{
  "manifest_version": "1.0.0",
  "template": {
    "id": "85965d8e-2d45-4d9a-843d-1aa779c79826",
    "slug": "d8a",
    "name": "d8a | Warehouse-Native GA4 Analytics on ClickHouse",
    "description": "d8a: GA4-compatible analytics into ClickHouse, with Blazer dashboards",
    "url": "https://railway.com/deploy/d8a",
    "upstream": {
      "repo_url": "https://github.com/two-workspaces/blazer"
    }
  },
  "status": "unvalidated",
  "validated_at": null,
  "success_rate_30d": null,
  "services": [
    {
      "name": "Postgres",
      "source": {
        "image": "ghcr.io/railwayapp-templates/postgres-ssl:17"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/postgresql/data",
      "http": false
    },
    {
      "name": "ClickHouse",
      "source": {
        "repo": "https://github.com/two-workspaces/d8a"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/clickhouse",
      "http": false
    },
    {
      "name": "Blazer",
      "source": {
        "repo": "https://github.com/two-workspaces/blazer"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "d8a",
      "source": {
        "image": "ghcr.io/d8a-tech/d8a:1.5.1"
      },
      "needs_volume": true,
      "volume_mount_path": "/storage",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "PGDATA",
      "service": "Postgres",
      "description": "Location where the database will be initialized",
      "secret": false,
      "strategy": "default",
      "default": "/var/lib/postgresql/data/pgdata"
    },
    {
      "key": "PGHOST",
      "service": "Postgres",
      "description": "Railway Private Domain Name.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "PGPORT",
      "service": "Postgres",
      "description": "Port to connect to Postgres.",
      "secret": false,
      "strategy": "default",
      "default": "5432"
    },
    {
      "key": "PGUSER",
      "service": "Postgres",
      "description": "Required variable for Data panel",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGDATABASE",
      "service": "Postgres",
      "description": "Required variable for the data panel.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGPASSWORD",
      "service": "Postgres",
      "description": "Required variable for Data panel",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "POSTGRES_DB",
      "service": "Postgres",
      "description": "Default database created when image is started.",
      "secret": false,
      "strategy": "default",
      "default": "blazer"
    },
    {
      "key": "DATABASE_URL",
      "service": "Postgres",
      "description": "URL to connect to Postgres database.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "POSTGRES_USER",
      "service": "Postgres",
      "description": "User to connect to Postgres DB",
      "secret": false,
      "strategy": "default",
      "default": "postgres"
    },
    {
      "key": "SSL_CERT_DAYS",
      "service": "Postgres",
      "description": "SSL certificate expiry in days.",
      "secret": false,
      "strategy": "default",
      "default": "820"
    },
    {
      "key": "POSTGRES_PASSWORD",
      "service": "Postgres",
      "description": "Password to connect to DB",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS",
      "service": "Postgres",
      "description": "Allow Postgres to cleanly shut down",
      "secret": false,
      "strategy": "default",
      "default": "60"
    },
    {
      "key": "CLICKHOUSE_DB",
      "service": "ClickHouse",
      "description": "Database for the events",
      "secret": false,
      "strategy": "default",
      "default": "d8a"
    },
    {
      "key": "CLICKHOUSE_USER",
      "service": "ClickHouse",
      "description": "ClickHouse admin user (d8a writes as it)",
      "secret": false,
      "strategy": "default",
      "default": "default"
    },
    {
      "key": "CLICKHOUSE_PASSWORD",
      "service": "ClickHouse",
      "description": "Auto-generated admin password",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "CLICKHOUSE_BLAZER_PASSWORD",
      "service": "ClickHouse",
      "description": "Auto-generated password of the read-only 'blazer' user",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS",
      "service": "ClickHouse",
      "description": "Time for ClickHouse to shut down cleanly",
      "secret": false,
      "strategy": "default",
      "default": "30"
    },
    {
      "key": "CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT",
      "service": "ClickHouse",
      "description": "Lets the admin user manage users and grants",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "PORT",
      "service": "Blazer",
      "description": "Port Blazer listens on - leave as is",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "BLAZER_SEED",
