfire",
    "name": "Bonfire",
    "description": "Federated Social Networking Toolkit",
    "url": "https://railway.com/deploy/bonfire",
    "upstream": {
      "image": "bonfirenetworks/bonfire:1.0.5-social-amd64"
    }
  },
  "services": [
    {
      "name": "search",
      "source": {
        "image": "getmeili/meilisearch:v1.11"
      },
      "needs_volume": true,
      "volume_mount_path": "/meili_data",
      "http": false
    },
    {
      "name": "db",
      "source": {
        "image": "postgis/postgis:17-3.5-alpine"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/postgresql/data",
      "tcp_ports": [
        5432
      ],
      "http": false
    },
    {
      "name": "bonfire",
      "source": {
        "image": "bonfirenetworks/bonfire:1.0.5-social-amd64"
      },
      "needs_volume": true,
      "volume_mount_path": "/opt/app/data/uploads",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "MEILI_ENV",
      "service": "search",
      "description": "Runtime mode for Meilisearch; production disables the dev-only dashboard and enforces the master key",
      "secret": false,
      "strategy": "default",
      "default": "production"
    },
    {
      "key": "MEILI_MASTER_KEY",
      "service": "search",
      "description": "API key required to authenticate to this Meilisearch instance (reuses the \"db\" service's Postgres password)",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MEILI_NO_ANALYTICS",
      "service": "search",
      "description": "Disables sending anonymous usage analytics to Meilisearch's telemetry service",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "PGDATA",
      "service": "db",
      "description": "Filesystem path where Postgres stores its data files",
      "secret": false,
      "strategy": "default",
      "default": "/var/lib/postgresql/data/pgdata"
    },
    {
      "key": "PGHOST",
      "service": "db",
      "description": "Hostname Postgres/clients use to reach this database (this service's private domain)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "PGPORT",
      "service": "db",
      "description": "Port Postgres listens on",
      "secret": false,
      "strategy": "default",
      "default": "5432"
    },
    {
      "key": "PGUSER",
      "service": "db",
      "description": "Postgres username, mirrored from POSTGRES_USER",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGDATABASE",
      "service": "db",
      "description": "Default database name, mirrored from POSTGRES_DB",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGPASSWORD",
      "service": "db",
      "description": "Postgres password, mirrored from POSTGRES_PASSWORD",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "POSTGRES_DB",
      "service": "db",
      "description": "Name of the database created on first init",
      "secret": false,
      "strategy": "default",
      "default": "bonfire_db"
    },
    {
      "key": "DATABASE_URL",
      "service": "db",
      "description": "Full connection string for other services to reach this database over Railway's private network",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "POSTGRES_USER",
      "service": "db",
      "description": "Superuser account created on first init",
      "secret": false,
      "strategy": "default",
      "default": "postgres"
    },
    {
      "key": "SSL_CERT_DAYS",
      "service": "db",
      "description": "Validity period, in days, for the self-signed SSL certificate Postgres generates",
      "secret": false,
      "strategy": "default",
      "default": "820"
    },
    {
      "key": "POSTGRES_PASSWORD",
      "service": "db",
      "description": "Auto-generated password for the postgres superuser",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "DATABASE_PUBLIC_URL",
      "service": "db",
      "description": "Full connection string for reaching this database from outside Railway's private network (via TCP proxy)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "LANG",
      "service": "bonfire",
      "description": "System locale used by the app",
      "secret": false,
      "strategy": "default",
      "default": "en_US.UTF-8"
    },
    {
      "key": "PORT",
      "service": "bonfire",
      "description": "Port the app listens on inside the container",
      "secret": false,
      "strategy": "default",
      "default": "4000"
    },
    {
      "key": "APP_NAME",
      "service": "bonfire",
      "description": "Display name of the instance, shown in the UI",
      "secret": false,
      "strategy": "default",
      "default": "Bonfire"
    },
    {
      "key": "HOSTNAME",
      "service": "bonfire",
      "description": "Public hostname the app runs on (this service's Railway public domain)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "POSTGRES_DB",
      "service": "bonfire",
      "description": "Name of the Postgres database to use",
      "secret": false,
      "strategy": "default",
      "default": "bonfire_db"
    },
    {
      "key": "PUBLIC_PORT",
      "service": "bonfire",
