{ "manifest_version": "1.0.0", "template": { "id": "b718f825-6e02-4f85-b1bf-85173dbefb73", "slug": "harbor", "name": "Harbor", "description": "Private Docker registry with vulnerability scanning, roles and replication", "url": "https://railway.com/deploy/harbor", "upstream": { "repo_url": "https://github.com/gridalpha/harbor-railway" } }, "services": [ { "name": "Redis", "source": { "image": "redis:8.2" }, "needs_volume": true, "volume_mount_path": "/data", "http": false }, { "name": "harbor-jobservice", "source": { "repo": "https://github.com/gridalpha/harbor-railway" }, "needs_volume": false, "http": false }, { "name": "harbor-core", "source": { "repo": "https://github.com/gridalpha/harbor-railway" }, "needs_volume": false, "http": false }, { "name": "Postgres", "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:18" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false }, { "name": "harbor-registry", "source": { "repo": "https://github.com/gridalpha/harbor-railway" }, "needs_volume": false, "http": false }, { "name": "harbor-portal", "source": { "repo": "https://github.com/gridalpha/harbor-railway" }, "needs_volume": false, "http": false }, { "name": "harbor-registryctl", "source": { "repo": "https://github.com/gridalpha/harbor-railway" }, "needs_volume": false, "http": false }, { "name": "harbor-trivy", "source": { "repo": "https://github.com/gridalpha/harbor-railway" }, "needs_volume": true, "volume_mount_path": "/home/scanner/.cache", "http": false }, { "name": "harbor-proxy", "source": { "repo": "https://github.com/gridalpha/harbor-railway" }, "needs_volume": false, "http": true } ], "required_inputs": [ { "key": "REDISHOST", "service": "Redis", "description": "Data panel alias, not read by the server", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "REDISPORT", "service": "Redis", "description": "Data panel alias, not read by the server", "secret": false, "strategy": "default", "default": "6379" }, { "key": "REDISUSER", "service": "Redis", "description": "Data panel alias, not read by the server", "secret": false, "strategy": "default", "default": "default" }, { "key": "REDIS_URL", "service": "Redis", "description": "Private connection string", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDISPASSWORD", "service": "Redis", "description": "Data panel alias, not read by the server", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_PASSWORD", "service": "Redis", "description": "Auth password, read by the server", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "PORT", "service": "harbor-jobservice", "description": "Job service HTTP port", "secret": false, "strategy": "default", "default": "8080" }, { "key": "CORE_URL", "service": "harbor-jobservice", "description": "Core API address", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "LOG_LEVEL", "service": "harbor-jobservice", "description": "Job service log verbosity", "secret": false, "strategy": "default", "default": "info" }, { "key": "CORE_SECRET", "service": "harbor-jobservice", "description": "Core authentication secret", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PRIVATE_URL", "service": "harbor-jobservice", "description": "Address peers dial", "secret": false, "strategy": "default", "default": "http://harbor-jobservice.railway.internal:8080" }, { "key": "REGISTRY_URL", "service": "harbor-jobservice", "description": "Distribution registry address", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "MAX_JOB_WORKERS", "service": "harbor-jobservice", "description": "Concurrent job workers", "secret": false, "strategy": "default", "default": "10" }, { "key": "JOBSERVICE_SECRET", "service": "harbor-jobservice", "description": "Job service authentication secret", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "JOBSERVICE_REDIS_URL", "service": "harbor-jobservice", "description": "Job queue backend", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "harbor-jobservice", "description": "Dockerfile for this service", "secret": false, "strategy": "default", "default": "jobservice/Dockerfile" }, { "key": "REGISTRY_CONTROLLER_URL", "service": "harbor-jobservice", "description": "Registry controller address", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REGISTRY_CREDENTIAL_PASSWORD", "service": "harbor-jobservice", "description": "Registry basic auth password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REGISTRY_CREDENTIAL_USERNAME", "service": "harbor-jobservice", "description": "Registry basic auth user", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "JOBSERVICE_WEBHOOK_JOB_MAX_RETRY", "service": "harbor-jobservice", "description": "Webhook delivery retries", "secret": false, "strategy": "default", "default": "3" }, { "key": "JOBSERVICE_WEBHOOK_JOB_HTTP_CLIENT_TIMEOUT", "service": "harbor-jobservice", "description": "Webhook client timeout seconds", "secret": false, "strategy": "default", "default": "3" }, { "key": "PORT", "service": "harbor-core", "description": "Core HTTP listening port", "secret": false, "strategy": "default", "default": "8080" }, { "key": "CORE_URL", "service": "harbor-core", "description": "Core address given to peers", "secret": false, "strategy": "default", "default": "http://harbor-core.railway.internal:8080" }, { "key": "CSRF_KEY", "service": "harbor-core", "description": "CSRF token key, exactly 32 characters", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "LOG_LEVEL", "service": "harbor-core", "description": "Core log verbosity", "secret": false, "strategy": "default", "default": "info" }, { "key": "READ_ONLY", "service": "harbor-core", "description": "Allow pushes", "secret": false, "strategy": "default", "default": "false" }, { "key": "PORTAL_URL", "service": "harbor-core", "description": "Web UI address", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RELOAD_KEY", "service": "harbor-core", "description": "Configuration