{ "manifest_version": "1.0.0", "template": { "id": "1ec7fdab-a55b-41bc-adc3-a4cd04fab4ed", "slug": "gritcms", "name": "GritCMS", "description": "GritCMS — The Open-Source Creator Operating System", "url": "https://railway.com/deploy/gritcms", "upstream": { "repo_url": "https://github.com/MUKE-coder/gritcms" } }, "status": "unvalidated", "validated_at": null, "success_rate_30d": null, "services": [ { "name": "GritCMS Web", "source": { "repo": "https://github.com/MUKE-coder/gritcms" }, "needs_volume": false, "http": true }, { "name": "GritCMS Admin", "source": { "repo": "https://github.com/MUKE-coder/gritcms" }, "needs_volume": false, "http": true }, { "name": "Redis", "source": { "image": "redis:8.2.1" }, "needs_volume": true, "volume_mount_path": "/data", "tcp_ports": [ 6379 ], "http": false }, { "name": "GritCMS Files", "source": { "repo": "https://github.com/timomeh/s3-public-presigner" }, "needs_volume": false, "http": false }, { "name": "GritCMS API", "source": { "repo": "https://github.com/MUKE-coder/gritcms" }, "needs_volume": false, "http": true }, { "name": "Postgres", "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:18" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "tcp_ports": [ 5432 ], "http": false } ], "required_inputs": [ { "key": "PORT", "service": "GritCMS Web", "description": "Port the Web Next.js server listens on. Do not change this.", "secret": false, "strategy": "default", "default": "3000" }, { "key": "NEXT_PUBLIC_API_URL", "service": "GritCMS Web", "description": "URL of the GritCMS API service. Auto-populated from the API service. Required at build time.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "GritCMS Web", "description": "Path to the Dockerfile for the public website. Do not change this.", "secret": false, "strategy": "default", "default": "apps/web/Dockerfile" }, { "key": "PORT", "service": "GritCMS Admin", "description": "Port the Admin Next.js server listens on. Do not change this.", "secret": false, "strategy": "default", "default": "3001" }, { "key": "NEXT_PUBLIC_API_URL", "service": "GritCMS Admin", "description": "URL of the GritCMS API service. Auto-populated from the API service. Required at build time.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "GritCMS Admin", "description": "Path to the Dockerfile for the Go Admin panel. Do not change this.", "secret": false, "strategy": "default", "default": "apps/admin/Dockerfile" }, { "key": "REDISHOST", "service": "Redis", "description": "Provide a value for REDISHOST.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "REDISPORT", "service": "Redis", "description": "Provide a value for REDISPORT.", "secret": false, "strategy": "default", "default": "6379" }, { "key": "REDISUSER", "service": "Redis", "description": "Provide a value for REDISUSER.", "secret": false, "strategy": "default", "default": "default" }, { "key": "REDIS_URL", "service": "Redis", "description": "Connection string for connecting to redis using the private network", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDISPASSWORD", "service": "Redis", "description": "Provide a value for REDISPASSWORD.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_PASSWORD", "service": "Redis", "description": "Provide a value for REDIS_PASSWORD.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "REDIS_PUBLIC_URL", "service": "Redis", "description": "Connection string for connecting to redis externally", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_BUCKET", "service": "GritCMS Files", "description": "Railway Bucket name. Auto-populated from the Bucket service.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_REGION", "service": "GritCMS Files", "description": "Railway Bucket region. Auto-populated from the Bucket service.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_ENDPOINT", "service": "GritCMS Files", "description": "Railway Bucket endpoint. Auto-populated from the Bucket service.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_ACCESS_KEY_ID", "service": "GritCMS Files", "description": "Railway Bucket access key. Auto-populated from the Bucket service.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "USE_NICE_NOT_FOUND", "service": "GritCMS Files", "description": "Returns a clean \"File not found\" error instead of a raw S3 XML error when a file doesn't exist.", "secret": false, "strategy": "default", "default": "1" }, { "key": "S3_SECRET_ACCESS_KEY", "service": "GritCMS Files", "description": "Railway Bucket secret key. Auto-populated from the Bucket service.