      "service": "Blazer",
      "description": "Adds the Website analytics dashboard on first boot",
      "secret": false,
      "strategy": "default",
      "default": "d8a"
    },
    {
      "key": "DATABASE_URL",
      "service": "Blazer",
      "description": "Blazer's own database (queries, dashboards, checks) - leave as is",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "BLAZER_TIMEOUT",
      "service": "Blazer",
      "description": "Query time limit in seconds",
      "secret": false,
      "strategy": "default",
      "default": "60"
    },
    {
      "key": "BLAZER_PASSWORD",
      "service": "Blazer",
      "description": "Sign-in password (HTTP basic auth)",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "BLAZER_USERNAME",
      "service": "Blazer",
      "description": "Sign-in name (HTTP basic auth)",
      "secret": false,
      "strategy": "default",
      "default": "admin"
    },
    {
      "key": "SECRET_KEY_BASE",
      "service": "Blazer",
      "description": "Rails secret - leave as is",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "BLAZER_TIME_ZONE",
      "service": "Blazer",
      "description": "Time zone for dates in results, e.g. Europe/Berlin",
      "secret": false,
      "strategy": "default",
      "default": "Etc/UTC"
    },
    {
      "key": "BLAZER_DATABASE_URL_D8A",
      "service": "Blazer",
      "description": "d8a's events in ClickHouse, read-only - leave as is",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "PORT",
      "service": "d8a",
      "description": "Port Railway routes to - leave as is",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "PROTOCOL",
      "service": "d8a",
      "description": "Tracking protocol: ga4 (gtag.js / GTM hits to /g/collect), d8a (d8a web tracker) or matomo",
      "secret": false,
      "strategy": "default",
      "default": "ga4"
    },
    {
      "key": "SERVER_PORT",
      "service": "d8a",
      "description": "Port d8a listens on - leave as is",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "DBIP_ENABLED",
      "service": "d8a",
      "description": "Visitor country/city from the DB-IP Lite dataset (downloaded by d8a)",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "RAILWAY_RUN_UID",
      "service": "d8a",
      "description": "Runs as root so d8a can write to the Railway volume",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "SESSIONS_TIMEOUT",
      "service": "d8a",
      "description": "Inactivity after which a session closes and is written",
      "secret": false,
      "strategy": "default",
      "default": "30m"
    },
    {
      "key": "WAREHOUSE_DRIVER",
      "service": "d8a",
      "description": "Where sessions are written - leave as is",
      "secret": false,
      "strategy": "default",
      "default": "clickhouse"
    },
    {
      "key": "STORAGE_SPOOL_ENABLED",
      "service": "d8a",
      "description": "Buffer closed sessions on the volume before writing them",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SERVER_TRUSTED_PROXIES",
      "service": "d8a",
      "description": "Railway's proxy network: visitor IPs come from its X-Real-IP header",
      "secret": false,
      "strategy": "default",
      "default": "100.64.0.0/10"
    },
    {
      "key": "WAREHOUSE_CLICKHOUSE_DB",
      "service": "d8a",
      "description": "ClickHouse database",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "WAREHOUSE_CLICKHOUSE_HOST",
      "service": "d8a",
      "description": "ClickHouse host - private network only",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "WAREHOUSE_CLICKHOUSE_PORT",
      "service": "d8a",
      "description": "ClickHouse native port",
      "secret": false,
      "strategy": "default",
      "default": "9000"
    },
    {
      "key": "WAREHOUSE_CLICKHOUSE_USER",
      "service": "d8a",
      "description": "ClickHouse user",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "WAREHOUSE_CLICKHOUSE_PASSWORD",
      "service": "d8a",
      "description": "ClickHouse password",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PROPERTY_SETTINGS_IP_MASKING_LEVEL",
      "service": "d8a",
      "description": "Stored IP addresses: 0 full, 1 IPv4 /24 IPv6 /48, 2 /16 /32, 3 drop",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS",
      "service": "d8a",
      "description": "Time to flush buffered hits on redeploy",
      "secret": false,
      "strategy": "default",
      "default": "30"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "d8a"
      }
    },
    "cli": "railway deploy --template d8a",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "85965d8e-2d45-4d9a-843d-1aa779c79826",
