{ "manifest_version": "1.0.0", "template": { "id": "3faf06e7-1914-4a5f-aba0-0e5ca5ebda7b", "slug": "glitchtip-hardened", "name": "GlitchTip (hardened)", "description": "Self-hosted error tracking, Sentry SDK compatible. Embedded worker.", "url": "https://railway.com/deploy/glitchtip-hardened", "upstream": { "image": "glitchtip/glitchtip:latest" } }, "services": [ { "name": "glitchtip-web", "source": { "image": "glitchtip/glitchtip:latest" }, "needs_volume": false, "http": true }, { "name": "Redis", "source": { "image": "redis:7-alpine" }, "needs_volume": true, "volume_mount_path": "/data", "http": false }, { "name": "Postgres", "source": { "image": "postgres:15" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false } ], "required_inputs": [ { "key": "REDIS_URL", "service": "glitchtip-web", "description": "Task broker for the background worker. Also accepted as VALKEY_URL.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SECRET_KEY", "service": "glitchtip-web", "description": "Django signing key. Generated per deploy — never share one across instances. Changing it logs everyone out.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "DATABASE_URL", "service": "glitchtip-web", "description": "PostgreSQL 14+. Private network, no egress cost. Migrations run on first boot.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "GLITCHTIP_DOMAIN", "service": "glitchtip-web", "description": "Public URL of this instance, scheme included. Used in DSNs and email links.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "GLITCHTIP_EMBED_WORKER", "service": "glitchtip-web", "description": "Runs the background worker inside the web process. Without a worker running somewhere, events arrive but are never processed or emailed.", "secret": false, "strategy": "default", "default": "true" }, { "key": "ENABLE_USER_REGISTRATION", "service": "glitchtip-web", "description": "Open signup. Set false after you create your account — error payloads carry stack traces and user data.", "secret": false, "strategy": "default", "default": "true" }, { "key": "GLITCHTIP_EVENT_RETENTION_DAYS", "service": "glitchtip-web", "description": "Days before events are deleted. Lower it to cut database growth.", "secret": false, "strategy": "default", "default": "90" }, { "key": "REDISHOST", "service": "Redis", "description": "Public TCP proxy hostname. For access from outside Railway.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDISPORT", "service": "Redis", "description": "Public TCP proxy port.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDISUSER", "service": "Redis", "description": "Redis ACL username. default is the built-in user — do not change it.", "secret": false, "strategy": "default", "default": "default" }, { "key": "REDIS_URL", "service": "Redis", "description": "Public connection string. For redis-cli and external tools.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_PASSWORD", "service": "Redis", "description": "Generated per deploy. Never reused across instances.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "RAILWAY_RUN_UID", "service": "Redis", "description": "UID the container runs as. 0 means root, which this image needs.", "secret": false, "strategy": "default", "default": "0" }, { "key": "REDISHOST_PRIVATE", "service": "Redis", "description": "Private network hostname. Not reachable from the internet.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "REDISPORT_PRIVATE", "service": "Redis", "description": "Private network port.", "secret": false, "strategy": "default", "default": "6379" }, { "key": "REDIS_PRIVATE_URL", "service": "Redis", "description": "Private connection string. This is what GlitchTip uses.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGDATA", "service": "Postgres", "description": "Data directory inside the volume. Changing it after first boot orphans the data.", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "PGHOST", "service": "Postgres", "description": "Public TCP proxy hostname. For psql from outside Railway.