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PRESIGNED_URL_EXPIRATION_SECONDS", "service": "GritCMS Files", "description": "How long the presigned redirect URL stays valid. Default is 1 hour. Increase if users share direct file links.", "secret": false, "strategy": "default", "default": "3600" }, { "key": "PORT", "service": "GritCMS API", "description": "Port the Go API server listens on. Do not change this.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "APP_ENV", "service": "GritCMS API", "description": "Application environment. Set to production for all Railway deployments.", "secret": false, "strategy": "default", "default": "production" }, { "key": "APP_URL", "service": "GritCMS API", "description": "The public URL of this API service. Auto-populated by Railway.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "AI_MODEL", "service": "GritCMS API", "description": "The specific AI model to use. Optional — only required if AI_PROVIDER is set.", "secret": false, "strategy": "default", "default": "claude-sonnet-4-5-20250929" }, { "key": "MAIL_FROM", "service": "GritCMS API", "description": "The sender email address for all outgoing emails. Must be a domain verified in your Resend account.", "secret": false, "strategy": "ask_user" }, { "key": "R2_BUCKET", "service": "GritCMS API", "description": "Railway Bucket name. Auto-populated from the Bucket service.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "R2_REGION", "service": "GritCMS API", "description": "Railway Bucket region. Auto-populated from the Bucket service — will be auto.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_URL", "service": "GritCMS API", "description": "Redis connection string. Auto-populated from the Redis service.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "AI_API_KEY", "service": "GritCMS API", "description": "API key for your chosen AI provider. For Claude use an Anthropic key, for OpenAI use an sk- key. Optional.", "secret": true, "strategy": "default", "default": "sk-ant-xxxxxxxxx" }, { "key": "JWT_SECRET", "service": "GritCMS API", "description": "Secret key used to sign authentication tokens. Auto-generated on deploy — never share this value.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "AI_PROVIDER", "service": "GritCMS API", "description": "AI provider for content generation features. Options: claude, openai, gemini. Optional — leave blank to disable AI features.", "secret": false, "strategy": "default", "default": "claude" }, { "key": "R2_ENDPOINT", "service": "GritCMS API", "description": "Public URL of the presigner service. All media files are served publicly through this. Auto-populated from the GritCMS Files service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "CORS_ORIGINS", "service": "GritCMS API", "description": "Required. Comma-separated list of your Web and Admin service public URLs. Set with a generic URL for inital deployment, then change after. Example: https://web.up.railway.app,https://admin.up.railway.app. Without setting this and redpolying the API service logins will fail. Note: No trailing slashes in the URLs.", "secret": false, "strategy": "ask_user" }, { "key": "DATABASE_URL", "service": "GritCMS API", "description": "PostgreSQL connection string. Auto-populated from the Postgres service.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PULSE_ENABLED", "service": "GritCMS API", "description": "Enable the Pulse performance monitoring dashboard at /pulse. Set to true once your site is live.", "secret": false, "strategy": "default", "default": "false" }, { "key": "R2_ACCESS_KEY", "service": "GritCMS API", "description": "Railway Bucket access key used to upload files. Auto-populated from the Bucket service.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "R2_SECRET_KEY", "service": "GritCMS API", "description": "Railway Bucket secret key used to upload files. Auto-populated from the Bucket service.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PULSE_PASSWORD", "service": "GritCMS API", "description": "Password to access the Pulse dashboard. Only required if PULSE_ENABLED is true.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "PULSE_USERNAME", "service": "GritCMS API", "description": "Username to access the Pulse dashboard. Only required if PULSE_ENABLED is true.", "secret": false, "strategy": "default", "default": "admin" }, { "key": "RESEND_API_KEY", "service": "GritCMS API", "description": "API key for sending emails via Resend. Get yours at resend.com — free tier supports 3,000 emails/month.