{
  "manifest_version": "1.0.0",
  "template": {
    "id": "234fa981-f45f-4b13-a8d2-4702acbea67e",
    "slug": "hermes-agent-verified",
    "name": "Hermes Agent (Verified)",
    "description": "[Premium Template] Easy Way To Create Advanced AI Agents",
    "url": "https://railway.com/deploy/hermes-agent-verified",
    "upstream": {
      "image": "nousresearch/hermes-agent:latest"
    }
  },
  "status": "unvalidated",
  "validated_at": null,
  "success_rate_30d": null,
  "services": [
    {
      "name": "hermes-agent",
      "source": {
        "image": "nousresearch/hermes-agent:latest"
      },
      "needs_volume": true,
      "volume_mount_path": "/opt/data",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "hermes-agent",
      "description": "Internal port the Hermes dashboard binds to. Railway injects the public HTTPS port automatically. Do not change unless you know what you are doing.",
      "secret": false,
      "strategy": "default",
      "default": "9119"
    },
    {
      "key": "HERMES_HOME",
      "service": "hermes-agent",
      "description": "Path where Hermes stores sessions, memory, skills, config, and workspace. Must match the volume mount path /opt/data.",
      "secret": false,
      "strategy": "default",
      "default": "/opt/data"
    },
    {
      "key": "TERMINAL_ENV",
      "service": "hermes-agent",
      "description": "Terminal backend environment. Set to local so commands run in the container and avoid Docker daemon errors on Railway.",
      "secret": false,
      "strategy": "default",
      "default": "local"
    },
    {
      "key": "API_SERVER_KEY",
      "service": "hermes-agent",
      "description": "Bearer token for authenticating API server requests. Auto-generated if left as a template secret.",
      "secret": true,
      "strategy": "default",
      "default": "{{secret(64, \"abcdef0123456789\")}}"
    },
    {
      "key": "API_SERVER_HOST",
      "service": "hermes-agent",
      "description": "Host interface the API server binds to. 0.0.0.0 means all interfaces. Internal only, not exposed publicly.",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0"
    },
    {
      "key": "API_SERVER_PORT",
      "service": "hermes-agent",
      "description": "Internal port for the API server. Default 8080. Not exposed publicly.",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "HERMES_DASHBOARD",
      "service": "hermes-agent",
      "description": "Enable the web dashboard. Set to 1. Required for browser access and Remote Gateway connections.",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "HERMES_LOG_LEVEL",
      "service": "hermes-agent",
      "description": "Log verbosity: debug, info, warn, or error. Use info for production.",
      "secret": false,
      "strategy": "default",
      "default": "info"
    },
    {
      "key": "HERMES_MAX_STEPS",
      "service": "hermes-agent",
      "description": "Maximum agent steps per turn before auto-stopping. 25 balances thoroughness with cost.",
      "secret": false,
      "strategy": "default",
      "default": "25"
    },
    {
      "key": "HERMES_TUI_THEME",
      "service": "hermes-agent",
      "description": "Terminal UI theme. Use dark or light. Affects the web TUI at /tui.",
      "secret": false,
      "strategy": "default",
      "default": "dark"
    },
    {
      "key": "TERMINAL_BACKEND",
      "service": "hermes-agent",
      "description": "Terminal execution backend. Use local on Railway. Other values: docker, ssh, modal, daytona.",
      "secret": false,
      "strategy": "default",
      "default": "local"
    },
    {
      "key": "API_SERVER_ENABLED",
      "service": "hermes-agent",
      "description": "Enable the internal API server. Set to false to reduce attack surface. Dashboard and Remote Gateway work without it.",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "HERMES_DASHBOARD_HOST",
      "service": "hermes-agent",
      "description": "Host interface the dashboard binds to. 0.0.0.0 means all interfaces. Railway proxies HTTPS to this port.",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0"
    },
    {
      "key": "HERMES_DASHBOARD_PORT",
      "service": "hermes-agent",
      "description": "Internal dashboard port. Default 9119. Railway maps public HTTPS 443 to this port.",
      "secret": false,
      "strategy": "default",
      "default": "9119"
    },
    {
      "key": "HERMES_TOOL_LOOP_GUARD",
      "service": "hermes-agent",
      "description": "Prevent infinite tool-call loops. true stops the agent if it exceeds the step limit without progress.",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "HERMES_TERMINAL_BACKEND",
      "service": "hermes-agent",
      "description": "Legacy alias for TERMINAL_BACKEND. Set to local for Railway compatibility.",
      "secret": false,
      "strategy": "default",
      "default": "local"
    },
    {
      "key": "HERMES_DASHBOARD_BASIC_AUTH_SECRET",
      "service": "hermes-agent",
      "description": "Dashboard login username. Example: admin",
      "secret": true,
      "strategy": "default",
      "default": "{{secret(64, \"abcdef0123456789\")}}"
    },
    {
      "key": "HERMES_DASHBOARD_BASIC_AUTH_PASSWORD",
      "service": "hermes-agent",
      "description": "Dashboard login password. Use a unique password with at least 16 characters.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "HERMES_DASHBOARD_BASIC_AUTH_USERNAME",
      "service": "hermes-agent",
      "description": "32+ byte secret for signing dashboard session cookies. Generate with openssl rand -hex 32. Keep it stable across redeploys.",
      "secret": false,
      "strategy": "ask_user"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "hermes-agent-verified"
      }
    },
    "cli": "railway deploy --template hermes-agent-verified",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "234fa981-f45f-4b13-a8d2-4702acbea67e",
            "serializedConfig": {
              "services": {
                "ff5cf760-df13-4c3e-a240-5d4f836ccc9b": {
                  "icon": "https://hermes-agent.nousresearch.com/docs/img/logo.png",