reload key", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "WITH_TRIVY", "service": "harbor-core", "description": "Register Trivy as default scanner", "secret": false, "strategy": "default", "default": "true" }, { "key": "CONFIG_PATH", "service": "harbor-core", "description": "Beego application config location", "secret": false, "strategy": "default", "default": "/harbor/app.conf" }, { "key": "CORE_SECRET", "service": "harbor-core", "description": "Core to component authentication", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "PRIVATE_URL", "service": "harbor-core", "description": "Address peers dial", "secret": false, "strategy": "default", "default": "http://harbor-core.railway.internal:8080" }, { "key": "EXT_ENDPOINT", "service": "harbor-core", "description": "Public URL in token realm", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "REGISTRY_URL", "service": "harbor-core", "description": "Distribution registry address", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DATABASE_TYPE", "service": "harbor-core", "description": "Metadata backend type", "secret": false, "strategy": "default", "default": "postgresql" }, { "key": "CORE_LOCAL_URL", "service": "harbor-core", "description": "Core loopback address", "secret": false, "strategy": "default", "default": "http://localhost:8080" }, { "key": "JOBSERVICE_URL", "service": "harbor-core", "description": "Job service address", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "_REDIS_URL_REG", "service": "harbor-core", "description": "Registry layer cache", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "MAX_JOB_WORKERS", "service": "harbor-core", "description": "Concurrent job workers", "secret": false, "strategy": "default", "default": "10" }, { "key": "POSTGRESQL_HOST", "service": "harbor-core", "description": "Postgres private hostname", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRESQL_PORT", "service": "harbor-core", "description": "Postgres port", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "_REDIS_URL_CORE", "service": "harbor-core", "description": "Core cache and sessions", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "HARBOR_SECRET_KEY", "service": "harbor-core", "description": "Encrypts stored credentials, never change", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "JOBSERVICE_SECRET", "service": "harbor-core", "description": "Job service authentication", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "TOKEN_SERVICE_URL", "service": "harbor-core", "description": "Self-hosted token endpoint", "secret": true, "strategy": "default", "default": "http://localhost:8080/service/token" }, { "key": "TRIVY_ADAPTER_URL", "service": "harbor-core", "description": "Scanner adapter address", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRESQL_SSLMODE", "service": "harbor-core", "description": "Private network, no TLS needed", "secret": false, "strategy": "default", "default": "disable" }, { "key": "POSTGRESQL_DATABASE", "service": "harbor-core", "description": "Harbor metadata database", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRESQL_PASSWORD", "service": "harbor-core", "description": "Postgres password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRESQL_USERNAME", "service": "harbor-core", "description": "Postgres role", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REGISTRY_HTTP_SECRET", "service": "harbor-core", "description": "Signs registry upload state", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "HARBOR_ADMIN_PASSWORD", "service": "harbor-core", "description": "Initial admin password, change after login", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "harbor-core", "description": "Dockerfile for this service", "secret": false, "strategy": "default", "default": "core/Dockerfile" }, { "key": "REGISTRY_CONTROLLER_URL", "service": "harbor-core", "description": "Registry controller address", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRESQL_MAX_IDLE_CONNS", "service": "harbor-core", "description": "Idle connection pool size", "secret": false, "strategy": "default", "default": "50" }, { "key": "POSTGRESQL_MAX_OPEN_CONNS", "service": "harbor-core", "description": "Maximum open connections", "secret": false, "strategy": "default", "default": "100" }, { "key": "ROBOT_SCANNER_NAME_PREFIX", "service": "harbor-core", "description": "Prefix for scanner robot accounts", "secret": false, "strategy": "default", "default": "scanner" }, { "key": "POSTGRESQL_CONN_MAX_LIFETIME", "service": "harbor-core", "description": "Connection recycle interval", "secret": false, "strategy": "default", "default": "5m" }, { "key": "REGISTRY_CREDENTIAL_PASSWORD", "service": "harbor-core", "description": "Basic auth password for registry", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "REGISTRY_CREDENTIAL_USERNAME", "service": "harbor-core", "description": "Basic auth user for registry", "secret": false, "strategy": "default", "default": "harbor_registry_user" }, { "key": "POSTGRESQL_CONN_MAX_IDLE_TIME", "service": "harbor-core", "description": "Idle connection timeout", "secret": false, "strategy": "default", "default": "0s" }, { "key": "REPLICATION_ADAPTER_WHITELIST", "service": "harbor-core", "description": "Allowed replication targets", "secret": false, "strategy": "default", "default": "ali-acr,aws-ecr,azure-acr,docker-hub,docker-registry,github-ghcr,google-gcr,harbor,huawei-SWR,jfrog-artifactory,tencent-tcr,volcengine-cr" }, { "key": "REGISTRY_STORAGE_PROVIDER_NAME", "service": "harbor-core", "description": "Storage driver in use", "secret": false, "strategy": "default", "default": "s3" }, { "key": "PERMITTED_REGISTRY_TYPES_FOR_PROXY_CACHE", "service": "harbor-core", "description": "Allowed proxy cache