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "STORAGE_DRIVER", "service": "GritCMS API", "description": "Storage provider. Railway Buckets are S3/R2-compatible. Do not change this.", "secret": false, "strategy": "default", "default": "r2" }, { "key": "SENTINEL_ENABLED", "service": "GritCMS API", "description": "Enable the Sentinel WAF and rate-limiting dashboard at /sentinel. Set to true once your site is live.", "secret": false, "strategy": "default", "default": "false" }, { "key": "SENTINEL_PASSWORD", "service": "GritCMS API", "description": "Password to access the Sentinel dashboard. Only required if SENTINEL_ENABLED is true.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "SENTINEL_USERNAME", "service": "GritCMS API", "description": "Username to access the Sentinel dashboard. Only required if SENTINEL_ENABLED is true.", "secret": false, "strategy": "default", "default": "admin" }, { "key": "GORM_STUDIO_ENABLED", "service": "GritCMS API", "description": "Enable the GORM Studio database browser at /studio. Disable in production unless actively needed.", "secret": false, "strategy": "default", "default": "false" }, { "key": "NEXT_PUBLIC_API_URL", "service": "GritCMS API", "description": "Public API URL used by the Next.js frontends at build time. Auto-populated by Railway.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "SENTINEL_SECRET_KEY", "service": "GritCMS API", "description": "Secret key used internally by Sentinel. Auto-generated on deploy.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "GritCMS API", "description": "Path to the Dockerfile for the Go API service. Do not change this.", "secret": false, "strategy": "default", "default": "apps/api/Dockerfile" }, { "key": "PGDATA", "service": "Postgres", "description": "Location where the database will be initialized", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "PGHOST", "service": "Postgres", "description": "Railway Private Domain Name.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGPORT", "service": "Postgres", "description": "Port to connect to Postgres.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "PGUSER", "service": "Postgres", "description": "Required variable for Data panel", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGDATABASE", "service": "Postgres", "description": "Required variable for the data panel.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGPASSWORD", "service": "Postgres", "description": "Required variable for Data panel", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_DB", "service": "Postgres", "description": "Default database created when image is started.", "secret": false, "strategy": "default", "default": "railway" }, { "key": "DATABASE_URL", "service": "Postgres", "description": "URL to connect to Postgres database.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_USER", "service": "Postgres", "description": "User to connect to Postgres DB", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "SSL_CERT_DAYS", "service": "Postgres", "description": "SSL certificate expiry in days.", "secret": false, "strategy": "default", "default": "820" }, { "key": "POSTGRES_PASSWORD", "service": "Postgres", "description": "Password to connect to DB", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "DATABASE_PUBLIC_URL", "service": "Postgres", "description": "Public URL to connect to Postgres database, used by the Data panel.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "Postgres", "description": "Allow Postgres to cleanly shut down", "secret": false, "strategy": "default", "default": "60" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "gritcms" } }, "cli": "railway deploy --template gritcms", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "1ec7fdab-a55b-41bc-adc3-a4cd04fab4ed", "serializedConfig": { "buckets": { "19acfcf3-23fb-4a16-98e6-7ac8a50ff360": { "name": "Bucket" } }, "services": { "16435335-6e47-48f0-9d8f-304f98c14c5c": { "icon": "https://gritframework.dev/grit_logo.png", "name": "GritCMS Web", "source": { "repo": "MUKE-coder/gritcms", "branch": null, "rootDirectory": "" }, "variables": { "PORT": { "isOptional": false, "description": "Port the Web Next.js server listens on. Do not change this.", "defaultValue": "3000" }, "NEXT_PUBLIC_API_URL": { "isOptional": false, "description": "URL of the GritCMS API