{
  "manifest_version": "1.0.0",
  "template": {
    "id": "d30c67ae-70be-43dc-b3e5-ece2f366eec3",
    "slug": "cryptpad",
    "name": "CryptPad",
    "description": "Encrypted office suite for shared documents and spreadsheets",
    "url": "https://railway.com/deploy/cryptpad",
    "upstream": {
      "repo_url": "https://github.com/gridalpha/cryptpad-railway"
    }
  },
  "services": [
    {
      "name": "sandbox",
      "source": {
        "repo": "https://github.com/gridalpha/cryptpad-railway"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "cryptpad",
      "source": {
        "repo": "https://github.com/gridalpha/cryptpad-railway"
      },
      "needs_volume": true,
      "volume_mount_path": "/cryptpad/persistent",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "sandbox",
      "description": "HTTP port Railway probes and serves",
      "secret": false,
      "strategy": "default",
      "default": "3000"
    },
    {
      "key": "CPAD_UPSTREAM",
      "service": "sandbox",
      "description": "Private address of the application",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "PORT",
      "service": "cryptpad",
      "description": "HTTP port Railway probes and serves",
      "secret": false,
      "strategy": "default",
      "default": "3000"
    },
    {
      "key": "NODE_OPTIONS",
      "service": "cryptpad",
      "description": "Node heap ceiling per process",
      "secret": false,
      "strategy": "default",
      "default": "--max-old-space-size=1024"
    },
    {
      "key": "CPAD_DATA_DIR",
      "service": "cryptpad",
      "description": "Volume mount holding all encrypted data",
      "secret": false,
      "strategy": "default",
      "default": "/cryptpad/persistent"
    },
    {
      "key": "CPAD_LOGIN_SALT",
      "service": "cryptpad",
      "description": "Salt for password key derivation, fixed forever",
      "secret": false,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "CPAD_MAIN_DOMAIN",
      "service": "cryptpad",
      "description": "Public URL users visit",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "CPAD_MAX_WORKERS",
      "service": "cryptpad",
      "description": "HTTP and database workers per pool",
      "secret": false,
      "strategy": "default",
      "default": "2"
    },
    {
      "key": "CPAD_MAX_UPLOAD_MB",
      "service": "cryptpad",
      "description": "Largest single file upload",
      "secret": false,
      "strategy": "default",
      "default": "20"
    },
    {
      "key": "CPAD_SANDBOX_DOMAIN",
      "service": "cryptpad",
      "description": "Second origin for editor iframes",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "CPAD_DEFAULT_STORAGE_MB",
      "service": "cryptpad",
      "description": "Storage quota per registered account",
      "secret": false,
      "strategy": "default",
      "default": "50"
    },
    {
      "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS",
      "service": "cryptpad",
      "description": "Lets open websockets close on redeploy",
      "secret": false,
      "strategy": "default",
      "default": "30"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "cryptpad"
      }
    },
    "cli": "railway deploy --template cryptpad",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "d30c67ae-70be-43dc-b3e5-ece2f366eec3",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "3245b6d1-6619-4fab-8708-cc3c9e0c454c": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/caddy.svg",
                  "name": "sandbox",
                  "deploy": {
                    "startCommand": "",
                    "healthcheckPath": "/healthz",
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/gridalpha/cryptpad-railway",
                    "rootDirectory": "sandbox"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "HTTP port Railway probes and serves",
                      "defaultValue": "3000"
                    },
                    "CPAD_UPSTREAM": {
                      "isOptional": false,
                      "description": "Private address of the application",
                      "defaultValue": "${{cryptpad.RAILWAY_PRIVATE_DOMAIN}}:3000"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:3000": {
                        "port": 3000
                      }
                    }
                  }
                },
                "d08eba5c-bde2-4c56-9863-4225afd618c1": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/cryptpad.svg",
                  "name": "cryptpad",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/gridalpha/cryptpad-railway",
                    "rootDirectory": null
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "HTTP port Railway probes and serves",
                      "defaultValue": "3000"
                    },
                    "NODE_OPTIONS": {
                      "isOptional": false,
                      "description": "Node heap ceiling per process",
                      "defaultValue": "--max-old-space-size=1024"
                    },
                    "CPAD_DATA_DIR": {
                      "isOptional": false,
                      "description": "Volume mount holding all encrypted data",
                      "defaultValue": "/cryptpad/persistent"
                    },
                    "CPAD_LOGIN_SALT": {
                      "isOptional": false,
                      "description": "Salt for password key derivation, fixed forever",
                      "defaultValue": "{{CPAD_LOGIN_SALT}}"
                    },
                    "CPAD_MAIN_DOMAIN": {
                      "isOptional": false,
                      "description": "Public URL users visit",
                      "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "CPAD_MAX_WORKERS": {
                      "isOptional": false,
                      "description": "HTTP and database workers per pool",
                      "defaultValue": "2"
                    },
                    "CPAD_MAX_UPLOAD_MB": {
                      "isOptional": false,
                      "description": "Largest single file upload",
                      "defaultValue": "20"
                    },
                    "CPAD_SANDBOX_DOMAIN": {
                      "isOptional": false,
                      "description": "Second origin for editor iframes",
                      "defaultValue": "https://${{sandbox.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "CPAD_DEFAULT_STORAGE_MB": {
                      "isOptional": false,
                      "description": "Storage quota per registered account",
                      "defaultValue": "50"
                    },
                    "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": {
                      "isOptional": false,
                      "description": "Lets open websockets close on redeploy",
                      "defaultValue": "30"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:3000": {
                        "port": 3000
                      }
                    }
                  },
                  "volumeMounts": {
                    "d08eba5c-bde2-4c56-9863-4225afd618c1": {
                      "mountPath": "/cryptpad/persistent"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "sandbox",
      "method": "GET",
      "path": "/healthz",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 2,
    "needs_volume": true
  },
  "generated_at": "2026-09-20T16:14:49.616Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-09-19T13:19:06.590Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_3357e9748fe446309ea2",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "healthcheck",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 185,
    "typical_build_seconds": 91,
    "typical_start_seconds": 10,
    "slowest_service": "cryptpad"
  }
}