                  "name": "hermes-agent",
                  "deploy": {
                    "startCommand": "/init /opt/hermes/docker/main-wrapper.sh gateway run",
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "nousresearch/hermes-agent:latest"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "Internal port the Hermes dashboard binds to. Railway injects the public HTTPS port automatically. Do not change unless you know what you are doing.",
                      "defaultValue": "9119"
                    },
                    "HERMES_HOME": {
                      "isOptional": false,
                      "description": "Path where Hermes stores sessions, memory, skills, config, and workspace. Must match the volume mount path /opt/data.",
                      "defaultValue": "/opt/data"
                    },
                    "TERMINAL_ENV": {
                      "description": "Terminal backend environment. Set to local so commands run in the container and avoid Docker daemon errors on Railway.",
                      "defaultValue": "local"
                    },
                    "API_SERVER_KEY": {
                      "isOptional": false,
                      "description": "Bearer token for authenticating API server requests. Auto-generated if left as a template secret.",
                      "defaultValue": "{{secret(64, \"abcdef0123456789\")}}"
                    },
                    "API_SERVER_HOST": {
                      "isOptional": false,
                      "description": "Host interface the API server binds to. 0.0.0.0 means all interfaces. Internal only, not exposed publicly.",
                      "defaultValue": "0.0.0.0"
                    },
                    "API_SERVER_PORT": {
                      "isOptional": false,
                      "description": "Internal port for the API server. Default 8080. Not exposed publicly.",
                      "defaultValue": "8080"
                    },
                    "HERMES_DASHBOARD": {
                      "isOptional": false,
                      "description": "Enable the web dashboard. Set to 1. Required for browser access and Remote Gateway connections.",
                      "defaultValue": "1"
                    },
                    "HERMES_LOG_LEVEL": {
                      "isOptional": false,
                      "description": "Log verbosity: debug, info, warn, or error. Use info for production.",
                      "defaultValue": "info"
                    },
                    "HERMES_MAX_STEPS": {
                      "isOptional": false,
                      "description": "Maximum agent steps per turn before auto-stopping. 25 balances thoroughness with cost.",
                      "defaultValue": "25"
                    },
                    "HERMES_TUI_THEME": {
                      "isOptional": false,
                      "description": "Terminal UI theme. Use dark or light. Affects the web TUI at /tui.",
                      "defaultValue": "dark"
                    },
                    "TERMINAL_BACKEND": {
                      "description": "Terminal execution backend. Use local on Railway. Other values: docker, ssh, modal, daytona.",
                      "defaultValue": "local"
                    },
                    "API_SERVER_ENABLED": {
                      "isOptional": false,
                      "description": "Enable the internal API server. Set to false to reduce attack surface. Dashboard and Remote Gateway work without it.",
                      "defaultValue": "false"
                    },
                    "HERMES_DASHBOARD_HOST": {
                      "isOptional": false,
                      "description": "Host interface the dashboard binds to. 0.0.0.0 means all interfaces. Railway proxies HTTPS to this port.",
                      "defaultValue": "0.0.0.0"
                    },
                    "HERMES_DASHBOARD_PORT": {
                      "isOptional": false,
                      "description": "Internal dashboard port. Default 9119. Railway maps public HTTPS 443 to this port.",
                      "defaultValue": "9119"
                    },
                    "HERMES_TOOL_LOOP_GUARD": {
                      "isOptional": false,
                      "description": "Prevent infinite tool-call loops. true stops the agent if it exceeds the step limit without progress.",
                      "defaultValue": "true"
                    },
                    "HERMES_TERMINAL_BACKEND": {
                      "isOptional": false,
                      "description": "Legacy alias for TERMINAL_BACKEND. Set to local for Railway compatibility.",
                      "defaultValue": "local"
                    },
                    "HERMES_DASHBOARD_BASIC_AUTH_SECRET": {
                      "isOptional": false,
                      "description": "Dashboard login username. Example: admin",
                      "defaultValue": "{{secret(64, \"abcdef0123456789\")}}"
                    },
                    "HERMES_DASHBOARD_BASIC_AUTH_PASSWORD": {
                      "isOptional": false,
                      "description": "Dashboard login password. Use a unique password with at least 16 characters.",
                      "defaultValue": "{{HERMES_DASHBOARD_BASIC_AUTH_PASSWORD}}"
                    },
                    "HERMES_DASHBOARD_BASIC_AUTH_USERNAME": {
                      "isOptional": false,
                      "description": "32+ byte secret for signing dashboard session cookies. Generate with openssl rand -hex 32. Keep it stable across redeploys.",
                      "defaultValue": "{{HERMES_DASHBOARD_BASIC_AUTH_USERNAME}}"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:9119": {
                        "port": 9119
                      }
                    }
                  },
                  "volumeMounts": {
                    "ff5cf760-df13-4c3e-a240-5d4f836ccc9b": {
                      "mountPath": "/opt/data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-10-18T16:14:44.681Z",
  "generator_version": "0.1.0"
}