upstreams", "secret": false, "strategy": "default", "default": "docker-hub,harbor,azure-acr,ali-acr,aws-ecr,google-gcr,docker-registry,github-ghcr,jfrog-artifactory" }, { "key": "PGDATA", "service": "Postgres", "description": "Cluster location on the volume", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "PGHOST", "service": "Postgres", "description": "Data panel alias, not read by the server", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGPORT", "service": "Postgres", "description": "Data panel alias, not read by the server", "secret": false, "strategy": "default", "default": "5432" }, { "key": "PGUSER", "service": "Postgres", "description": "Data panel alias, not read by the server", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGDATABASE", "service": "Postgres", "description": "Data panel alias, not read by the server", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGPASSWORD", "service": "Postgres", "description": "Data panel alias, not read by the server", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_DB", "service": "Postgres", "description": "Database created on first boot", "secret": false, "strategy": "default", "default": "railway" }, { "key": "DATABASE_URL", "service": "Postgres", "description": "Private connection string", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_USER", "service": "Postgres", "description": "Superuser created on first boot", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "SSL_CERT_DAYS", "service": "Postgres", "description": "SSL certificate expiry in days", "secret": false, "strategy": "default", "default": "820" }, { "key": "POSTGRES_PASSWORD", "service": "Postgres", "description": "Superuser password", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "Postgres", "description": "Clean shutdown window", "secret": false, "strategy": "default", "default": "60" }, { "key": "PORT", "service": "harbor-registry", "description": "Debug listener probed for health", "secret": false, "strategy": "default", "default": "5001" }, { "key": "REDIS_DB", "service": "harbor-registry", "description": "Redis database for layer cache", "secret": false, "strategy": "default", "default": "1" }, { "key": "LOG_LEVEL", "service": "harbor-registry", "description": "Registry log verbosity", "secret": false, "strategy": "default", "default": "info" }, { "key": "S3_BUCKET", "service": "harbor-registry", "description": "Bucket holding image layers", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_REGION", "service": "harbor-registry", "description": "Bucket region", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_HOST", "service": "harbor-registry", "description": "Redis private hostname", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_PORT", "service": "harbor-registry", "description": "Redis port", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PRIVATE_URL", "service": "harbor-registry", "description": "Address peers dial", "secret": false, "strategy": "default", "default": "http://harbor-registry.railway.internal:5000" }, { "key": "S3_ENDPOINT", "service": "harbor-registry", "description": "S3-compatible endpoint", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_ACCESS_KEY", "service": "harbor-registry", "description": "Bucket access key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_SECRET_KEY", "service": "harbor-registry", "description": "Bucket secret key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_PASSWORD", "service": "harbor-registry", "description": "Redis password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_USERNAME", "service": "harbor-registry", "description": "Redis username", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REGISTRY_PASSWORD", "service": "harbor-registry", "description": "Basic auth password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REGISTRY_USERNAME", "service": "harbor-registry", "description": "Basic auth user", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REGISTRY_HTTP_SECRET", "service": "harbor-registry", "description": "Signs upload state", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "harbor-registry", "description": "Dockerfile for this service", "secret": false, "strategy": "default", "default": "registry/Dockerfile" }, { "key": "PORT", "service": "harbor-portal", "description": "Nginx listening port", "secret": false, "strategy": "default", "default": "8080" }, { "key": "PRIVATE_URL", "service": "harbor-portal", "description": "Address the edge dials", "secret": false, "strategy": "default", "default": "http://harbor-portal.railway.internal:8080" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "harbor-portal", "description": "Dockerfile for this service", "secret": false, "strategy": "default", "default": "portal/Dockerfile" }, { "key": "PORT", "service": "harbor-registryctl", "description": "Controller HTTP port", "secret": false, "strategy": "default", "default": "8080" }, { "key": "REDIS_DB", "service": "harbor-registryctl", "description": "Redis database for layer cache", "secret": false, "strategy": "default", "default": "1" }, { "key": "LOG_LEVEL", "service": "harbor-registryctl", "description": "Controller log verbosity", "secret": false, "strategy": "default", "default": "info" }, { "key": "S3_BUCKET", "service": "harbor-registryctl", "description": "Bucket holding image layers", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_REGION", "service": "harbor-registryctl", "description": "Bucket region", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_HOST", "service": "harbor-registryctl", "description": "Redis private hostname", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_PORT", "service": "harbor-registryctl", "description": "Redis port", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CORE_SECRET", "service": "harbor-registryctl", "description": "Core authentication