service. Auto-populated from the API service. Required at build time.", "defaultValue": "https://${{GritCMS API.RAILWAY_PUBLIC_DOMAIN}}" }, "RAILWAY_DOCKERFILE_PATH": { "isOptional": false, "description": "Path to the Dockerfile for the public website. Do not change this.", "defaultValue": "apps/web/Dockerfile" } }, "networking": { "serviceDomains": { ":3000": { "port": 3000 } } } }, "38d2dcac-39ef-492d-857f-a8850481258b": { "icon": "https://gritframework.dev/grit_logo.png", "name": "GritCMS Admin", "deploy": { "healthcheckPath": "" }, "source": { "repo": "MUKE-coder/gritcms", "branch": null, "rootDirectory": "" }, "variables": { "PORT": { "isOptional": false, "description": "Port the Admin Next.js server listens on. Do not change this.", "defaultValue": "3001" }, "NEXT_PUBLIC_API_URL": { "isOptional": false, "description": "URL of the GritCMS API service. Auto-populated from the API service. Required at build time.", "defaultValue": "https://${{GritCMS API.RAILWAY_PUBLIC_DOMAIN}}" }, "RAILWAY_DOCKERFILE_PATH": { "isOptional": false, "description": "Path to the Dockerfile for the Go Admin panel. Do not change this.", "defaultValue": "apps/admin/Dockerfile" } }, "networking": { "serviceDomains": { ":3001": { "port": 3001 } } } }, "b55fb518-8cda-461d-a283-aaf8ea657d43": { "icon": "https://cdn.sanity.io/images/sy1jschh/production/0ce0bfdcfbdbf69662b1116671f97c2dd788b655-157x157.svg", "name": "Redis", "deploy": { "startCommand": "/bin/sh -c \"rm -rf $RAILWAY_VOLUME_MOUNT_PATH/lost+found/ && exec docker-entrypoint.sh redis-server --requirepass $REDIS_PASSWORD --save 60 1 --dir $RAILWAY_VOLUME_MOUNT_PATH\"" }, "source": { "image": "redis:8.2.1" }, "variables": { "REDISHOST": { "isOptional": false, "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "REDISPORT": { "isOptional": false, "defaultValue": "6379" }, "REDISUSER": { "isOptional": false, "defaultValue": "default" }, "REDIS_URL": { "isOptional": false, "description": "Connection string for connecting to redis using the private network", "defaultValue": "redis://${{ REDISUSER }}:${{ REDIS_PASSWORD }}@${{ REDISHOST }}:${{ REDISPORT }}" }, "REDISPASSWORD": { "isOptional": false, "defaultValue": "${{REDIS_PASSWORD}}" }, "REDIS_PASSWORD": { "isOptional": false, "defaultValue": "{{REDIS_PASSWORD}}" }, "REDIS_PUBLIC_URL": { "description": "Connection string for connecting to redis externally", "defaultValue": "redis://default:${{ REDIS_PASSWORD }}@${{ RAILWAY_TCP_PROXY_DOMAIN }}:${{ RAILWAY_TCP_PROXY_PORT }}" } }, "networking": { "tcpProxies": { "6379": {} } }, "volumeMounts": { "b55fb518-8cda-461d-a283-aaf8ea657d43": { "mountPath": "/data" } }, "haTemplateCode": "redis-ha", "haConversionConfig": { "edge": { "label": "Reverse Proxies", "options": [ 1, 2 ], "nodeLabel": "HAProxy", "description": "HAProxy instances routing writes to the primary", "defaultValue": 2 }, "replica": { "label": "Redis Replicas", "options": [ 2, 3, 4, 5 ], "nodeLabel": "Redis", "description": "Nodes running Redis + colocated Sentinel", "defaultValue": 2 }, "internal": null, "description": "This will convert your Redis instance to an HA cluster with Sentinel failover and HAProxy routing to the primary." } }, "bef6579f-5346-468f-a037-8becb9784688": { "icon": "https://gritframework.dev/grit_logo.png", "name": "GritCMS Files", "source": { "repo": "timomeh/s3-public-presigner", "branch": null, "rootDirectory": null }, "variables": { "S3_BUCKET": { "isOptional": false, "description": "Railway Bucket name. Auto-populated from the Bucket service.", "defaultValue": "${{Bucket.BUCKET}}" }, "S3_REGION": { "isOptional": false, "description": "Railway Bucket region. Auto-populated from the Bucket service.", "defaultValue": "${{Bucket.REGION}}" }, "S3_ENDPOINT": { "isOptional": false, "description": "Railway Bucket endpoint. Auto-populated from the Bucket service.", "defaultValue": "${{Bucket.ENDPOINT}}" }, "S3_ACCESS_KEY_ID": { "isOptional": false, "description": "Railway Bucket access key. Auto-populated from the Bucket service.", "defaultValue": "${{Bucket.ACCESS_KEY_ID}}" }, "USE_NICE_NOT_FOUND": { "isOptional": false, "description": "Returns a clean \"File not found\" error instead of a raw S3 XML error when a file doesn't exist.", "defaultValue": "1" }, "S3_SECRET_ACCESS_KEY": { "isOptional": false, "description": "Railway Bucket secret key. Auto-populated from the Bucket service.", "defaultValue": "${{Bucket.SECRET_ACCESS_KEY}}" }, "PRESIGNED_URL_EXPIRATION_SECONDS": { "isOptional": false, "description": "How