{
  "manifest_version": "1.0.0",
  "template": {
    "id": "190fc526-0d47-4573-8344-5a557541bf12",
    "slug": "heyform-1",
    "name": "HeyForm",
    "description": "Open-source form builder, built for small business success.",
    "url": "https://railway.com/deploy/heyform-1",
    "upstream": {
      "image": "heyform/community-edition:v3.0.3"
    }
  },
  "services": [
    {
      "name": "HeyForm",
      "source": {
        "image": "heyform/community-edition:v3.0.3"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "Redis",
      "source": {
        "image": "redis:8.2"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": false
    },
    {
      "name": "MongoDB",
      "source": {
        "image": "mongo:8.0"
      },
      "needs_volume": true,
      "volume_mount_path": "/data/db",
      "http": false
    },
    {
      "name": "Mailcrab",
      "source": {
        "image": "marlonb/mailcrab:latest"
      },
      "needs_volume": false,
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "HeyForm",
      "description": "Default Port",
      "secret": false,
      "strategy": "default",
      "default": "9157"
    },
    {
      "key": "REDIS_DB",
      "service": "HeyForm",
      "description": "Redis Default DB",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "MONGO_URI",
      "service": "HeyForm",
      "description": "Mongo URL Connection",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "S3_BUCKET",
      "service": "HeyForm",
      "description": "S3 bucket name used to store uploaded files. Required when using S3-compatible storage.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "S3_REGION",
      "service": "HeyForm",
      "description": "S3 region for the bucket (e.g. us-east-1). Required by most S3-compatible providers for request signing.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_FROM",
      "service": "HeyForm",
      "description": "SMTP Adress",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "SMTP_HOST",
      "service": "HeyForm",
      "description": "SMTP Host (Default is Mailcrab)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SMTP_PORT",
      "service": "HeyForm",
      "description": "SMTP Port (Default is Mailcrab)",
      "secret": false,
      "strategy": "default",
      "default": "1025"
    },
    {
      "key": "REDIS_HOST",
      "service": "HeyForm",
      "description": "Redis Host",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDIS_PORT",
      "service": "HeyForm",
      "description": "Redis Port",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SESSION_KEY",
      "service": "HeyForm",
      "description": "Session Secret Key",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "SMTP_SECURE",
      "service": "HeyForm",
      "description": "Default is false for Mailcrab CHANGE IT later!",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "TRUST_PROXY",
      "service": "HeyForm",
      "description": "Trust proxy for Railway",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "NODE_OPTIONS",
      "service": "HeyForm",
      "description": "Node Options",
      "secret": false,
      "strategy": "default",
      "default": "--max-old-space-size=2048"
    },
    {
      "key": "S3_PUBLIC_URL",
      "service": "HeyForm",
      "description": "Public base URL used to serve uploaded files (e.g. CDN/custom domain or bucket public URL). Default uses Railway",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "HeyForm",
      "description": "Redis Password",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "APP_LISTEN_PORT",
      "service": "HeyForm",
      "description": "App Listen Porst",
      "secret": false,
      "strategy": "default",
      "default": "9157"
    },
    {
      "key": "APP_HOMEPAGE_URL",
      "service": "HeyForm",
      "description": "Default URL",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "S3_ACCESS_KEY_ID",
      "service": "HeyForm",
      "description": "Access key ID used to authenticate with S3-compatible storage. Required for authenticated bucket access.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "VERIFY_USER_EMAIL",
      "service": "HeyForm",
      "description": "Verify user e-mail",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "APP_LISTEN_HOSTNAME",
      "service": "HeyForm",
      "description": "App Listening (Default 0.0.0.0)",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0"
    },
    {
      "key": "FORM_ENCRYPTION_KEY",
      "service": "HeyForm",
      "description": "Ecnryption Key",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "S3_SECRET_ACCESS_KEY",
      "service": "HeyForm",
      "description": "Secret access key paired with S3_ACCESS_KEY_ID for S3 authentication. Keep this value private.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "APP_DISABLE_REGISTRATION",
      "service": "HeyForm",
      "description": "Disable Registration (Change to true after creating first user)",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "RAILWAY_HEALTHCHECK_TIMEOUT_SEC",
      "service": "HeyForm",
      "description": "Healtcheck Timeout",
      "secret": false,
      "strategy": "default",
      "default": "300"
    },
    {
      "key": "REDISHOST",
      "service": "Redis",
      "description": "Private network hostname of the Redis service, only resolvable from services in the same environment",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDISPORT",
      "service": "Redis",
      "description": "Port that Redis listens on",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDISUSER",
      "service": "Redis",
      "description": "Username for authenticating with Redis",
      "secret": false,
      "strategy": "default",
      "default": "default"
    },
    {
      "key": "REDIS_URL",