secret", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PRIVATE_URL", "service": "harbor-registryctl", "description": "Address peers dial", "secret": false, "strategy": "default", "default": "http://harbor-registryctl.railway.internal:8080" }, { "key": "S3_ENDPOINT", "service": "harbor-registryctl", "description": "S3-compatible endpoint", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_ACCESS_KEY", "service": "harbor-registryctl", "description": "Bucket access key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_SECRET_KEY", "service": "harbor-registryctl", "description": "Bucket secret key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_PASSWORD", "service": "harbor-registryctl", "description": "Redis password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_USERNAME", "service": "harbor-registryctl", "description": "Redis username", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "JOBSERVICE_SECRET", "service": "harbor-registryctl", "description": "Job service authentication secret", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REGISTRY_HTTP_SECRET", "service": "harbor-registryctl", "description": "Signs upload state", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "harbor-registryctl", "description": "Dockerfile for this service", "secret": false, "strategy": "default", "default": "registryctl/Dockerfile" }, { "key": "PORT", "service": "harbor-trivy", "description": "Scanner adapter HTTP port", "secret": false, "strategy": "default", "default": "8080" }, { "key": "PRIVATE_URL", "service": "harbor-trivy", "description": "Address peers dial", "secret": false, "strategy": "default", "default": "http://harbor-trivy.railway.internal:8080" }, { "key": "RAILWAY_RUN_UID", "service": "harbor-trivy", "description": "Starts as root to prepare the cache volume", "secret": false, "strategy": "default", "default": "0" }, { "key": "SCANNER_LOG_LEVEL", "service": "harbor-trivy", "description": "Scanner log verbosity", "secret": false, "strategy": "default", "default": "info" }, { "key": "SCANNER_REDIS_URL", "service": "harbor-trivy", "description": "Scanner Redis connection", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SCANNER_TRIVY_TIMEOUT", "service": "harbor-trivy", "description": "Per-scan timeout", "secret": false, "strategy": "default", "default": "5m0s" }, { "key": "SCANNER_TRIVY_INSECURE", "service": "harbor-trivy", "description": "Verify TLS to the registry", "secret": false, "strategy": "default", "default": "false" }, { "key": "SCANNER_TRIVY_SEVERITY", "service": "harbor-trivy", "description": "Severities reported", "secret": false, "strategy": "default", "default": "UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "harbor-trivy", "description": "Dockerfile for this service", "secret": false, "strategy": "default", "default": "trivy/Dockerfile" }, { "key": "SCANNER_STORE_REDIS_URL", "service": "harbor-trivy", "description": "Scan report store", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SCANNER_TRIVY_CACHE_DIR", "service": "harbor-trivy", "description": "Vulnerability database location", "secret": false, "strategy": "default", "default": "/home/scanner/.cache/trivy" }, { "key": "SCANNER_TRIVY_VULN_TYPE", "service": "harbor-trivy", "description": "Scan OS and language packages", "secret": false, "strategy": "default", "default": "os,library" }, { "key": "SCANNER_TRIVY_REPORTS_DIR", "service": "harbor-trivy", "description": "Scan report working directory", "secret": false, "strategy": "default", "default": "/home/scanner/.cache/reports" }, { "key": "SCANNER_TRIVY_SKIP_UPDATE", "service": "harbor-trivy", "description": "Keep the vulnerability database current", "secret": false, "strategy": "default", "default": "false" }, { "key": "SCANNER_TRIVY_OFFLINE_SCAN", "service": "harbor-trivy", "description": "Allow dependency lookups during scans", "secret": false, "strategy": "default", "default": "false" }, { "key": "SCANNER_JOB_QUEUE_REDIS_URL", "service": "harbor-trivy", "description": "Scan job queue", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SCANNER_TRIVY_DB_REPOSITORY", "service": "harbor-trivy", "description": "Vulnerability database source", "secret": false, "strategy": "default", "default": "ghcr.io/aquasecurity/trivy-db" }, { "key": "SCANNER_TRIVY_IGNORE_UNFIXED", "service": "harbor-trivy", "description": "Include vulnerabilities without fixes", "secret": false, "strategy": "default", "default": "false" }, { "key": "SCANNER_STORE_REDIS_NAMESPACE", "service": "harbor-trivy", "description": "Report store key prefix", "secret": false, "strategy": "default", "default": "harbor.scanner.trivy:store" }, { "key": "SCANNER_TRIVY_SECURITY_CHECKS", "service": "harbor-trivy", "description": "Run vulnerability checks", "secret": false, "strategy": "default", "default": "vuln" }, { "key": "SCANNER_TRIVY_JAVA_DB_REPOSITORY", "service": "harbor-trivy", "description": "Java database source", "secret": false, "strategy": "default", "default": "ghcr.io/aquasecurity/trivy-java-db" }, { "key": "SCANNER_JOB_QUEUE_REDIS_NAMESPACE", "service": "harbor-trivy", "description": "Job queue key prefix", "secret": false, "strategy": "default", "default": "harbor.scanner.trivy:job-queue" }, { "key": "SCANNER_TRIVY_SKIP_JAVA_DB_UPDATE", "service": "harbor-trivy", "description": "Keep the Java database current", "secret": false, "strategy": "default", "default": "false" }, { "key": "PORT", "service": "harbor-proxy", "description": "Caddy listening port", "secret": false, "strategy": "default", "default": "8080" }, { "key": "CORE_URL", "service": "harbor-proxy", "description": "Upstream for API and registry paths", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PORTAL_URL", "service": "harbor-proxy", "description": "Upstream for the web UI", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "harbor-proxy", "description": "Dockerfile for this