{ "manifest_version": "1.0.0", "template": { "id": "f8485686-be8b-4b3e-86f7-5f7ca75089ff", "slug": "documenso-production", "name": "Documenso | Open-Source DocuSign Alternative with Postgres", "description": "E-signatures on your own server, with the signing certificate made on boot", "url": "https://railway.com/deploy/documenso-production", "upstream": { "repo_url": "https://github.com/nomideusz/documenso-railway" } }, "status": "unvalidated", "validated_at": null, "success_rate_30d": null, "services": [ { "name": "Documenso", "source": { "repo": "https://github.com/nomideusz/documenso-railway" }, "needs_volume": true, "volume_mount_path": "/opt/documenso", "http": true }, { "name": "Postgres", "source": { "image": "postgres:17.11-alpine" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false } ], "required_inputs": [ { "key": "PORT", "service": "Documenso", "description": "Port Documenso listens on - leave as is", "secret": false, "strategy": "default", "default": "3000" }, { "key": "NEXTAUTH_SECRET", "service": "Documenso", "description": "Signs session cookies - changing it logs everyone out", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "DOCUMENSO_ADMIN_EMAIL", "service": "Documenso", "description": "Your email - the admin account, created and verified on first boot so you can sign in without SMTP", "secret": false, "strategy": "ask_user" }, { "key": "NEXT_PRIVATE_SMTP_PORT", "service": "Documenso", "description": "SMTP port", "secret": false, "strategy": "default", "default": "587" }, { "key": "NEXT_PUBLIC_WEBAPP_URL", "service": "Documenso", "description": "Public URL of Documenso (signing links, emails, sign-in) - set it to your custom domain after adding one", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "DOCUMENSO_ADMIN_PASSWORD", "service": "Documenso", "description": "Admin password, set on first boot only - copy it from here to sign in, then change it in Documenso", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "NEXT_PRIVATE_SMTP_SECURE", "service": "Documenso", "description": "true for implicit TLS (port 465), false for STARTTLS (587)", "secret": false, "strategy": "default", "default": "false" }, { "key": "NEXT_PRIVATE_DATABASE_URL", "service": "Documenso", "description": "Postgres on the private network (documents are stored in the database)", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "NEXT_PUBLIC_DISABLE_SIGNUP", "service": "Documenso", "description": "Public sign-up is closed; set to false to let teammates register (they need SMTP to verify their email)", "secret": false, "strategy": "default", "default": "true" }, { "key": "NEXT_PRIVATE_ENCRYPTION_KEY", "service": "Documenso", "description": "Encrypts stored secrets such as 2FA keys. BACK IT UP - changing it breaks existing 2FA and stored credentials", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "NEXT_PRIVATE_SMTP_FROM_NAME", "service": "Documenso", "description": "Sender name for Documenso emails", "secret": false, "strategy": "default", "default": "Documenso" }, { "key": "NEXT_PRIVATE_SMTP_TRANSPORT", "service": "Documenso", "description": "smtp-auth for SMTP, or resend to send over HTTPS with NEXT_PRIVATE_RESEND_API_KEY (works on every Railway plan)", "secret": false, "strategy": "default", "default": "smtp-auth" }, { "key": "NEXT_PRIVATE_SIGNING_TRANSPORT", "service": "Documenso", "description": "Seal signed documents with the certificate file on the volume", "secret": false, "strategy": "default", "default": "local" }, { "key": "NEXT_PRIVATE_SIGNING_PASSPHRASE", "service": "Documenso", "description": "Passphrase of the signing certificate - set before first boot, it must match the .p12 file", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "RAILWAY_HEALTHCHECK_TIMEOUT_SEC", "service": "Documenso", "description": "First boot runs the database migrations before the health check can pass", "secret": false, "strategy": "default", "default": "600" }, { "key": "NEXT_PRIVATE_INTERNAL_WEBAPP_URL", "service": "Documenso", "description": "How