{
  "manifest_version": "1.0.0",
  "template": {
    "id": "07d5579b-84ce-4106-a08c-e8922c904556",
    "slug": "cockroachdb-or-just-updated-distributed-",
    "name": "CockroachDB | (Just Updated) Distributed SQL Database, Secure From Boot, Data Survives Redeploys",
    "description": "Secure single-node CockroachDB SQL database with persistent volume",
    "url": "https://railway.com/deploy/cockroachdb-or-just-updated-distributed-",
    "upstream": {
      "image": "cockroachdb/cockroach:v26.3.2@sha256:bc15746ef2c2493b2cfd46a76898a745587d068b1a259fff3c4447c3f3b36ea2"
    }
  },
  "services": [
    {
      "name": "cockroachdb",
      "source": {
        "image": "cockroachdb/cockroach:v26.3.2@sha256:bc15746ef2c2493b2cfd46a76898a745587d068b1a259fff3c4447c3f3b36ea2"
      },
      "needs_volume": true,
      "volume_mount_path": "/cockroach/cockroach-data",
      "tcp_ports": [
        26257
      ],
      "http": false
    }
  ],
  "required_inputs": [
    {
      "key": "CRDB_DSN",
      "service": "cockroachdb",
      "description": "Provide a value for CRDB_DSN.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "CRDB_PASSWORD",
      "service": "cockroachdb",
      "description": "Provide a value for CRDB_PASSWORD.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "CRDB_PRIVATE_DSN",
      "service": "cockroachdb",
      "description": "Provide a value for CRDB_PRIVATE_DSN.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "cockroachdb-or-just-updated-distributed-"
      }
    },
    "cli": "railway deploy --template cockroachdb-or-just-updated-distributed-",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "07d5579b-84ce-4106-a08c-e8922c904556",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "8ba966ae-bcba-444a-b59a-fad33a4a4cc9": {
                  "icon": null,
                  "name": "cockroachdb",
                  "deploy": {
                    "startCommand": "/bin/sh -c 'CRDB_USER=app; CRDB_DATABASE=app; D=/cockroach/cockroach-data; C=$D/certs; CR=/cockroach/cockroach; Q=$(printf \"\\047\"); echo \"cockroach uid=$(id -u) mount_owner=$(stat -c %u:%g $D)\"; mkdir -p $C; if [ ! -f $C/node.crt ]; then $CR cert create-ca --certs-dir=$C --ca-key=$C/ca.key && $CR cert create-node localhost 127.0.0.1 $(hostname) $RAILWAY_PRIVATE_DOMAIN $RAILWAY_TCP_PROXY_DOMAIN $RAILWAY_PUBLIC_DOMAIN --certs-dir=$C --ca-key=$C/ca.key && $CR cert create-client root --certs-dir=$C --ca-key=$C/ca.key || exit 1; fi; ( until $CR sql --certs-dir=$C --host=127.0.0.1 -e \"select 1\" >/dev/null 2>&1; do sleep 1; done; $CR sql --certs-dir=$C --host=127.0.0.1 -e \"CREATE USER IF NOT EXISTS \\\"$CRDB_USER\\\"; ALTER USER \\\"$CRDB_USER\\\" WITH PASSWORD ${Q}${CRDB_PASSWORD}${Q}; GRANT admin TO \\\"$CRDB_USER\\\"; CREATE DATABASE IF NOT EXISTS \\\"$CRDB_DATABASE\\\";\" && echo \"cockroach user $CRDB_USER ready\" ) & exec $CR start-single-node --certs-dir=$C --store=$D/data --listen-addr=0.0.0.0:26257 --http-addr=0.0.0.0:8080 --advertise-addr=$RAILWAY_PRIVATE_DOMAIN --cache=.25 --max-sql-memory=.25'",
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "cockroachdb/cockroach:v26.3.2@sha256:bc15746ef2c2493b2cfd46a76898a745587d068b1a259fff3c4447c3f3b36ea2"
                  },
                  "variables": {
                    "CRDB_DSN": {
                      "isOptional": false,
                      "defaultValue": "postgresql://app:${{CRDB_PASSWORD}}@${{RAILWAY_TCP_PROXY_DOMAIN}}:${{RAILWAY_TCP_PROXY_PORT}}/app?sslmode=require"
                    },
                    "CRDB_PASSWORD": {
                      "isOptional": false,
                      "defaultValue": "{{CRDB_PASSWORD}}"
                    },
                    "CRDB_PRIVATE_DSN": {
                      "isOptional": false,
                      "defaultValue": "postgresql://app:${{CRDB_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:26257/app?sslmode=require"
                    }
                  },
                  "networking": {
                    "tcpProxies": {
                      "26257": {}
                    }
                  },
                  "volumeMounts": {
                    "8ba966ae-bcba-444a-b59a-fad33a4a4cc9": {
                      "mountPath": "/cockroach/cockroach-data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-10-14T22:14:45.225Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-10-14T20:20:31.386Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_96ed950183c342a0b79b",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 17,
    "typical_build_seconds": 0,
    "typical_start_seconds": 0,
    "slowest_service": "cockroachdb"
  }
}