service", "secret": false, "strategy": "default", "default": "proxy/Dockerfile" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "harbor" } }, "cli": "railway deploy --template harbor", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "b718f825-6e02-4f85-b1bf-85173dbefb73", "serializedConfig": { "buckets": { "4870b97b-304a-47f4-ac79-603ef6e9f8a2": { "name": "harbor-registry-storage" } }, "services": { "19610ac2-79df-4480-88ee-66d993778699": { "icon": "https://cdn.sanity.io/images/sy1jschh/production/0ce0bfdcfbdbf69662b1116671f97c2dd788b655-157x157.svg", "name": "Redis", "deploy": { "startCommand": "/bin/sh -c \"rm -rf $RAILWAY_VOLUME_MOUNT_PATH/lost+found/ && exec docker-entrypoint.sh redis-server --requirepass $REDIS_PASSWORD --save 60 1 --dir $RAILWAY_VOLUME_MOUNT_PATH\"", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "redis:8.2" }, "variables": { "REDISHOST": { "isOptional": false, "description": "Data panel alias, not read by the server", "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "REDISPORT": { "isOptional": false, "description": "Data panel alias, not read by the server", "defaultValue": "6379" }, "REDISUSER": { "isOptional": false, "description": "Data panel alias, not read by the server", "defaultValue": "default" }, "REDIS_URL": { "isOptional": false, "description": "Private connection string", "defaultValue": "redis://${{REDISUSER}}:${{REDIS_PASSWORD}}@${{REDISHOST}}:${{REDISPORT}}" }, "REDISPASSWORD": { "isOptional": false, "description": "Data panel alias, not read by the server", "defaultValue": "${{REDIS_PASSWORD}}" }, "REDIS_PASSWORD": { "isOptional": false, "description": "Auth password, read by the server", "defaultValue": "{{REDIS_PASSWORD}}" } }, "volumeMounts": { "19610ac2-79df-4480-88ee-66d993778699": { "mountPath": "/data" } } }, "1d7ed37e-d404-4029-a43c-22b7b17e5666": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/harbor.svg", "name": "harbor-jobservice", "deploy": { "startCommand": null, "healthcheckPath": "/api/v1/stats", "restartPolicyType": "ALWAYS", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/gridalpha/harbor-railway", "rootDirectory": null }, "variables": { "PORT": { "isOptional": false, "description": "Job service HTTP port", "defaultValue": "8080" }, "CORE_URL": { "isOptional": false, "description": "Core API address", "defaultValue": "${{harbor-core.PRIVATE_URL}}" }, "LOG_LEVEL": { "isOptional": false, "description": "Job service log verbosity", "defaultValue": "info" }, "CORE_SECRET": { "isOptional": false, "description": "Core authentication secret", "defaultValue": "${{harbor-core.CORE_SECRET}}" }, "PRIVATE_URL": { "isOptional": false, "description": "Address peers dial", "defaultValue": "http://harbor-jobservice.railway.internal:8080" }, "REGISTRY_URL": { "isOptional": false, "description": "Distribution registry address", "defaultValue": "${{harbor-registry.PRIVATE_URL}}" }, "MAX_JOB_WORKERS": { "isOptional": false, "description": "Concurrent job workers", "defaultValue": "10" }, "JOBSERVICE_SECRET": { "isOptional": false, "description": "Job service authentication secret", "defaultValue": "${{harbor-core.JOBSERVICE_SECRET}}" }, "JOBSERVICE_REDIS_URL": { "isOptional": false, "description": "Job queue backend", "defaultValue": "redis://${{Redis.REDISUSER}}:${{Redis.REDISPASSWORD}}@${{Redis.REDISHOST}}:${{Redis.REDISPORT}}/2" }, "RAILWAY_DOCKERFILE_PATH": { "isOptional": false, "description": "Dockerfile for this service", "defaultValue": "jobservice/Dockerfile" }, "REGISTRY_CONTROLLER_URL": { "isOptional": false, "description": "Registry controller address", "defaultValue": "${{harbor-registryctl.PRIVATE_URL}}" }, "REGISTRY_CREDENTIAL_PASSWORD": { "isOptional": false, "description": "Registry basic auth password", "defaultValue": "${{harbor-core.REGISTRY_CREDENTIAL_PASSWORD}}" }, "REGISTRY_CREDENTIAL_USERNAME": { "isOptional": false, "description": "Registry basic auth user", "defaultValue": "${{harbor-core.REGISTRY_CREDENTIAL_USERNAME}}" }, "JOBSERVICE_WEBHOOK_JOB_MAX_RETRY": { "isOptional": false, "description": "Webhook delivery retries", "defaultValue": "3" }, "JOBSERVICE_WEBHOOK_JOB_HTTP_CLIENT_TIMEOUT": { "isOptional": false, "description": "Webhook client timeout seconds", "defaultValue": "3" } } }, "516bf44f-55e9-4baf-8008-a06f46b5c295": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/harbor.svg", "name": "harbor-core", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ALWAYS", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/gridalpha/harbor-railway", "rootDirectory": null }, "variables": { "PORT": { "isOptional": false, "description": "Core HTTP listening port", "defaultValue": "8080" }, "CORE_URL": { "isOptional": false, "description": "Core address given to peers", "defaultValue": "http://harbor-core.railway.internal:8080" }, "CSRF_KEY": { "isOptional": false, "description": "CSRF token key, exactly 32 characters", "defaultValue": "{{CSRF_KEY}}" }, "LOG_LEVEL": { "isOptional": false, "description": "Core log verbosity", "defaultValue": "info" }, "READ_ONLY": { "isOptional": false, "description": "Allow pushes", "defaultValue": "false" }, "PORTAL_URL": { "isOptional": false, "description": "Web UI address", "defaultValue": "${{harbor-portal.PRIVATE_URL}}" }, "RELOAD_KEY": { "isOptional": false, "description": "Configuration reload key", "defaultValue": "{{RELOAD_KEY}}" }, "WITH_TRIVY": { "isOptional": false, "description": "Register Trivy as default scanner", "defaultValue": "true" }, "CONFIG_PATH": { "isOptional": false, "description": "Beego application config location", "defaultValue": "/harbor/app.conf" }, "CORE_SECRET": { "isOptional": false, "description": "Core to component authentication", "defaultValue": "{{CORE_SECRET}}" }, "PRIVATE_URL": { "isOptional": false, "description": "Address peers