Documenso reaches itself for background jobs and fonts - must use PORT", "secret": false, "strategy": "default", "default": "http://localhost:3000" }, { "key": "NEXT_PRIVATE_SIGNING_LOCAL_FILE_PATH", "service": "Documenso", "description": "Signing certificate - a self-signed one is created here on first boot; replace the file to use your own", "secret": false, "strategy": "default", "default": "/opt/documenso/cert.p12" }, { "key": "NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY", "service": "Documenso", "description": "Encrypts short-lived tokens - must differ from NEXT_PRIVATE_ENCRYPTION_KEY", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "PGDATA", "service": "Postgres", "description": "Data subdirectory - keeps Postgres happy on Railway volumes", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "POSTGRES_DB", "service": "Postgres", "description": "Database name", "secret": false, "strategy": "default", "default": "documenso" }, { "key": "POSTGRES_USER", "service": "Postgres", "description": "Database user", "secret": false, "strategy": "default", "default": "documenso" }, { "key": "POSTGRES_PASSWORD", "service": "Postgres", "description": "Auto-generated database password", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "Postgres", "description": "Time for Postgres to shut down cleanly on redeploy", "secret": false, "strategy": "default", "default": "60" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "documenso-production" } }, "cli": "railway deploy --template documenso-production", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "f8485686-be8b-4b3e-86f7-5f7ca75089ff", "serializedConfig": { "services": { "5ddbeaf2-7001-4f5f-8270-5ea6ffdf6ed8": { "icon": "https://raw.githubusercontent.com/nomideusz/documenso-railway/main/icon.svg", "name": "Documenso", "build": {}, "deploy": { "startCommand": null, "healthcheckPath": "/api/health", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/nomideusz/documenso-railway" }, "variables": { "PORT": { "isOptional": false, "description": "Port Documenso listens on - leave as is", "defaultValue": "3000" }, "NEXTAUTH_SECRET": { "isOptional": false, "description": "Signs session cookies - changing it logs everyone out", "defaultValue": "{{NEXTAUTH_SECRET}}" }, "DOCUMENSO_ADMIN_EMAIL": { "isOptional": false, "description": "Your email - the admin account, created and verified on first boot so you can sign in without SMTP", "defaultValue": "{{DOCUMENSO_ADMIN_EMAIL}}" }, "NEXT_PRIVATE_SMTP_HOST": { "isOptional": true, "description": "SMTP server for signing invitations and notifications (Railway allows outbound SMTP on Pro only)", "defaultValue": "" }, "NEXT_PRIVATE_SMTP_PORT": { "isOptional": true, "description": "SMTP port", "defaultValue": "587" }, "NEXT_PUBLIC_WEBAPP_URL": { "isOptional": false, "description": "Public URL of Documenso (signing links, emails, sign-in) - set it to your custom domain after adding one", "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}" }, "DOCUMENSO_ADMIN_PASSWORD": { "isOptional": false, "description": "Admin password, set on first boot only - copy it from here to sign in, then change it in Documenso", "defaultValue": "{{DOCUMENSO_ADMIN_PASSWORD}}" }, "NEXT_PRIVATE_SMTP_SECURE": { "isOptional": true, "description": "true for implicit TLS (port 465), false for STARTTLS (587)", "defaultValue": "false" }, "NEXT_PRIVATE_DATABASE_URL": { "isOptional": false, "description": "Postgres on the private network (documents are stored in the database)", "defaultValue": "postgresql://${{Postgres.POSTGRES_USER}}:${{Postgres.POSTGRES_PASSWORD}}@${{Postgres.RAILWAY_PRIVATE_DOMAIN}}:5432/${{Postgres.POSTGRES_DB}}" }, "NEXT_PRIVATE_SMTP_PASSWORD": { "isOptional": true, "description": "SMTP password", "defaultValue": "" }, "NEXT_PRIVATE_SMTP_USERNAME": { "isOptional": true, "description": "SMTP