{
  "manifest_version": "1.0.0",
  "template": {
    "id": "6132b38e-22c5-46f6-aa32-eb769b9f5064",
    "slug": "hermes-agent-v021-always-on-telegram-dis",
    "name": "Hermes Agent v0.21 Always-On (Telegram, Discord, Slack)",
    "description": "Self-improving AI agent running 24/7 with persistent memory and a browser.",
    "url": "https://railway.com/deploy/hermes-agent-v021-always-on-telegram-dis",
    "upstream": {
      "repo_url": "https://github.com/baranberkay96/hermes-agent-railway"
    }
  },
  "services": [
    {
      "name": "Hermes",
      "source": {
        "repo": "https://github.com/baranberkay96/hermes-agent-railway"
      },
      "needs_volume": true,
      "volume_mount_path": "/opt/data",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "Hermes",
      "description": "Port Railway's healthcheck and public domain use; must match HERMES_DASHBOARD_PORT.",
      "secret": false,
      "strategy": "default",
      "default": "9119"
    },
    {
      "key": "HERMES_DASHBOARD",
      "service": "Hermes",
      "description": "Runs the official Hermes web dashboard next to the gateway (s6-supervised, port 9119).",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "AGENT_BROWSER_ARGS",
      "service": "Hermes",
      "description": "Container-safe launch flags for the bundled headless Chromium (no user-namespace sandbox, no reliance on a large /dev/shm). Setting this replaces Hermes' auto-detected flags.",
      "secret": false,
      "strategy": "default",
      "default": "--no-sandbox,--disable-dev-shm-usage"
    },
    {
      "key": "OPENROUTER_API_KEY",
      "service": "Hermes",
      "description": "REQUIRED. OpenRouter API key (openrouter.ai/keys): one key for Claude, GPT, Gemini, Hermes and hundreds of other models.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "HERMES_DASHBOARD_HOST",
      "service": "Hermes",
      "description": "Dashboard bind address. A non-loopback bind always enforces the dashboard login.",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0"
    },
    {
      "key": "HERMES_DASHBOARD_PORT",
      "service": "Hermes",
      "description": "Dashboard port; the public domain targets it.",
      "secret": false,
      "strategy": "default",
      "default": "9119"
    },
    {
      "key": "HERMES_DASHBOARD_PUBLIC_URL",
      "service": "Hermes",
      "description": "Public URL of the dashboard (Host/Origin allow-list and OAuth callbacks). Update it when you add a custom domain.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "HERMES_DASHBOARD_BASIC_AUTH_SECRET",
      "service": "Hermes",
      "description": "Stable signing key for dashboard sessions so logins survive restarts and redeploys.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS",
      "service": "Hermes",
      "description": "Time Hermes gets to finish turns and checkpoint SQLite before the old container is stopped on redeploy.",
      "secret": false,
      "strategy": "default",
      "default": "30"
    },
    {
      "key": "HERMES_DASHBOARD_BASIC_AUTH_PASSWORD",
      "service": "Hermes",
      "description": "Dashboard login password, generated at deploy. Read it from this variable after deploying.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "HERMES_DASHBOARD_BASIC_AUTH_USERNAME",
      "service": "Hermes",
      "description": "Dashboard login username (bundled username/password provider).",
      "secret": false,
      "strategy": "default",
      "default": "admin"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "hermes-agent-v021-always-on-telegram-dis"
      }
    },
    "cli": "railway deploy --template hermes-agent-v021-always-on-telegram-dis",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "6132b38e-22c5-46f6-aa32-eb769b9f5064",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "e87453a2-8d4c-5981-a324-2b532203abd3": {
                  "icon": "https://raw.githubusercontent.com/NousResearch/hermes-agent/main/website/static/img/apple-touch-icon.png",
                  "name": "Hermes",
                  "build": {
                    "builder": "DOCKERFILE"
                  },
                  "deploy": {
                    "healthcheckPath": "/api/health",
                    "restartPolicyType": "ON_FAILURE",
                    "healthcheckTimeout": 300,
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "baranberkay96/hermes-agent-railway",
                    "branch": "main",
                    "rootDirectory": "/services/hermes"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": true,
                      "description": "Port Railway's healthcheck and public domain use; must match HERMES_DASHBOARD_PORT.",
                      "defaultValue": "9119"
                    },
                    "OPENAI_API_KEY": {
                      "isOptional": true,
                      "description": "Optional direct OpenAI key (also used for voice tools when set).",
                      "defaultValue": ""
                    },
                    "SLACK_APP_TOKEN": {
                      "isOptional": true,
                      "description": "Slack app-level token (xapp-...) with connections:write, used for Socket Mode.",
                      "defaultValue": ""
                    },
                    "SLACK_BOT_TOKEN": {
                      "isOptional": true,
                      "description": "Slack bot token (xoxb-...). Slack also needs SLACK_APP_TOKEN (Socket Mode).",
                      "defaultValue": ""
                    },
                    "HERMES_DASHBOARD": {
                      "isOptional": true,
                      "description": "Runs the official Hermes web dashboard next to the gateway (s6-supervised, port 9119).",
                      "defaultValue": "1"
                    },
                    "ANTHROPIC_API_KEY": {
                      "isOptional": true,
                      "description": "Optional direct Anthropic key, if you prefer it over OpenRouter.",
                      "defaultValue": ""
                    },