dial", "defaultValue": "http://harbor-core.railway.internal:8080" }, "EXT_ENDPOINT": { "isOptional": false, "description": "Public URL in token realm", "defaultValue": "https://${{harbor-proxy.RAILWAY_PUBLIC_DOMAIN}}" }, "REGISTRY_URL": { "isOptional": false, "description": "Distribution registry address", "defaultValue": "${{harbor-registry.PRIVATE_URL}}" }, "DATABASE_TYPE": { "isOptional": false, "description": "Metadata backend type", "defaultValue": "postgresql" }, "CORE_LOCAL_URL": { "isOptional": false, "description": "Core loopback address", "defaultValue": "http://localhost:8080" }, "JOBSERVICE_URL": { "isOptional": false, "description": "Job service address", "defaultValue": "${{harbor-jobservice.PRIVATE_URL}}" }, "_REDIS_URL_REG": { "isOptional": false, "description": "Registry layer cache", "defaultValue": "redis://${{Redis.REDISUSER}}:${{Redis.REDISPASSWORD}}@${{Redis.REDISHOST}}:${{Redis.REDISPORT}}/1" }, "MAX_JOB_WORKERS": { "isOptional": false, "description": "Concurrent job workers", "defaultValue": "10" }, "POSTGRESQL_HOST": { "isOptional": false, "description": "Postgres private hostname", "defaultValue": "${{Postgres.PGHOST}}" }, "POSTGRESQL_PORT": { "isOptional": false, "description": "Postgres port", "defaultValue": "${{Postgres.PGPORT}}" }, "_REDIS_URL_CORE": { "isOptional": false, "description": "Core cache and sessions", "defaultValue": "redis://${{Redis.REDISUSER}}:${{Redis.REDISPASSWORD}}@${{Redis.REDISHOST}}:${{Redis.REDISPORT}}/0" }, "HARBOR_SECRET_KEY": { "isOptional": false, "description": "Encrypts stored credentials, never change", "defaultValue": "{{HARBOR_SECRET_KEY}}" }, "JOBSERVICE_SECRET": { "isOptional": false, "description": "Job service authentication", "defaultValue": "{{JOBSERVICE_SECRET}}" }, "TOKEN_SERVICE_URL": { "isOptional": false, "description": "Self-hosted token endpoint", "defaultValue": "http://localhost:8080/service/token" }, "TRIVY_ADAPTER_URL": { "isOptional": false, "description": "Scanner adapter address", "defaultValue": "${{harbor-trivy.PRIVATE_URL}}" }, "POSTGRESQL_SSLMODE": { "isOptional": false, "description": "Private network, no TLS needed", "defaultValue": "disable" }, "POSTGRESQL_DATABASE": { "isOptional": false, "description": "Harbor metadata database", "defaultValue": "${{Postgres.PGDATABASE}}" }, "POSTGRESQL_PASSWORD": { "isOptional": false, "description": "Postgres password", "defaultValue": "${{Postgres.PGPASSWORD}}" }, "POSTGRESQL_USERNAME": { "isOptional": false, "description": "Postgres role", "defaultValue": "${{Postgres.PGUSER}}" }, "REGISTRY_HTTP_SECRET": { "isOptional": false, "description": "Signs registry upload state", "defaultValue": "{{REGISTRY_HTTP_SECRET}}" }, "HARBOR_ADMIN_PASSWORD": { "isOptional": false, "description": "Initial admin password, change after login", "defaultValue": "{{HARBOR_ADMIN_PASSWORD}}" }, "RAILWAY_DOCKERFILE_PATH": { "isOptional": false, "description": "Dockerfile for this service", "defaultValue": "core/Dockerfile" }, "REGISTRY_CONTROLLER_URL": { "isOptional": false, "description": "Registry controller address", "defaultValue": "${{harbor-registryctl.PRIVATE_URL}}" }, "POSTGRESQL_MAX_IDLE_CONNS": { "isOptional": false, "description": "Idle connection pool size", "defaultValue": "50" }, "POSTGRESQL_MAX_OPEN_CONNS": { "isOptional": false, "description": "Maximum open connections", "defaultValue": "100" }, "ROBOT_SCANNER_NAME_PREFIX": { "isOptional": false, "description": "Prefix for scanner robot accounts", "defaultValue": "scanner" }, "POSTGRESQL_CONN_MAX_LIFETIME": { "isOptional": false, "description": "Connection recycle interval", "defaultValue": "5m" }, "REGISTRY_CREDENTIAL_PASSWORD": { "isOptional": false, "description": "Basic auth password for registry", "defaultValue": "{{REGISTRY_CREDENTIAL_PASSWORD}}" }, "REGISTRY_CREDENTIAL_USERNAME": { "isOptional": false, "description": "Basic auth user for registry", "defaultValue": "harbor_registry_user" }, "POSTGRESQL_CONN_MAX_IDLE_TIME": { "isOptional": false, "description": "Idle connection timeout", "defaultValue": "0s" }, "REPLICATION_ADAPTER_WHITELIST": { "isOptional": false, "description": "Allowed replication targets", "defaultValue": "ali-acr,aws-ecr,azure-acr,docker-hub,docker-registry,github-ghcr,google-gcr,harbor,huawei-SWR,jfrog-artifactory,tencent-tcr,volcengine-cr" }, "REGISTRY_STORAGE_PROVIDER_NAME": { "isOptional": false, "description": "Storage driver in use", "defaultValue": "s3" }, "PERMITTED_REGISTRY_TYPES_FOR_PROXY_CACHE": { "isOptional": false, "description": "Allowed proxy cache upstreams", "defaultValue": "docker-hub,harbor,azure-acr,ali-acr,aws-ecr,google-gcr,docker-registry,github-ghcr,jfrog-artifactory" } } }, "7215242b-453e-4e2d-8fb1-e75b9feb633b": { "icon": "https://devicons.railway.app/i/postgresql.svg", "name": "Postgres", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:18" }, "variables": { "PGDATA": { "isOptional": false, "description": "Cluster location on the volume", "defaultValue": "/var/lib/postgresql/data/pgdata" }, "PGHOST": { "isOptional": false, "description": "Data panel alias, not read by the server", "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "PGPORT": { "isOptional": false, "description": "Data panel alias, not read by the server", "defaultValue": "5432" }, "PGUSER": { "isOptional": false, "description": "Data panel alias, not read by the server", "defaultValue": "${{POSTGRES_USER}}" }, "PGDATABASE": { "isOptional": false, "description": "Data panel alias, not read by the server", "defaultValue": "${{POSTGRES_DB}}" }, "PGPASSWORD": { "isOptional": false, "description": "Data panel alias, not read by the server", "defaultValue": "${{POSTGRES_PASSWORD}}" }, "POSTGRES_DB": { "isOptional": false, "description": "Database created on first boot", "defaultValue": "railway" }, "DATABASE_URL": { "isOptional": false, "description": "Private connection