      "description": "Public-facing port used when building external URLs (e.g. federation links)",
      "secret": false,
      "strategy": "default",
      "default": "80"
    },
    {
      "key": "SERVER_PORT",
      "service": "bonfire",
      "description": "Internal port the app server binds to",
      "secret": false,
      "strategy": "default",
      "default": "4000"
    },
    {
      "key": "MAIL_BACKEND",
      "service": "bonfire",
      "description": "Email delivery backend; \"none\" disables outgoing email",
      "secret": false,
      "strategy": "default",
      "default": "none"
    },
    {
      "key": "SIGNING_SALT",
      "service": "bonfire",
      "description": "Salt used to sign tokens/cookies (reuses the \"db\" service's Postgres password as a shared secret)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "UPLOAD_LIMIT",
      "service": "bonfire",
      "description": "Max upload size, in MB",
      "secret": false,
      "strategy": "default",
      "default": "20"
    },
    {
      "key": "POSTGRES_HOST",
      "service": "bonfire",
      "description": "Hostname of the Postgres database (private domain of the \"db\" service)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "POSTGRES_USER",
      "service": "bonfire",
      "description": "Postgres username",
      "secret": false,
      "strategy": "default",
      "default": "postgres"
    },
    {
      "key": "RELEASE_COOKIE",
      "service": "bonfire",
      "description": "Erlang distribution cookie used for clustering BEAM/Elixir nodes (reuses the Postgres password as a shared secret)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SEARCH_ADAPTER",
      "service": "bonfire",
      "description": "Selects Meilisearch as the search backend",
      "secret": false,
      "strategy": "default",
      "default": "meili"
    },
    {
      "key": "ENCRYPTION_SALT",
      "service": "bonfire",
      "description": "Salt used for encrypting sensitive data at rest (reuses the Postgres password as a shared secret)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SECRET_KEY_BASE",
      "service": "bonfire",
      "description": "Auto-generated base secret used for signing/encrypting sessions and cookies (Phoenix/Elixir apps)",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "MEILI_MASTER_KEY",
      "service": "bonfire",
      "description": "API key for authenticating to the Meilisearch instance (reuses the Postgres password as a shared secret)",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "POSTGRES_PASSWORD",
      "service": "bonfire",
      "description": "Password for the Postgres database (from the \"db\" service)",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SEARCH_MEILI_INSTANCE",
      "service": "bonfire",
      "description": "URL of the Meilisearch instance (private domain of the \"search\" service, port 7700)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "DB_MIGRATE_INDEXES_CONCURRENTLY",
      "service": "bonfire",
      "description": "Whether database index creation during migrations runs concurrently (non-blocking) or not",
      "secret": false,
      "strategy": "default",
      "default": "false"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "bonfire"
      }
    },
    "cli": "railway deploy --template bonfire",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "4e196b2d-4e4f-438d-96ea-9e971ab16893",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "6d2dbf4c-b04c-4ec6-8484-c110b6bf3c73": {
                  "icon": "https://dashboardicons.com/pb/api/files/community_gallery/wqhhtkb6qqq8cmw/bonfire_lpgp2bfg5s.svg",
                  "name": "search",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "getmeili/meilisearch:v1.11"
                  },
                  "variables": {
                    "MEILI_ENV": {
                      "isOptional": false,
                      "description": "Runtime mode for Meilisearch; production disables the dev-only dashboard and enforces the master key",
                      "defaultValue": "production"
                    },
                    "MEILI_MASTER_KEY": {
                      "isOptional": false,
                      "description": "API key required to authenticate to this Meilisearch instance (reuses the \"db\" service's Postgres password)",
                      "defaultValue": "${{db.POSTGRES_PASSWORD}}"
                    },
                    "MEILI_NO_ANALYTICS": {
                      "isOptional": false,
                      "description": "Disables sending anonymous usage analytics to Meilisearch's telemetry service",
                      "defaultValue": "true"
                    }
                  },
                  "volumeMounts": {
                    "6d2dbf4c-b04c-4ec6-8484-c110b6bf3c73": {
                      "mountPath": "/meili_data"
                    }
                  }
                },
                "6d8f72c0-3a45-49fc-b333-bcd69067d0c7": {
                  "icon": "https://devicons.railway.app/i/postgresql.svg",
