{
  "manifest_version": "1.0.0",
  "template": {
    "id": "1e0a34f3-d5ef-463d-8e52-0d84e6cd6a97",
    "slug": "_GawOC",
    "name": "Graylog",
    "description": "Free and open log management",
    "url": "https://railway.com/deploy/_GawOC",
    "upstream": {
      "image": "graylog/graylog:5.2"
    }
  },
  "services": [
    {
      "name": "graylog",
      "source": {
        "image": "graylog/graylog:5.2"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "opensearch",
      "source": {
        "image": "opensearchproject/opensearch:2"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "MongoDB",
      "source": {
        "image": "mongo"
      },
      "needs_volume": true,
      "volume_mount_path": "/data/db",
      "tcp_ports": [
        27017
      ],
      "http": false
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "graylog",
      "description": "Default port for the graylog web interface",
      "secret": false,
      "strategy": "default",
      "default": "9000"
    },
    {
      "key": "GRAYLOG_MONGODB_URI",
      "service": "graylog",
      "description": "Mongodb connection url",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "GRAYLOG_ROOT_USERNAME",
      "service": "graylog",
      "description": "The username for the root user, default username is `admin`",
      "secret": false,
      "strategy": "default",
      "default": "admin"
    },
    {
      "key": "GRAYLOG_PASSWORD_SECRET",
      "service": "graylog",
      "description": "A salt for the password, default salt is randomly generated",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "GRAYLOG_HTTP_PUBLISH_URI",
      "service": "graylog",
      "description": "External url for accessing the graylog web interface, can be a custom domain if one is configured for the service",
      "secret": false,
      "strategy": "default",
      "default": "http://graylog-production.up.railway.app/"
    },
    {
      "key": "GRAYLOG_HTTP_EXTERNAL_URI",
      "service": "graylog",
      "description": "External url for accessing the graylog web interface, can be a custom domain if one is configured for the service",
      "secret": false,
      "strategy": "default",
      "default": "http://graylog-production.up.railway.app/"
    },
    {
      "key": "GRAYLOG_ROOT_PASSWORD_SHA2",
      "service": "graylog",
      "description": "The SHA-256 hash for the root user's password, default password is `admin`",
      "secret": true,
      "strategy": "default",
      "default": "8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918"
    },
    {
      "key": "GRAYLOG_ELASTICSEARCH_HOSTS",
      "service": "graylog",
      "description": "Comma separeated list of Opensearch / Elasticsearch nodes",
      "secret": false,
      "strategy": "default",
      "default": "http://opensearch:9200"
    },
    {
      "key": "PORT",
      "service": "opensearch",
      "description": "Default opensearch service connection port",
      "secret": false,
      "strategy": "default",
      "default": "9200"
    },
    {
      "key": "http.host",
      "service": "opensearch",
      "description": "Expose opensearch on all interfaces",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0"
    },
    {
      "key": "discovery.type",
      "service": "opensearch",
      "description": "Disable opensearch multi-node cluster",
      "secret": false,
      "strategy": "default",
      "default": "single-node"
    },
    {
      "key": "node.store.allow_mmap",
      "service": "opensearch",
      "description": "Disable large in-memory maps as this cannot be adjusted in the railway enviornment",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "plugins.security.disabled",
      "service": "opensearch",
      "description": "Disable opensearch ssl as this service is not exposted externally",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "OPENSEARCH_INITIAL_ADMIN_PASSWORD",
      "service": "opensearch",
      "description": "Default password for initial admin user, default password is randomly generated",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "MONGOHOST",
      "service": "MongoDB",
      "description": "Railway Private Domain Name.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "MONGOPORT",
      "service": "MongoDB",
      "description": "MongoDB Port.",
      "secret": false,
      "strategy": "default",
      "default": "27017"
    },
    {
      "key": "MONGOUSER",
      "service": "MongoDB",
      "description": "Mongodb user.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MONGO_URL",
      "service": "MongoDB",
      "description": "Private URL to connect to MongoDB.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "MONGOPASSWORD",
      "service": "MongoDB",
      "description": "Root password.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MONGO_PUBLIC_URL",
      "service": "MongoDB",
      "description": "Public URL to connect to MongoDB, used for Data panel.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MONGO_INITDB_ROOT_PASSWORD",
      "service": "MongoDB",
      "description": "Root user password, set during initialization.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "MONGO_INITDB_ROOT_USERNAME",
      "service": "MongoDB",
      "description": "User created during initialization, given the root role.",
      "secret": false,
      "strategy": "default",
      "default": "mongo"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "_GawOC"
      }
    },
    "cli": "railway deploy --template _GawOC",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "1e0a34f3-d5ef-463d-8e52-0d84e6cd6a97",
            "serializedConfig": {
              "services": {
                "2e584c2f-b826-41d1-9135-e0af13a8c9ff": {
                  "name": "graylog",
                  "build": {},
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null
                  },
                  "source": {
                    "image": "graylog/graylog:5.2"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "Default port for the graylog web interface",
                      "defaultValue": "9000"
                    },
                    "GRAYLOG_MONGODB_URI": {
                      "isOptional": false,
                      "description": "Mongodb connection url",
                      "defaultValue": "${{MongoDB.MONGO_URL}}/graylog?authSource=admin"
                    },
                    "GRAYLOG_ROOT_USERNAME": {
                      "isOptional": false,
                      "description": "The username for the root user, default username is `admin`",
                      "defaultValue": "admin"
                    },
                    "GRAYLOG_PASSWORD_SECRET": {
                      "isOptional": false,
                      "description": "A salt for the password, default salt is randomly generated",
                      "defaultValue": "{{GRAYLOG_PASSWORD_SECRET}}"