long the presigned redirect URL stays valid. Default is 1 hour. Increase if users share direct file links.", "defaultValue": "3600" } } }, "ca877ccf-0560-41e5-a9bc-ce371cc7c625": { "icon": "https://gritframework.dev/grit_logo.png", "name": "GritCMS API", "deploy": { "healthcheckPath": "/api/health" }, "source": { "repo": "MUKE-coder/gritcms", "branch": null, "rootDirectory": "apps/api" }, "variables": { "PORT": { "isOptional": false, "description": "Port the Go API server listens on. Do not change this.", "defaultValue": "8080" }, "APP_ENV": { "isOptional": false, "description": "Application environment. Set to production for all Railway deployments.", "defaultValue": "production" }, "APP_URL": { "isOptional": false, "description": "The public URL of this API service. Auto-populated by Railway.", "defaultValue": "${{RAILWAY_PUBLIC_DOMAIN}}" }, "AI_MODEL": { "isOptional": false, "description": "The specific AI model to use. Optional — only required if AI_PROVIDER is set.", "defaultValue": "claude-sonnet-4-5-20250929" }, "MAIL_FROM": { "isOptional": false, "description": "The sender email address for all outgoing emails. Must be a domain verified in your Resend account.", "defaultValue": "{{MAIL_FROM}}" }, "R2_BUCKET": { "isOptional": false, "description": "Railway Bucket name. Auto-populated from the Bucket service.", "defaultValue": "${{Bucket.BUCKET}}" }, "R2_REGION": { "isOptional": false, "description": "Railway Bucket region. Auto-populated from the Bucket service — will be auto.", "defaultValue": "${{Bucket.REGION}}" }, "REDIS_URL": { "isOptional": false, "description": "Redis connection string. Auto-populated from the Redis service.", "defaultValue": "${{Redis.REDIS_URL}}" }, "AI_API_KEY": { "isOptional": false, "description": "API key for your chosen AI provider. For Claude use an Anthropic key, for OpenAI use an sk- key. Optional.", "defaultValue": "sk-ant-xxxxxxxxx" }, "JWT_SECRET": { "isOptional": false, "description": "Secret key used to sign authentication tokens. Auto-generated on deploy — never share this value.", "defaultValue": "{{JWT_SECRET}}" }, "AI_PROVIDER": { "isOptional": false, "description": "AI provider for content generation features. Options: claude, openai, gemini. Optional — leave blank to disable AI features.", "defaultValue": "claude" }, "R2_ENDPOINT": { "isOptional": false, "description": "Public URL of the presigner service. All media files are served publicly through this. Auto-populated from the GritCMS Files service.", "defaultValue": "${{GritCMS Files.RAILWAY_PUBLIC_DOMAIN}}" }, "CORS_ORIGINS": { "isOptional": false, "description": "Required. Comma-separated list of your Web and Admin service public URLs. Set with a generic URL for inital deployment, then change after. Example: https://web.up.railway.app,https://admin.up.railway.app. Without setting this and redpolying the API service logins will fail. Note: No trailing slashes in the URLs.", "defaultValue": "{{CORS_ORIGINS}}" }, "DATABASE_URL": { "isOptional": false, "description": "PostgreSQL connection string. Auto-populated from the Postgres service.", "defaultValue": "${{Postgres.DATABASE_URL}}" }, "PULSE_ENABLED": { "isOptional": false, "description": "Enable the Pulse performance monitoring dashboard at /pulse. Set to true once your site is live.", "defaultValue": "false" }, "R2_ACCESS_KEY": { "isOptional": false, "description": "Railway Bucket access key used to upload files. Auto-populated from the Bucket service.", "defaultValue": "${{Bucket.ACCESS_KEY_ID}}" }, "R2_SECRET_KEY": { "isOptional": false, "description": "Railway Bucket secret key used to upload files. Auto-populated from the Bucket service.", "defaultValue": "${{Bucket.SECRET_ACCESS_KEY}}" }, "PULSE_PASSWORD": { "isOptional": false, "description": "Password to access the Pulse dashboard. Only required if PULSE_ENABLED is true.", "defaultValue": "{{PULSE_PASSWORD}}" }, "PULSE_USERNAME": { "isOptional": false, "description": "Username to access the Pulse dashboard. Only required if PULSE_ENABLED is true.", "defaultValue": "admin" }, "RESEND_API_KEY": { "isOptional": false, "description": "API key for sending emails via Resend. Get yours at resend.com — free tier supports 3,000 emails/month.", "defaultValue": "{{RESEND_API_KEY}}" }, "STORAGE_DRIVER": { "isOptional": false, "description": "Storage provider. Railway Buckets are S3/R2-compatible. Do not change this.", "defaultValue": "r2" }, "SENTINEL_ENABLED": { "isOptional": false, "description": "Enable