                  "name": "db",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "postgis/postgis:17-3.5-alpine"
                  },
                  "variables": {
                    "PGDATA": {
                      "isOptional": false,
                      "description": "Filesystem path where Postgres stores its data files",
                      "defaultValue": "/var/lib/postgresql/data/pgdata"
                    },
                    "PGHOST": {
                      "isOptional": false,
                      "description": "Hostname Postgres/clients use to reach this database (this service's private domain)",
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "PGPORT": {
                      "isOptional": false,
                      "description": "Port Postgres listens on",
                      "defaultValue": "5432"
                    },
                    "PGUSER": {
                      "isOptional": false,
                      "description": "Postgres username, mirrored from POSTGRES_USER",
                      "defaultValue": "${{POSTGRES_USER}}"
                    },
                    "PGDATABASE": {
                      "isOptional": false,
                      "description": "Default database name, mirrored from POSTGRES_DB",
                      "defaultValue": "${{POSTGRES_DB}}"
                    },
                    "PGPASSWORD": {
                      "isOptional": false,
                      "description": "Postgres password, mirrored from POSTGRES_PASSWORD",
                      "defaultValue": "${{POSTGRES_PASSWORD}}"
                    },
                    "POSTGRES_DB": {
                      "isOptional": false,
                      "description": "Name of the database created on first init",
                      "defaultValue": "bonfire_db"
                    },
                    "DATABASE_URL": {
                      "isOptional": false,
                      "description": "Full connection string for other services to reach this database over Railway's private network",
                      "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{PGDATABASE}}"
                    },
                    "POSTGRES_USER": {
                      "isOptional": false,
                      "description": "Superuser account created on first init",
                      "defaultValue": "postgres"
                    },
                    "SSL_CERT_DAYS": {
                      "isOptional": false,
                      "description": "Validity period, in days, for the self-signed SSL certificate Postgres generates",
                      "defaultValue": "820"
                    },
                    "POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Auto-generated password for the postgres superuser",
                      "defaultValue": "{{POSTGRES_PASSWORD}}"
                    },
                    "DATABASE_PUBLIC_URL": {
                      "isOptional": false,
                      "description": "Full connection string for reaching this database from outside Railway's private network (via TCP proxy)",
                      "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_TCP_PROXY_DOMAIN}}:${{RAILWAY_TCP_PROXY_PORT}}/${{PGDATABASE}}"
                    }
                  },
                  "networking": {
                    "tcpProxies": {
                      "5432": {}
                    }
                  },
                  "volumeMounts": {
                    "6d8f72c0-3a45-49fc-b333-bcd69067d0c7": {
                      "mountPath": "/var/lib/postgresql/data"
                    }
                  }
                },
                "8c801883-e1d6-4d4b-abd6-7d4ce761e10f": {
                  "icon": "https://dashboardicons.com/pb/api/files/community_gallery/wqhhtkb6qqq8cmw/bonfire_lpgp2bfg5s.svg",
                  "name": "bonfire",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/",
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "bonfirenetworks/bonfire:1.0.5-social-amd64"
                  },
                  "variables": {
                    "LANG": {
                      "isOptional": false,
                      "description": "System locale used by the app",
                      "defaultValue": "en_US.UTF-8"
                    },
                    "PORT": {
                      "isOptional": false,
                      "description": "Port the app listens on inside the container",
                      "defaultValue": "4000"
                    },
                    "APP_NAME": {
                      "isOptional": false,
                      "description": "Display name of the instance, shown in the UI",
                      "defaultValue": "Bonfire"
                    },
                    "HOSTNAME": {
                      "isOptional": false,
                      "description": "Public hostname the app runs on (this service's Railway public domain)",
                      "defaultValue": "${{RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "POSTGRES_DB": {