string", "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{PGDATABASE}}" }, "POSTGRES_USER": { "isOptional": false, "description": "Superuser created on first boot", "defaultValue": "postgres" }, "SSL_CERT_DAYS": { "isOptional": false, "description": "SSL certificate expiry in days", "defaultValue": "820" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Superuser password", "defaultValue": "{{POSTGRES_PASSWORD}}" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": false, "description": "Clean shutdown window", "defaultValue": "60" } }, "volumeMounts": { "7215242b-453e-4e2d-8fb1-e75b9feb633b": { "mountPath": "/var/lib/postgresql/data" } } }, "7306a037-ad53-4197-8573-7dee6064bb2b": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/harbor.svg", "name": "harbor-registry", "deploy": { "startCommand": null, "healthcheckPath": "/debug/health", "restartPolicyType": "ALWAYS", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/gridalpha/harbor-railway", "rootDirectory": null }, "variables": { "PORT": { "isOptional": false, "description": "Debug listener probed for health", "defaultValue": "5001" }, "REDIS_DB": { "isOptional": false, "description": "Redis database for layer cache", "defaultValue": "1" }, "LOG_LEVEL": { "isOptional": false, "description": "Registry log verbosity", "defaultValue": "info" }, "S3_BUCKET": { "isOptional": false, "description": "Bucket holding image layers", "defaultValue": "${{harbor-registry-storage.BUCKET}}" }, "S3_REGION": { "isOptional": false, "description": "Bucket region", "defaultValue": "${{harbor-registry-storage.REGION}}" }, "REDIS_HOST": { "isOptional": false, "description": "Redis private hostname", "defaultValue": "${{Redis.REDISHOST}}" }, "REDIS_PORT": { "isOptional": false, "description": "Redis port", "defaultValue": "${{Redis.REDISPORT}}" }, "PRIVATE_URL": { "isOptional": false, "description": "Address peers dial", "defaultValue": "http://harbor-registry.railway.internal:5000" }, "S3_ENDPOINT": { "isOptional": false, "description": "S3-compatible endpoint", "defaultValue": "${{harbor-registry-storage.ENDPOINT}}" }, "S3_ACCESS_KEY": { "isOptional": false, "description": "Bucket access key", "defaultValue": "${{harbor-registry-storage.ACCESS_KEY_ID}}" }, "S3_SECRET_KEY": { "isOptional": false, "description": "Bucket secret key", "defaultValue": "${{harbor-registry-storage.SECRET_ACCESS_KEY}}" }, "REDIS_PASSWORD": { "isOptional": false, "description": "Redis password", "defaultValue": "${{Redis.REDISPASSWORD}}" }, "REDIS_USERNAME": { "isOptional": false, "description": "Redis username", "defaultValue": "${{Redis.REDISUSER}}" }, "REGISTRY_PASSWORD": { "isOptional": false, "description": "Basic auth password", "defaultValue": "${{harbor-core.REGISTRY_CREDENTIAL_PASSWORD}}" }, "REGISTRY_USERNAME": { "isOptional": false, "description": "Basic auth user", "defaultValue": "${{harbor-core.REGISTRY_CREDENTIAL_USERNAME}}" }, "REGISTRY_HTTP_SECRET": { "isOptional": false, "description": "Signs upload state", "defaultValue": "${{harbor-core.REGISTRY_HTTP_SECRET}}" }, "RAILWAY_DOCKERFILE_PATH": { "isOptional": false, "description": "Dockerfile for this service", "defaultValue": "registry/Dockerfile" } } }, "948404ac-85ec-4ce8-8d5a-b77111ad9926": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/harbor.svg", "name": "harbor-portal", "deploy": { "startCommand": null, "healthcheckPath": "/", "restartPolicyType": "ALWAYS", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/gridalpha/harbor-railway", "rootDirectory": null }, "variables": { "PORT": { "isOptional": false, "description": "Nginx listening port", "defaultValue": "8080" }, "PRIVATE_URL": { "isOptional": false, "description": "Address the edge dials", "defaultValue": "http://harbor-portal.railway.internal:8080" }, "RAILWAY_DOCKERFILE_PATH": { "isOptional": false, "description": "Dockerfile for this service", "defaultValue": "portal/Dockerfile" } } }, "acdfe3b4-aa75-4637-8d68-2223a112b218": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/harbor.svg", "name": "harbor-registryctl", "deploy": { "startCommand": null, "healthcheckPath": "/api/health", "restartPolicyType": "ALWAYS", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/gridalpha/harbor-railway", "rootDirectory": null }, "variables": { "PORT": { "isOptional": false, "description": "Controller HTTP port", "defaultValue": "8080" }, "REDIS_DB": { "isOptional": false, "description": "Redis database for layer cache", "defaultValue": "1" }, "LOG_LEVEL": { "isOptional": false, "description": "Controller log verbosity", "defaultValue": "info" }, "S3_BUCKET": { "isOptional": false, "description": "Bucket holding image layers", "defaultValue": "${{harbor-registry-storage.BUCKET}}" }, "S3_REGION": { "isOptional": false, "description": "Bucket region", "defaultValue": "${{harbor-registry-storage.REGION}}" }, "REDIS_HOST": { "isOptional": false, "description": "Redis private hostname", "defaultValue": "${{Redis.REDISHOST}}" }, "REDIS_PORT": { "isOptional": false, "description": "Redis port", "defaultValue": "${{Redis.REDISPORT}}" }, "CORE_SECRET": { "isOptional": false, "description": "Core authentication secret", "defaultValue": "${{harbor-core.CORE_SECRET}}" }, "PRIVATE_URL": { "isOptional": false, "description": "Address peers dial", "defaultValue": "http://harbor-registryctl.railway.internal:8080" }, "S3_ENDPOINT": { "isOptional": false, "description": "S3-compatible endpoint", "defaultValue": "${{harbor-registry-storage.ENDPOINT}}" }, "S3_ACCESS_KEY": { "isOptional": false, "description": "Bucket access key", "defaultValue": "${{harbor-registry-storage.ACCESS_KEY_ID}}" }, "S3_SECRET_KEY": { "isOptional": false, "description": "Bucket secret key", "defaultValue": "${{harbor-registry-storage.SECRET_ACCESS_KEY}}" }, "REDIS_PASSWORD": { "isOptional": false, "description": "Redis