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGPORT", "service": "Postgres", "description": "Public TCP proxy port.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_DB", "service": "Postgres", "description": "Database name created on first boot.", "secret": false, "strategy": "default", "default": "railway" }, { "key": "DATABASE_URL", "service": "Postgres", "description": "Public connection string. For psql and external tools.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_USER", "service": "Postgres", "description": "Superuser role created on first boot. Random by default.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "PGHOST_PRIVATE", "service": "Postgres", "description": "Private network hostname. Not reachable from the internet.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGPORT_PRIVATE", "service": "Postgres", "description": "Private network port.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "POSTGRES_PASSWORD", "service": "Postgres", "description": "Generated per deploy. Never reused across instances.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "DATABASE_PRIVATE_URL", "service": "Postgres", "description": "Private connection string. This is what GlitchTip uses.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "glitchtip-hardened" } }, "cli": "railway deploy --template glitchtip-hardened", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "3faf06e7-1914-4a5f-aba0-0e5ca5ebda7b", "serializedConfig": { "buckets": {}, "services": { "02ee15b2-cd1e-4165-b0a2-980d64ae4c9e": { "icon": null, "name": "glitchtip-web", "deploy": { "startCommand": "/bin/sh -c \"sleep 10 && ./manage.py migrate && ./bin/start.sh\"", "healthcheckPath": "/login", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "glitchtip/glitchtip:latest" }, "variables": { "EMAIL_URL": { "isOptional": true, "description": "SMTP connection string, e.g. smtp+tls://user:pass@smtp.example.com:587. Without it no alert or confirmation mail is ever sent.", "defaultValue": "" }, "REDIS_URL": { "isOptional": false, "description": "Task broker for the background worker. Also accepted as VALKEY_URL.", "defaultValue": "${{Redis.REDIS_PRIVATE_URL}}" }, "SECRET_KEY": { "isOptional": false, "description": "Django signing key. Generated per deploy — never share one across instances. Changing it logs everyone out.", "defaultValue": "{{SECRET_KEY}}" }, "DATABASE_URL": { "isOptional": false, "description": "PostgreSQL 14+. Private network, no egress cost. Migrations run on first boot.", "defaultValue": "${{Postgres.DATABASE_PRIVATE_URL}}" }, "GLITCHTIP_DOMAIN": { "isOptional": false, "description": "Public URL of this instance, scheme included. Used in DSNs and email links.", "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}" }, "DEFAULT_FROM_EMAIL": { "isOptional": true, "description": "Sender address on outgoing mail. Must be one your SMTP provider allows.", "defaultValue": "" }, "GLITCHTIP_EMBED_WORKER": { "isOptional": true, "description": "Runs the background worker inside the web process. Without a worker running somewhere, events arrive but are never processed or emailed.", "defaultValue": "true" }, "ENABLE_USER_REGISTRATION": { "isOptional": true, "description": "Open signup. Set false after you create your account — error payloads carry stack traces and user data.", "defaultValue": "true" }, "GLITCHTIP_EVENT_RETENTION_DAYS": { "isOptional": true, "description": "Days before events are deleted. Lower it to cut database growth.", "defaultValue": "90" } }, "networking": { "serviceDomains": { "": {} } } }, "47121775-d5cf-419a-9e17-1b5ba34350ef": { "icon": null, "name": "Redis", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "redis:7-alpine" }, "variables": { "REDISHOST": { "isOptional": false, "description": "Public TCP proxy hostname. For access from outside Railway.", "defaultValue": "${{RAILWAY_TCP_PROXY_DOMAIN}}" }, "REDISPORT": { "isOptional": false, "description": "Public TCP proxy port.", "defaultValue": "${{RAILWAY_TCP_PROXY_PORT}}" }, "REDISUSER": { "isOptional": false, "description": "Redis