{
  "manifest_version": "1.0.0",
  "template": {
    "id": "0b7d2c1d-5d1f-4e3b-9c4b-f2c7f6187b52",
    "slug": "dsh-02-coding-agent-with-web-ui",
    "name": "DSH Coding Agent with Web UI",
    "description": "Always-on coding agent built on DeepSeek Harness, with plugins and web UI.",
    "url": "https://railway.com/deploy/dsh-02-coding-agent-with-web-ui",
    "upstream": {
      "repo_url": "https://github.com/baranberkay96/dsh-railway"
    }
  },
  "services": [
    {
      "name": "deepseek-harness",
      "source": {
        "repo": "https://github.com/baranberkay96/dsh-railway"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "TZ",
      "service": "deepseek-harness",
      "description": "IANA time zone for the agent's clock and scheduled tasks (e.g. Europe/Istanbul).",
      "secret": false,
      "strategy": "default",
      "default": "UTC"
    },
    {
      "key": "PORT",
      "service": "deepseek-harness",
      "description": "Port of the built-in password gate (Caddy). Railway's healthcheck and public domain use it; keep 8080 unless you also change the domain's target port.",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "DSH_WEB_PASSWORD",
      "service": "deepseek-harness",
      "description": "Web UI password, generated at deploy. Copy it from this variable to sign in. The service refuses to start if it is empty or shorter than 12 characters.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "DSH_WEB_USERNAME",
      "service": "deepseek-harness",
      "description": "Username for the Web UI login prompt (letters, digits, '.', '_' or '-').",
      "secret": false,
      "strategy": "default",
      "default": "admin"
    },
    {
      "key": "DSH_PERMISSION_MODE",
      "service": "deepseek-harness",
      "description": "Default permission preset for new sessions: read-only, workspace-write (upstream default, asks before wider access) or danger-full-access (no sandbox, no approval prompts). Can also be changed per session in the Web UI.",
      "secret": false,
      "strategy": "default",
      "default": "workspace-write"
    },
    {
      "key": "DSH_TELEMETRY_DISABLED",
      "service": "deepseek-harness",
      "description": "Any non-empty value turns off upstream's feedback-triggered OpenTelemetry upload. Delete the variable to restore the upstream default.",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS",
      "service": "deepseek-harness",
      "description": "Seconds the old container gets on redeploy to stop dsh cleanly (it drains for up to 5 seconds) before it is killed.",
      "secret": false,
      "strategy": "default",
      "default": "15"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "dsh-02-coding-agent-with-web-ui"
      }
    },
    "cli": "railway deploy --template dsh-02-coding-agent-with-web-ui",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "0b7d2c1d-5d1f-4e3b-9c4b-f2c7f6187b52",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "c760aa27-3806-54b6-a1fb-ca63ead702f3": {
                  "icon": "https://cdn.jsdelivr.net/gh/deepseek-ai/deepseek-harness@dsh-v0.2.1-rc.2/apps/desktop/resources/icon.svg",
                  "name": "deepseek-harness",
                  "build": {
                    "builder": "DOCKERFILE"
                  },
                  "deploy": {
                    "healthcheckPath": "/healthz",
                    "restartPolicyType": "ALWAYS",
                    "healthcheckTimeout": 600
                  },
                  "source": {
                    "repo": "baranberkay96/dsh-railway",
                    "branch": "main",
                    "rootDirectory": "/services/deepseek-harness"
                  },
                  "variables": {
                    "TZ": {
                      "isOptional": true,
                      "description": "IANA time zone for the agent's clock and scheduled tasks (e.g. Europe/Istanbul).",
                      "defaultValue": "UTC"
                    },
                    "PORT": {
                      "isOptional": true,
                      "description": "Port of the built-in password gate (Caddy). Railway's healthcheck and public domain use it; keep 8080 unless you also change the domain's target port.",
                      "defaultValue": "8080"
                    },
                    "DEEPSEEK_API_KEY": {
                      "isOptional": true,
                      "description": "Optional. DeepSeek API key (platform.deepseek.com) for the default model and web search. You can instead save it in the Web UI under Settings > Models, which also supports other providers.",
                      "defaultValue": ""
                    },
                    "DSH_WEB_PASSWORD": {
                      "isOptional": true,
                      "description": "Web UI password, generated at deploy. Copy it from this variable to sign in. The service refuses to start if it is empty or shorter than 12 characters.",
                      "defaultValue": "{{DSH_WEB_PASSWORD}}"
                    },
                    "DSH_WEB_USERNAME": {
                      "isOptional": true,
                      "description": "Username for the Web UI login prompt (letters, digits, '.', '_' or '-').",
                      "defaultValue": "admin"
                    },
                    "DSH_TRUSTED_HOSTS": {
                      "isOptional": true,
                      "description": "Optional. Extra host names the Web UI is reached through, comma-separated (e.g. a custom domain like agent.example.com). The Railway domain is trusted automatically.",
                      "defaultValue": ""
                    },
                    "DSH_PERMISSION_MODE": {
                      "isOptional": true,
                      "description": "Default permission preset for new sessions: read-only, workspace-write (upstream default, asks before wider access) or danger-full-access (no sandbox, no approval prompts). Can also be changed per session in the Web UI.",
                      "defaultValue": "workspace-write"
                    },
                    "DSH_TELEMETRY_DISABLED": {
                      "isOptional": true,
                      "description": "Any non-empty value turns off upstream's feedback-triggered OpenTelemetry upload. Delete the variable to restore the upstream default.",
                      "defaultValue": "1"
                    },
                    "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": {
                      "isOptional": true,
                      "description": "Seconds the old container gets on redeploy to stop dsh cleanly (it drains for up to 5 seconds) before it is killed.",
                      "defaultValue": "15"
                    }
                  },
                  "networking": {
                    "tcpProxies": {},
                    "serviceDomains": {
                      "<hasDomain>:8080": {
                        "port": 8080
                      }
                    }
                  },
                  "volumeMounts": {
                    "1b78dd4b-7b1b-52ea-8ad5-e05165633d6a": {
                      "mountPath": "/data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "deepseek-harness",
      "method": "GET",
      "path": "/healthz",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-11-11T04:15:11.344Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-10-20T07:12:59.089Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_685f0ae1c7444af89397",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "healthcheck",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 250,
    "typical_build_seconds": 151,
    "typical_start_seconds": 20,
    "slowest_service": "deepseek-harness"
  }
}