password", "defaultValue": "${{Redis.REDISPASSWORD}}" }, "REDIS_USERNAME": { "isOptional": false, "description": "Redis username", "defaultValue": "${{Redis.REDISUSER}}" }, "JOBSERVICE_SECRET": { "isOptional": false, "description": "Job service authentication secret", "defaultValue": "${{harbor-core.JOBSERVICE_SECRET}}" }, "REGISTRY_HTTP_SECRET": { "isOptional": false, "description": "Signs upload state", "defaultValue": "${{harbor-core.REGISTRY_HTTP_SECRET}}" }, "RAILWAY_DOCKERFILE_PATH": { "isOptional": false, "description": "Dockerfile for this service", "defaultValue": "registryctl/Dockerfile" } } }, "ba9fd31a-a04c-4bf4-bcc6-14e835c567be": { "icon": "https://cdn.simpleicons.org/trivy/FFFFFF.svg", "name": "harbor-trivy", "deploy": { "startCommand": null, "healthcheckPath": "/probe/healthy", "restartPolicyType": "ALWAYS", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/gridalpha/harbor-railway", "rootDirectory": null }, "variables": { "PORT": { "isOptional": false, "description": "Scanner adapter HTTP port", "defaultValue": "8080" }, "PRIVATE_URL": { "isOptional": false, "description": "Address peers dial", "defaultValue": "http://harbor-trivy.railway.internal:8080" }, "RAILWAY_RUN_UID": { "isOptional": false, "description": "Starts as root to prepare the cache volume", "defaultValue": "0" }, "SCANNER_LOG_LEVEL": { "isOptional": false, "description": "Scanner log verbosity", "defaultValue": "info" }, "SCANNER_REDIS_URL": { "isOptional": false, "description": "Scanner Redis connection", "defaultValue": "redis://${{Redis.REDISUSER}}:${{Redis.REDISPASSWORD}}@${{Redis.REDISHOST}}:${{Redis.REDISPORT}}/5" }, "SCANNER_TRIVY_TIMEOUT": { "isOptional": false, "description": "Per-scan timeout", "defaultValue": "5m0s" }, "SCANNER_TRIVY_INSECURE": { "isOptional": false, "description": "Verify TLS to the registry", "defaultValue": "false" }, "SCANNER_TRIVY_SEVERITY": { "isOptional": false, "description": "Severities reported", "defaultValue": "UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL" }, "RAILWAY_DOCKERFILE_PATH": { "isOptional": false, "description": "Dockerfile for this service", "defaultValue": "trivy/Dockerfile" }, "SCANNER_STORE_REDIS_URL": { "isOptional": false, "description": "Scan report store", "defaultValue": "redis://${{Redis.REDISUSER}}:${{Redis.REDISPASSWORD}}@${{Redis.REDISHOST}}:${{Redis.REDISPORT}}/5" }, "SCANNER_TRIVY_CACHE_DIR": { "isOptional": false, "description": "Vulnerability database location", "defaultValue": "/home/scanner/.cache/trivy" }, "SCANNER_TRIVY_VULN_TYPE": { "isOptional": false, "description": "Scan OS and language packages", "defaultValue": "os,library" }, "SCANNER_TRIVY_REPORTS_DIR": { "isOptional": false, "description": "Scan report working directory", "defaultValue": "/home/scanner/.cache/reports" }, "SCANNER_TRIVY_SKIP_UPDATE": { "isOptional": false, "description": "Keep the vulnerability database current", "defaultValue": "false" }, "SCANNER_TRIVY_OFFLINE_SCAN": { "isOptional": false, "description": "Allow dependency lookups during scans", "defaultValue": "false" }, "SCANNER_JOB_QUEUE_REDIS_URL": { "isOptional": false, "description": "Scan job queue", "defaultValue": "redis://${{Redis.REDISUSER}}:${{Redis.REDISPASSWORD}}@${{Redis.REDISHOST}}:${{Redis.REDISPORT}}/5" }, "SCANNER_TRIVY_DB_REPOSITORY": { "isOptional": false, "description": "Vulnerability database source", "defaultValue": "ghcr.io/aquasecurity/trivy-db" }, "SCANNER_TRIVY_IGNORE_UNFIXED": { "isOptional": false, "description": "Include vulnerabilities without fixes", "defaultValue": "false" }, "SCANNER_STORE_REDIS_NAMESPACE": { "isOptional": false, "description": "Report store key prefix", "defaultValue": "harbor.scanner.trivy:store" }, "SCANNER_TRIVY_SECURITY_CHECKS": { "isOptional": false, "description": "Run vulnerability checks", "defaultValue": "vuln" }, "SCANNER_TRIVY_JAVA_DB_REPOSITORY": { "isOptional": false, "description": "Java database source", "defaultValue": "ghcr.io/aquasecurity/trivy-java-db" }, "SCANNER_JOB_QUEUE_REDIS_NAMESPACE": { "isOptional": false, "description": "Job queue key prefix", "defaultValue": "harbor.scanner.trivy:job-queue" }, "SCANNER_TRIVY_SKIP_JAVA_DB_UPDATE": { "isOptional": false, "description": "Keep the Java database current", "defaultValue": "false" } }, "volumeMounts": { "ba9fd31a-a04c-4bf4-bcc6-14e835c567be": { "mountPath": "/home/scanner/.cache" } } }, "e791a8af-d7d0-44dc-a067-527a304abaaa": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/harbor.svg", "name": "harbor-proxy", "deploy": { "startCommand": null, "healthcheckPath": "/healthz", "restartPolicyType": "ALWAYS", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/gridalpha/harbor-railway", "rootDirectory": null }, "variables": { "PORT": { "isOptional": false, "description": "Caddy listening port", "defaultValue": "8080" }, "CORE_URL": { "isOptional": false, "description": "Upstream for API and registry paths", "defaultValue": "${{harbor-core.PRIVATE_URL}}" }, "PORTAL_URL": { "isOptional": false, "description": "Upstream for the web UI", "defaultValue": "${{harbor-portal.PRIVATE_URL}}" }, "RAILWAY_DOCKERFILE_PATH": { "isOptional": false, "description": "Dockerfile for this service", "defaultValue": "proxy/Dockerfile" } }, "networking": { "serviceDomains": { ":8080": { "port": 8080 } } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "harbor-proxy", "method": "GET", "path": "/healthz", "expect_status": 200 } }, "resources": { "expected_services": 9, "needs_volume": true }, "generated_at": "2026-09-22T22:14:50.114Z", "generator_version": "0.1.0", "status": "degraded", "validated_at": "2026-09-21T19:43:16.129Z", "success_rate_30d": 0.1429, "validation": { "last_run_id": "run_fbb42b588eec4084b8b2", "checks": [ { "name": "workflow_completed", "passed": false, "detail": "Your workspace has been restricted. Please contact support to resolve this." } ], "typical_ready_seconds": 228 } }