                    },
                    "GRAYLOG_HTTP_PUBLISH_URI": {
                      "isOptional": false,
                      "description": "External url for accessing the graylog web interface, can be a custom domain if one is configured for the service",
                      "defaultValue": "http://graylog-production.up.railway.app/"
                    },
                    "GRAYLOG_HTTP_EXTERNAL_URI": {
                      "isOptional": false,
                      "description": "External url for accessing the graylog web interface, can be a custom domain if one is configured for the service",
                      "defaultValue": "http://graylog-production.up.railway.app/"
                    },
                    "GRAYLOG_ROOT_PASSWORD_SHA2": {
                      "isOptional": false,
                      "description": "The SHA-256 hash for the root user's password, default password is `admin`",
                      "defaultValue": "8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918"
                    },
                    "GRAYLOG_ELASTICSEARCH_HOSTS": {
                      "isOptional": false,
                      "description": "Comma separeated list of Opensearch / Elasticsearch nodes",
                      "defaultValue": "http://opensearch:9200"
                    }
                  },
                  "networking": {
                    "tcpProxies": {},
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  },
                  "volumeMounts": {}
                },
                "5ba5b65a-44d0-4574-bdea-334653811230": {
                  "name": "opensearch",
                  "build": {},
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null
                  },
                  "source": {
                    "image": "opensearchproject/opensearch:2"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "Default opensearch service connection port",
                      "defaultValue": "9200"
                    },
                    "http.host": {
                      "isOptional": false,
                      "description": "Expose opensearch on all interfaces",
                      "defaultValue": "0.0.0.0"
                    },
                    "discovery.type": {
                      "isOptional": false,
                      "description": "Disable opensearch multi-node cluster",
                      "defaultValue": "single-node"
                    },
                    "node.store.allow_mmap": {
                      "isOptional": false,
                      "description": "Disable large in-memory maps as this cannot be adjusted in the railway enviornment",
                      "defaultValue": "false"
                    },
                    "plugins.security.disabled": {
                      "isOptional": false,
                      "description": "Disable opensearch ssl as this service is not exposted externally",
                      "defaultValue": "true"
                    },
                    "OPENSEARCH_INITIAL_ADMIN_PASSWORD": {
                      "isOptional": false,
                      "description": "Default password for initial admin user, default password is randomly generated",
                      "defaultValue": "{{OPENSEARCH_INITIAL_ADMIN_PASSWORD}}"
                    }
                  },
                  "networking": {
                    "tcpProxies": {},
                    "serviceDomains": {}
                  },
                  "volumeMounts": {}
                },
                "6b38b238-bfce-4856-9b4a-169737453faf": {
                  "icon": "https://devicons.railway.app/i/mongodb.svg",
                  "name": "MongoDB",
                  "build": {},
                  "deploy": {
                    "startCommand": "docker-entrypoint.sh mongod --ipv6 --bind_ip ::,0.0.0.0"
                  },
                  "source": {
                    "image": "mongo"
                  },
                  "variables": {
                    "MONGOHOST": {
                      "isOptional": false,
                      "description": "Railway Private Domain Name.",
                      "defaultValue": "${{ RAILWAY_PRIVATE_DOMAIN }}"
                    },
                    "MONGOPORT": {
                      "isOptional": false,
                      "description": "MongoDB Port.",
                      "defaultValue": "27017"
                    },
                    "MONGOUSER": {
                      "isOptional": false,
                      "description": "Mongodb user.",
                      "defaultValue": "${{ MONGO_INITDB_ROOT_USERNAME }}"
                    },
                    "MONGO_URL": {
                      "isOptional": false,
                      "description": "Private URL to connect to MongoDB.",
                      "defaultValue": "mongodb://${{MONGO_INITDB_ROOT_USERNAME}}:${{MONGO_INITDB_ROOT_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:27017"
                    },
                    "MONGOPASSWORD": {
                      "isOptional": false,
                      "description": "Root password.",
                      "defaultValue": "${{ MONGO_INITDB_ROOT_PASSWORD }}"
                    },
                    "MONGO_PUBLIC_URL": {
                      "description": "Public URL to connect to MongoDB, used for Data panel.",
                      "defaultValue": "mongodb://${{MONGO_INITDB_ROOT_USERNAME}}:${{MONGO_INITDB_ROOT_PASSWORD}}@${{RAILWAY_TCP_PROXY_DOMAIN}}:${{RAILWAY_TCP_PROXY_PORT}}"
                    },
                    "MONGO_INITDB_ROOT_PASSWORD": {
                      "isOptional": false,
                      "description": "Root user password, set during initialization.",
                      "defaultValue": "{{MONGO_INITDB_ROOT_PASSWORD}}"
                    },
                    "MONGO_INITDB_ROOT_USERNAME": {
                      "isOptional": false,
                      "description": "User created during initialization, given the root role.",
                      "defaultValue": "mongo"
                    }
                  },
                  "networking": {
                    "tcpProxies": {
                      "27017": {}
                    },
                    "serviceDomains": {}
                  },
                  "volumeMounts": {
                    "6b38b238-bfce-4856-9b4a-169737453faf": {
                      "mountPath": "/data/db"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 3,
    "needs_volume": true
  },
  "generated_at": "2026-09-21T22:14:44.200Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-09-21T13:54:53.874Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_8e5cf1bca78f456d8210",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 90,
    "typical_build_seconds": 0,
    "typical_start_seconds": 10,
    "slowest_service": "graylog"
  }
}