username", "defaultValue": "" }, "NEXT_PUBLIC_DISABLE_SIGNUP": { "isOptional": false, "description": "Public sign-up is closed; set to false to let teammates register (they need SMTP to verify their email)", "defaultValue": "true" }, "DOCUMENSO_DISABLE_TELEMETRY": { "isOptional": true, "description": "Set to true to stop Documenso's anonymous usage telemetry (app version and installation ID only)", "defaultValue": "" }, "NEXT_PRIVATE_ENCRYPTION_KEY": { "isOptional": false, "description": "Encrypts stored secrets such as 2FA keys. BACK IT UP - changing it breaks existing 2FA and stored credentials", "defaultValue": "{{NEXT_PRIVATE_ENCRYPTION_KEY}}" }, "NEXT_PRIVATE_RESEND_API_KEY": { "isOptional": true, "description": "Resend API key, used when NEXT_PRIVATE_SMTP_TRANSPORT=resend", "defaultValue": "" }, "NEXT_PRIVATE_SMTP_FROM_NAME": { "isOptional": true, "description": "Sender name for Documenso emails", "defaultValue": "Documenso" }, "NEXT_PRIVATE_SMTP_TRANSPORT": { "isOptional": true, "description": "smtp-auth for SMTP, or resend to send over HTTPS with NEXT_PRIVATE_RESEND_API_KEY (works on every Railway plan)", "defaultValue": "smtp-auth" }, "NEXT_PRIVATE_SIGNING_TRANSPORT": { "isOptional": false, "description": "Seal signed documents with the certificate file on the volume", "defaultValue": "local" }, "NEXT_PRIVATE_SMTP_FROM_ADDRESS": { "isOptional": true, "description": "Sender address, e.g. noreply@example.com", "defaultValue": "" }, "NEXT_PRIVATE_SIGNING_PASSPHRASE": { "isOptional": false, "description": "Passphrase of the signing certificate - set before first boot, it must match the .p12 file", "defaultValue": "{{NEXT_PRIVATE_SIGNING_PASSPHRASE}}" }, "RAILWAY_HEALTHCHECK_TIMEOUT_SEC": { "isOptional": false, "description": "First boot runs the database migrations before the health check can pass", "defaultValue": "600" }, "NEXT_PRIVATE_INTERNAL_WEBAPP_URL": { "isOptional": false, "description": "How Documenso reaches itself for background jobs and fonts - must use PORT", "defaultValue": "http://localhost:3000" }, "NEXT_PRIVATE_SIGNING_LOCAL_FILE_PATH": { "isOptional": false, "description": "Signing certificate - a self-signed one is created here on first boot; replace the file to use your own", "defaultValue": "/opt/documenso/cert.p12" }, "NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY": { "isOptional": false, "description": "Encrypts short-lived tokens - must differ from NEXT_PRIVATE_ENCRYPTION_KEY", "defaultValue": "{{NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY}}" } }, "networking": { "serviceDomains": { "": {} } }, "volumeMounts": { "e778279f-17cf-4600-a6e8-32425c438884": { "mountPath": "/opt/documenso" } } }, "a2502312-52ea-45a6-8d18-e458a3c57234": { "icon": "https://devicons.railway.app/i/postgresql.svg", "name": "Postgres", "build": {}, "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "postgres:17.11-alpine" }, "variables": { "PGDATA": { "isOptional": false, "description": "Data subdirectory - keeps Postgres happy on Railway volumes", "defaultValue": "/var/lib/postgresql/data/pgdata" }, "POSTGRES_DB": { "isOptional": false, "description": "Database name", "defaultValue": "documenso" }, "POSTGRES_USER": { "isOptional": false, "description": "Database user", "defaultValue": "documenso" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Auto-generated database password", "defaultValue": "{{POSTGRES_PASSWORD}}" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": false, "description": "Time for Postgres to shut down cleanly on redeploy", "defaultValue": "60" } }, "networking": { "serviceDomains": {} }, "volumeMounts": { "194ec7a9-558b-4d01-8f1b-3a9128c0b801": { "mountPath": "/var/lib/postgresql/data" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "Documenso", "method": "GET", "path": "/api/health", "expect_status": 200 } }, "resources": { "expected_services": 2, "needs_volume": true }, "generated_at": "2026-10-14T10:14:43.564Z", "generator_version": "0.1.0" }