            "serializedConfig": {
              "services": {
                "055e2128-6912-4407-916a-e90e9e7c9d46": {
                  "icon": "https://devicons.railway.com/i/postgresql.svg",
                  "name": "Postgres",
                  "build": {},
                  "deploy": {
                    "requiredMountPath": "/var/lib/postgresql/data"
                  },
                  "source": {
                    "image": "ghcr.io/railwayapp-templates/postgres-ssl:17"
                  },
                  "variables": {
                    "PGDATA": {
                      "isOptional": false,
                      "description": "Location where the database will be initialized",
                      "defaultValue": "/var/lib/postgresql/data/pgdata"
                    },
                    "PGHOST": {
                      "isOptional": false,
                      "description": "Railway Private Domain Name.",
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "PGPORT": {
                      "isOptional": false,
                      "description": "Port to connect to Postgres.",
                      "defaultValue": "5432"
                    },
                    "PGUSER": {
                      "isOptional": false,
                      "description": "Required variable for Data panel",
                      "defaultValue": "${{ POSTGRES_USER }}"
                    },
                    "PGDATABASE": {
                      "isOptional": false,
                      "description": "Required variable for the data panel.",
                      "defaultValue": "${{POSTGRES_DB}}"
                    },
                    "PGPASSWORD": {
                      "isOptional": false,
                      "description": "Required variable for Data panel",
                      "defaultValue": "${{POSTGRES_PASSWORD}}"
                    },
                    "POSTGRES_DB": {
                      "isOptional": false,
                      "description": "Default database created when image is started.",
                      "defaultValue": "blazer"
                    },
                    "DATABASE_URL": {
                      "isOptional": false,
                      "description": "URL to connect to Postgres database.",
                      "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{PGDATABASE}}"
                    },
                    "POSTGRES_USER": {
                      "isOptional": false,
                      "description": "User to connect to Postgres DB",
                      "defaultValue": "postgres"
                    },
                    "SSL_CERT_DAYS": {
                      "isOptional": true,
                      "description": "SSL certificate expiry in days.",
                      "defaultValue": "820"
                    },
                    "POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Password to connect to DB",
                      "defaultValue": "{{POSTGRES_PASSWORD}}"
                    },
                    "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": {
                      "isOptional": false,
                      "description": "Allow Postgres to cleanly shut down",
                      "defaultValue": "60"
                    }
                  },
                  "networking": {},
                  "volumeMounts": {
                    "055e2128-6912-4407-916a-e90e9e7c9d46": {
                      "mountPath": "/var/lib/postgresql/data"
                    }
                  }
                },
                "615a92c4-2bf0-4020-92d3-64134fd60fc0": {
                  "icon": "https://devicons.railway.com/i/clickhouse.svg",
                  "name": "ClickHouse",
                  "build": {
                    "dockerfilePath": "Dockerfile"
                  },
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/two-workspaces/d8a",
                    "rootDirectory": "/clickhouse"
                  },
                  "variables": {
                    "CLICKHOUSE_DB": {
                      "isOptional": false,
                      "description": "Database for the events",
                      "defaultValue": "d8a"
                    },
                    "CLICKHOUSE_USER": {
                      "isOptional": false,
                      "description": "ClickHouse admin user (d8a writes as it)",
                      "defaultValue": "default"
                    },
                    "CLICKHOUSE_PASSWORD": {
                      "isOptional": false,
                      "description": "Auto-generated admin password",
                      "defaultValue": "{{CLICKHOUSE_PASSWORD}}"