the Sentinel WAF and rate-limiting dashboard at /sentinel. Set to true once your site is live.", "defaultValue": "false" }, "SENTINEL_PASSWORD": { "isOptional": false, "description": "Password to access the Sentinel dashboard. Only required if SENTINEL_ENABLED is true.", "defaultValue": "{{SENTINEL_PASSWORD}}" }, "SENTINEL_USERNAME": { "isOptional": false, "description": "Username to access the Sentinel dashboard. Only required if SENTINEL_ENABLED is true.", "defaultValue": "admin" }, "GORM_STUDIO_ENABLED": { "isOptional": false, "description": "Enable the GORM Studio database browser at /studio. Disable in production unless actively needed.", "defaultValue": "false" }, "NEXT_PUBLIC_API_URL": { "isOptional": false, "description": "Public API URL used by the Next.js frontends at build time. Auto-populated by Railway.", "defaultValue": "https://${{GritCMS API.RAILWAY_PUBLIC_DOMAIN}}" }, "SENTINEL_SECRET_KEY": { "isOptional": false, "description": "Secret key used internally by Sentinel. Auto-generated on deploy.", "defaultValue": "{{SENTINEL_SECRET_KEY}}" }, "RAILWAY_DOCKERFILE_PATH": { "isOptional": false, "description": "Path to the Dockerfile for the Go API service. Do not change this.", "defaultValue": "apps/api/Dockerfile" } }, "networking": { "serviceDomains": { ":8080": { "port": 8080 } } } }, "f3e141b4-ef56-453c-9f19-8699fbcf2177": { "icon": "https://devicons.railway.app/i/postgresql.svg", "name": "Postgres", "build": {}, "deploy": { "requiredMountPath": "/var/lib/postgresql/data" }, "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:18" }, "variables": { "PGDATA": { "isOptional": false, "description": "Location where the database will be initialized", "defaultValue": "/var/lib/postgresql/data/pgdata" }, "PGHOST": { "isOptional": false, "description": "Railway Private Domain Name.", "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "PGPORT": { "isOptional": false, "description": "Port to connect to Postgres.", "defaultValue": "5432" }, "PGUSER": { "isOptional": false, "description": "Required variable for Data panel", "defaultValue": "${{ POSTGRES_USER }}" }, "PGDATABASE": { "isOptional": false, "description": "Required variable for the data panel.", "defaultValue": "${{POSTGRES_DB}}" }, "PGPASSWORD": { "isOptional": false, "description": "Required variable for Data panel", "defaultValue": "${{POSTGRES_PASSWORD}}" }, "POSTGRES_DB": { "isOptional": false, "description": "Default database created when image is started.", "defaultValue": "railway" }, "DATABASE_URL": { "isOptional": false, "description": "URL to connect to Postgres database.", "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{PGDATABASE}}" }, "POSTGRES_USER": { "isOptional": false, "description": "User to connect to Postgres DB", "defaultValue": "postgres" }, "SSL_CERT_DAYS": { "isOptional": true, "description": "SSL certificate expiry in days.", "defaultValue": "820" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Password to connect to DB", "defaultValue": "{{POSTGRES_PASSWORD}}" }, "DATABASE_PUBLIC_URL": { "description": "Public URL to connect to Postgres database, used by the Data panel.", "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_TCP_PROXY_DOMAIN}}:${{RAILWAY_TCP_PROXY_PORT}}/${{PGDATABASE}}" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": false, "description": "Allow Postgres to cleanly shut down", "defaultValue": "60" } }, "networking": { "tcpProxies": { "5432": {} }, "serviceDomains": {} }, "volumeMounts": { "f3e141b4-ef56-453c-9f19-8699fbcf2177": { "mountPath": "/var/lib/postgresql/data" } }, "haTemplateCode": "postgres-ha", "haConversionConfig": { "edge": { "label": "Reverse Proxy", "options": [ 2, 3, 4, 5 ], "nodeLabel": "HAProxy", "description": "Routes traffic to the primary", "defaultValue": 3 }, "replica": { "label": "Replicas", "options": [ 2, 3, 4, 5, 6, 7 ], "nodeLabel": "Postgres", "description": "Streaming replicas for automatic failover", "defaultValue": 2 }, "internal": { "label": "Coordinator Nodes", "options": [ 3, 5, 7, 9 ], "nodeLabel": "etcd", "defaultValue": 3 }, "description": "This will convert your Postgres database to an HA cluster with Patroni failover and etcd consensus." } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "GritCMS API", "method": "GET", "path": "/api/health", "expect_status": 200 } }, "resources": { "expected_services": 6, "needs_volume": true }, "generated_at": "2026-09-10T16:14:52.212Z", "generator_version": "0.1.0" }