                      "isOptional": false,
                      "description": "Name of the Postgres database to use",
                      "defaultValue": "bonfire_db"
                    },
                    "PUBLIC_PORT": {
                      "isOptional": false,
                      "description": "Public-facing port used when building external URLs (e.g. federation links)",
                      "defaultValue": "80"
                    },
                    "SERVER_PORT": {
                      "isOptional": false,
                      "description": "Internal port the app server binds to",
                      "defaultValue": "4000"
                    },
                    "MAIL_BACKEND": {
                      "isOptional": false,
                      "description": "Email delivery backend; \"none\" disables outgoing email",
                      "defaultValue": "none"
                    },
                    "SIGNING_SALT": {
                      "isOptional": false,
                      "description": "Salt used to sign tokens/cookies (reuses the \"db\" service's Postgres password as a shared secret)",
                      "defaultValue": "${{db.POSTGRES_PASSWORD}}"
                    },
                    "UPLOAD_LIMIT": {
                      "isOptional": false,
                      "description": "Max upload size, in MB",
                      "defaultValue": "20"
                    },
                    "POSTGRES_HOST": {
                      "isOptional": false,
                      "description": "Hostname of the Postgres database (private domain of the \"db\" service)",
                      "defaultValue": "${{db.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "POSTGRES_USER": {
                      "isOptional": false,
                      "description": "Postgres username",
                      "defaultValue": "postgres"
                    },
                    "RELEASE_COOKIE": {
                      "isOptional": false,
                      "description": "Erlang distribution cookie used for clustering BEAM/Elixir nodes (reuses the Postgres password as a shared secret)",
                      "defaultValue": "${{db.POSTGRES_PASSWORD}}"
                    },
                    "SEARCH_ADAPTER": {
                      "isOptional": false,
                      "description": "Selects Meilisearch as the search backend",
                      "defaultValue": "meili"
                    },
                    "ENCRYPTION_SALT": {
                      "isOptional": false,
                      "description": "Salt used for encrypting sensitive data at rest (reuses the Postgres password as a shared secret)",
                      "defaultValue": "${{db.POSTGRES_PASSWORD}}"
                    },
                    "SECRET_KEY_BASE": {
                      "isOptional": false,
                      "description": "Auto-generated base secret used for signing/encrypting sessions and cookies (Phoenix/Elixir apps)",
                      "defaultValue": "{{SECRET_KEY_BASE}}"
                    },
                    "MEILI_MASTER_KEY": {
                      "isOptional": false,
                      "description": "API key for authenticating to the Meilisearch instance (reuses the Postgres password as a shared secret)",
                      "defaultValue": "${{db.POSTGRES_PASSWORD}}"
                    },
                    "POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Password for the Postgres database (from the \"db\" service)",
                      "defaultValue": "${{db.POSTGRES_PASSWORD}}"
                    },
                    "SEARCH_MEILI_INSTANCE": {
                      "isOptional": false,
                      "description": "URL of the Meilisearch instance (private domain of the \"search\" service, port 7700)",
                      "defaultValue": "https://${{search.RAILWAY_PRIVATE_DOMAIN}}:7700"
                    },
                    "DB_MIGRATE_INDEXES_CONCURRENTLY": {
                      "isOptional": false,
                      "description": "Whether database index creation during migrations runs concurrently (non-blocking) or not",
                      "defaultValue": "false"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  },
                  "volumeMounts": {
                    "8c801883-e1d6-4d4b-abd6-7d4ce761e10f": {
                      "mountPath": "/opt/app/data/uploads"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "bonfire",
      "method": "GET",
      "path": "/",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 3,
    "needs_volume": true
  },
  "generated_at": "2026-09-27T04:14:50.332Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-09-27T01:27:27.012Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_2e311a1d1948453cbd94",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "healthcheck",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 67,
    "typical_build_seconds": 0,
    "typical_start_seconds": 30,
    "slowest_service": "bonfire"
  }
}