                    },
                    "CLICKHOUSE_BLAZER_PASSWORD": {
                      "isOptional": false,
                      "description": "Auto-generated password of the read-only 'blazer' user",
                      "defaultValue": "{{CLICKHOUSE_BLAZER_PASSWORD}}"
                    },
                    "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": {
                      "isOptional": false,
                      "description": "Time for ClickHouse to shut down cleanly",
                      "defaultValue": "30"
                    },
                    "CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT": {
                      "isOptional": false,
                      "description": "Lets the admin user manage users and grants",
                      "defaultValue": "1"
                    }
                  },
                  "networking": {
                    "serviceDomains": {}
                  },
                  "volumeMounts": {
                    "615a92c4-2bf0-4020-92d3-64134fd60fc0": {
                      "mountPath": "/var/lib/clickhouse"
                    }
                  }
                },
                "e42e9d14-5449-4eba-9547-08dc70e1e4cb": {
                  "icon": "https://raw.githubusercontent.com/ankane/blazer/master/app/assets/images/blazer/favicon.png",
                  "name": "Blazer",
                  "build": {
                    "dockerfilePath": "Dockerfile"
                  },
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/health",
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/two-workspaces/blazer",
                    "rootDirectory": "/"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "Port Blazer listens on - leave as is",
                      "defaultValue": "8080"
                    },
                    "SMTP_URL": {
                      "isOptional": true,
                      "description": "For check emails: smtp://user:password@host:587 (outbound SMTP needs Railway Pro)",
                      "defaultValue": ""
                    },
                    "BLAZER_SEED": {
                      "isOptional": false,
                      "description": "Adds the Website analytics dashboard on first boot",
                      "defaultValue": "d8a"
                    },
                    "DATABASE_URL": {
                      "isOptional": false,
                      "description": "Blazer's own database (queries, dashboards, checks) - leave as is",
                      "defaultValue": "${{Postgres.DATABASE_URL}}"
                    },
                    "BLAZER_TIMEOUT": {
                      "isOptional": true,
                      "description": "Query time limit in seconds",
                      "defaultValue": "60"
                    },
                    "BLAZER_PASSWORD": {
                      "isOptional": false,
                      "description": "Sign-in password (HTTP basic auth)",
                      "defaultValue": "{{BLAZER_PASSWORD}}"
                    },
                    "BLAZER_USERNAME": {
                      "isOptional": false,
                      "description": "Sign-in name (HTTP basic auth)",
                      "defaultValue": "admin"
                    },
                    "SECRET_KEY_BASE": {
                      "isOptional": false,
                      "description": "Rails secret - leave as is",
                      "defaultValue": "{{SECRET_KEY_BASE}}"
                    },
                    "BLAZER_TIME_ZONE": {
                      "isOptional": true,
                      "description": "Time zone for dates in results, e.g. Europe/Berlin",
                      "defaultValue": "Etc/UTC"
                    },
                    "BLAZER_FROM_EMAIL": {
                      "isOptional": true,
                      "description": "Sender address for check emails",
                      "defaultValue": ""
                    },
                    "BLAZER_DATABASE_URL_D8A": {
                      "isOptional": false,
                      "description": "d8a's events in ClickHouse, read-only - leave as is",
                      "defaultValue": "clickhouse://blazer:${{ClickHouse.CLICKHOUSE_BLAZER_PASSWORD}}@${{ClickHouse.RAILWAY_PRIVATE_DOMAIN}}:8123/${{ClickHouse.CLICKHOUSE_DB}}"
                    },
                    "BLAZER_SLACK_WEBHOOK_URL": {
                      "isOptional": true,
                      "description": "Slack incoming webhook for check alerts",
                      "defaultValue": ""
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  }
                },
                "e592f51b-a1a2-4c02-9d1e-5c4cf1096a2a": {