                    "DISCORD_BOT_TOKEN": {
                      "isOptional": true,
                      "description": "Discord bot token (Developer Portal > Bot). Enable the Message Content intent for the bot.",
                      "defaultValue": ""
                    },
                    "AGENT_BROWSER_ARGS": {
                      "isOptional": true,
                      "description": "Container-safe launch flags for the bundled headless Chromium (no user-namespace sandbox, no reliance on a large /dev/shm). Setting this replaces Hermes' auto-detected flags.",
                      "defaultValue": "--no-sandbox,--disable-dev-shm-usage"
                    },
                    "OPENROUTER_API_KEY": {
                      "isOptional": false,
                      "description": "REQUIRED. OpenRouter API key (openrouter.ai/keys): one key for Claude, GPT, Gemini, Hermes and hundreds of other models.",
                      "defaultValue": "{{OPENROUTER_API_KEY}}"
                    },
                    "TELEGRAM_BOT_TOKEN": {
                      "isOptional": true,
                      "description": "Telegram bot token from @BotFather. Set at least one of Telegram, Discord or Slack (or connect one later on the dashboard's Channels page).",
                      "defaultValue": ""
                    },
                    "SLACK_ALLOWED_USERS": {
                      "isOptional": true,
                      "description": "Comma-separated Slack member IDs allowed to talk to the agent. Empty = deny by default plus DM pairing.",
                      "defaultValue": ""
                    },
                    "DISCORD_ALLOWED_USERS": {
                      "isOptional": true,
                      "description": "Comma-separated Discord user IDs allowed to talk to the agent. Empty = deny by default plus DM pairing.",
                      "defaultValue": ""
                    },
                    "HERMES_DASHBOARD_HOST": {
                      "isOptional": true,
                      "description": "Dashboard bind address. A non-loopback bind always enforces the dashboard login.",
                      "defaultValue": "0.0.0.0"
                    },
                    "HERMES_DASHBOARD_PORT": {
                      "isOptional": true,
                      "description": "Dashboard port; the public domain targets it.",
                      "defaultValue": "9119"
                    },
                    "HERMES_INFERENCE_MODEL": {
                      "isOptional": true,
                      "description": "Optional process-wide model override (e.g. anthropic/claude-sonnet-4.6). Leave empty to pick the model in the dashboard; when set it wins over the dashboard choice.",
                      "defaultValue": ""
                    },
                    "TELEGRAM_ALLOWED_USERS": {
                      "isOptional": true,
                      "description": "Comma-separated Telegram user IDs allowed to talk to the agent. Empty = deny by default; approve people via DM pairing on the dashboard.",
                      "defaultValue": ""
                    },
                    "HERMES_DASHBOARD_PUBLIC_URL": {
                      "isOptional": true,
                      "description": "Public URL of the dashboard (Host/Origin allow-list and OAuth callbacks). Update it when you add a custom domain.",
                      "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "HERMES_DASHBOARD_OAUTH_CLIENT_ID": {
                      "isOptional": true,
                      "description": "Optional Nous Portal OAuth client id (agent:...). Upstream recommends OAuth over username/password for internet-facing dashboards.",
                      "defaultValue": ""
                    },
                    "HERMES_DASHBOARD_BASIC_AUTH_SECRET": {
                      "isOptional": true,
                      "description": "Stable signing key for dashboard sessions so logins survive restarts and redeploys.",
                      "defaultValue": "{{HERMES_DASHBOARD_BASIC_AUTH_SECRET}}"
                    },
                    "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": {
                      "isOptional": true,
                      "description": "Time Hermes gets to finish turns and checkpoint SQLite before the old container is stopped on redeploy.",
                      "defaultValue": "30"
                    },
                    "HERMES_DASHBOARD_BASIC_AUTH_PASSWORD": {
                      "isOptional": true,
                      "description": "Dashboard login password, generated at deploy. Read it from this variable after deploying.",
                      "defaultValue": "{{HERMES_DASHBOARD_BASIC_AUTH_PASSWORD}}"
                    },
                    "HERMES_DASHBOARD_BASIC_AUTH_USERNAME": {
                      "isOptional": true,
                      "description": "Dashboard login username (bundled username/password provider).",
                      "defaultValue": "admin"
                    }
                  },
                  "networking": {
                    "tcpProxies": {},
                    "serviceDomains": {
                      "<hasDomain>:9119": {
                        "port": 9119
                      }
                    }
                  },
                  "volumeMounts": {
                    "0bc2f890-0d53-5af1-a2f9-700d6efb0b91": {
                      "mountPath": "/opt/data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "Hermes",
      "method": "GET",
      "path": "/api/health",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-10-11T16:14:40.554Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-10-11T14:38:09.162Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_b153c7e0dfff480b928f",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "healthcheck",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 225,
    "typical_build_seconds": 101,
    "typical_start_seconds": 43,
    "slowest_service": "Hermes"
  }
}