ACL username. default is the built-in user — do not change it.", "defaultValue": "default" }, "REDIS_URL": { "isOptional": false, "description": "Public connection string. For redis-cli and external tools.", "defaultValue": "redis://default:${{REDIS_PASSWORD}}@${{RAILWAY_TCP_PROXY_DOMAIN}}:${{RAILWAY_TCP_PROXY_PORT}}" }, "REDIS_PASSWORD": { "isOptional": false, "description": "Generated per deploy. Never reused across instances.", "defaultValue": "{{REDIS_PASSWORD}}" }, "RAILWAY_RUN_UID": { "isOptional": false, "description": "UID the container runs as. 0 means root, which this image needs.", "defaultValue": "0" }, "REDISHOST_PRIVATE": { "isOptional": false, "description": "Private network hostname. Not reachable from the internet.", "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "REDISPORT_PRIVATE": { "isOptional": false, "description": "Private network port.", "defaultValue": "6379" }, "REDIS_PRIVATE_URL": { "isOptional": false, "description": "Private connection string. This is what GlitchTip uses.", "defaultValue": "redis://${{REDISUSER}}:${{REDIS_PASSWORD}}@${{REDISHOST_PRIVATE}}:${{REDISPORT_PRIVATE}}" } }, "volumeMounts": { "47121775-d5cf-419a-9e17-1b5ba34350ef": { "mountPath": "/data" } } }, "dd37377a-55cd-443e-a660-ca21727c1430": { "icon": null, "name": "Postgres", "deploy": { "startCommand": "/bin/sh -c \"unset PGPORT; docker-entrypoint.sh postgres --port=5432\"", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "postgres:15" }, "variables": { "PGDATA": { "isOptional": false, "description": "Data directory inside the volume. Changing it after first boot orphans the data.", "defaultValue": "/var/lib/postgresql/data/pgdata" }, "PGHOST": { "isOptional": false, "description": "Public TCP proxy hostname. For psql from outside Railway.", "defaultValue": "${{RAILWAY_TCP_PROXY_DOMAIN}}" }, "PGPORT": { "isOptional": false, "description": "Public TCP proxy port.", "defaultValue": "${{RAILWAY_TCP_PROXY_PORT}}" }, "POSTGRES_DB": { "isOptional": false, "description": "Database name created on first boot.", "defaultValue": "railway" }, "DATABASE_URL": { "isOptional": false, "description": "Public connection string. For psql and external tools.", "defaultValue": "postgres://${{POSTGRES_USER}}:${{POSTGRES_PASSWORD}}@${{PGHOST}}:${{PGPORT}}/${{POSTGRES_DB}}" }, "POSTGRES_USER": { "isOptional": false, "description": "Superuser role created on first boot. Random by default.", "defaultValue": "{{POSTGRES_USER}}" }, "PGHOST_PRIVATE": { "isOptional": false, "description": "Private network hostname. Not reachable from the internet.", "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "PGPORT_PRIVATE": { "isOptional": false, "description": "Private network port.", "defaultValue": "5432" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Generated per deploy. Never reused across instances.", "defaultValue": "{{POSTGRES_PASSWORD}}" }, "DATABASE_PRIVATE_URL": { "isOptional": false, "description": "Private connection string. This is what GlitchTip uses.", "defaultValue": "postgres://${{POSTGRES_USER}}:${{POSTGRES_PASSWORD}}@${{PGHOST_PRIVATE}}:${{PGPORT_PRIVATE}}/${{POSTGRES_DB}}" } }, "volumeMounts": { "dd37377a-55cd-443e-a660-ca21727c1430": { "mountPath": "/var/lib/postgresql/data" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "glitchtip-web", "method": "GET", "path": "/login", "expect_status": 200 } }, "resources": { "expected_services": 3, "needs_volume": true }, "generated_at": "2026-09-20T10:14:37.339Z", "generator_version": "0.1.0", "status": "validated", "validated_at": "2026-09-19T14:33:35.887Z", "success_rate_30d": 1, "validation": { "last_run_id": "run_5044616fed334cb09929", "checks": [ { "name": "workflow_completed", "passed": true }, { "name": "all_services_deployed", "passed": true }, { "name": "healthcheck", "passed": true }, { "name": "stays_up", "passed": true } ], "typical_ready_seconds": 119, "typical_build_seconds": 0, "typical_start_seconds": 51, "slowest_service": "glitchtip-web" } }