                  "icon": "https://raw.githubusercontent.com/d8a-tech/d8a/master/docs/static/img/d8a-logo.svg",
                  "name": "d8a",
                  "build": {},
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/healthz",
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "ghcr.io/d8a-tech/d8a:1.5.1"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "Port Railway routes to - leave as is",
                      "defaultValue": "8080"
                    },
                    "PROTOCOL": {
                      "isOptional": false,
                      "description": "Tracking protocol: ga4 (gtag.js / GTM hits to /g/collect), d8a (d8a web tracker) or matomo",
                      "defaultValue": "ga4"
                    },
                    "SERVER_PORT": {
                      "isOptional": false,
                      "description": "Port d8a listens on - leave as is",
                      "defaultValue": "8080"
                    },
                    "DBIP_ENABLED": {
                      "isOptional": false,
                      "description": "Visitor country/city from the DB-IP Lite dataset (downloaded by d8a)",
                      "defaultValue": "true"
                    },
                    "RAILWAY_RUN_UID": {
                      "isOptional": false,
                      "description": "Runs as root so d8a can write to the Railway volume",
                      "defaultValue": "0"
                    },
                    "SESSIONS_TIMEOUT": {
                      "isOptional": false,
                      "description": "Inactivity after which a session closes and is written",
                      "defaultValue": "30m"
                    },
                    "WAREHOUSE_DRIVER": {
                      "isOptional": false,
                      "description": "Where sessions are written - leave as is",
                      "defaultValue": "clickhouse"
                    },
                    "STORAGE_SPOOL_ENABLED": {
                      "isOptional": false,
                      "description": "Buffer closed sessions on the volume before writing them",
                      "defaultValue": "true"
                    },
                    "SERVER_TRUSTED_PROXIES": {
                      "isOptional": false,
                      "description": "Railway's proxy network: visitor IPs come from its X-Real-IP header",
                      "defaultValue": "100.64.0.0/10"
                    },
                    "WAREHOUSE_CLICKHOUSE_DB": {
                      "isOptional": false,
                      "description": "ClickHouse database",
                      "defaultValue": "${{ClickHouse.CLICKHOUSE_DB}}"
                    },
                    "WAREHOUSE_CLICKHOUSE_HOST": {
                      "isOptional": false,
                      "description": "ClickHouse host - private network only",
                      "defaultValue": "${{ClickHouse.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "WAREHOUSE_CLICKHOUSE_PORT": {
                      "isOptional": false,
                      "description": "ClickHouse native port",
                      "defaultValue": "9000"
                    },
                    "WAREHOUSE_CLICKHOUSE_USER": {
                      "isOptional": false,
                      "description": "ClickHouse user",
                      "defaultValue": "${{ClickHouse.CLICKHOUSE_USER}}"
                    },
                    "WAREHOUSE_CLICKHOUSE_PASSWORD": {
                      "isOptional": false,
                      "description": "ClickHouse password",
                      "defaultValue": "${{ClickHouse.CLICKHOUSE_PASSWORD}}"
                    },
                    "PROPERTY_SETTINGS_IP_MASKING_LEVEL": {
                      "isOptional": true,
                      "description": "Stored IP addresses: 0 full, 1 IPv4 /24 IPv6 /48, 2 /16 /32, 3 drop",
                      "defaultValue": "1"
                    },
                    "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": {
                      "isOptional": false,
                      "description": "Time to flush buffered hits on redeploy",
                      "defaultValue": "30"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  },
                  "volumeMounts": {
                    "e592f51b-a1a2-4c02-9d1e-5c4cf1096a2a": {
                      "mountPath": "/storage"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "Blazer",
      "method": "GET",
      "path": "/health",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 4,
    "needs_volume": true
  },
  "generated_at": "2026-11-07T16:15:10.050Z",
  "generator_version": "0.1.0"
}