      "service": "Redis",
      "description": "Connection string for connecting to Redis using the private network",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDISPASSWORD",
      "service": "Redis",
      "description": "Alias of REDIS_PASSWORD for clients that expect the unseparated name",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "Redis",
      "description": "Randomly generated password for authenticating with Redis",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "MONGOHOST",
      "service": "MongoDB",
      "description": "Railway Private Domain Name.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "MONGOPORT",
      "service": "MongoDB",
      "description": "MongoDB Port.",
      "secret": false,
      "strategy": "default",
      "default": "27017"
    },
    {
      "key": "MONGOUSER",
      "service": "MongoDB",
      "description": "Mongodb user.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MONGO_URL",
      "service": "MongoDB",
      "description": "Private URL to connect to MongoDB.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "MONGOPASSWORD",
      "service": "MongoDB",
      "description": "Root password.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MONGO_INITDB_ROOT_PASSWORD",
      "service": "MongoDB",
      "description": "Root user password, set during initialization.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "MONGO_INITDB_ROOT_USERNAME",
      "service": "MongoDB",
      "description": "User created during initialization, given the root role.",
      "secret": false,
      "strategy": "default",
      "default": "mongo"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "heyform-1"
      }
    },
    "cli": "railway deploy --template heyform-1",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "190fc526-0d47-4573-8344-5a557541bf12",
            "serializedConfig": {
              "buckets": {
                "5e05b975-0b78-40cb-a38f-6f75bcf6e9c1": {
                  "name": "Bucket"
                }
              },
              "services": {
                "53de1894-4f30-4e52-aead-2512e3334f31": {
                  "icon": "https://docs.heyform.net/logo-dark.svg",
                  "name": "HeyForm",
                  "source": {
                    "image": "heyform/community-edition:v3.0.3"
                  },
                  "variables": {
                    "PORT": {
                      "description": "Default Port",
                      "defaultValue": "9157"
                    },
                    "REDIS_DB": {
                      "description": "Redis Default DB",
                      "defaultValue": "0"
                    },
                    "MONGO_URI": {
                      "description": "Mongo URL Connection",
                      "defaultValue": "${{MongoDB.MONGO_URL}}"
                    },
                    "S3_BUCKET": {
                      "description": "S3 bucket name used to store uploaded files. Required when using S3-compatible storage.",
                      "defaultValue": "${{Bucket.BUCKET}}"
                    },
                    "S3_REGION": {
                      "description": "S3 region for the bucket (e.g. us-east-1). Required by most S3-compatible providers for request signing.",
                      "defaultValue": "${{Bucket.REGION}}"
                    },
                    "SMTP_FROM": {
                      "description": "SMTP Adress",
                      "defaultValue": "HeyForm <noreply@${{RAILWAY_PUBLIC_DOMAIN}}>"
                    },
                    "SMTP_HOST": {
                      "isOptional": true,
                      "description": "SMTP Host (Default is Mailcrab)",
                      "defaultValue": "${{Mailcrab.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SMTP_PORT": {
                      "description": "SMTP Port (Default is Mailcrab)",
                      "defaultValue": "1025"
                    },
                    "REDIS_HOST": {
                      "description": "Redis Host",
                      "defaultValue": "${{Redis.REDISHOST}}"
                    },
                    "REDIS_PORT": {
                      "description": "Redis Port",
                      "defaultValue": "${{Redis.REDISPORT}}"
                    },
                    "SESSION_KEY": {
                      "description": "Session Secret Key",
                      "defaultValue": "{{SESSION_KEY}}"
                    },
                    "SMTP_SECURE": {
                      "description": "Default is false for Mailcrab CHANGE IT later!",
                      "defaultValue": "false"
                    },
                    "TRUST_PROXY": {
                      "description": "Trust proxy for Railway",
                      "defaultValue": "true"
                    },
                    "NODE_OPTIONS": {
                      "description": "Node Options",
                      "defaultValue": "--max-old-space-size=2048"
                    },
                    "S3_PUBLIC_URL": {
                      "description": "Public base URL used to serve uploaded files (e.g. CDN/custom domain or bucket public URL). Default uses Railway",
                      "defaultValue": "${{Bucket.ENDPOINT}}"
                    },
                    "REDIS_PASSWORD": {
                      "description": "Redis Password",
                      "defaultValue": "${{Redis.REDISPASSWORD}}"
                    },
                    "APP_LISTEN_PORT": {
                      "description": "App Listen Porst",
                      "defaultValue": "9157"
                    },
                    "APP_HOMEPAGE_URL": {
                      "description": "Default URL",
                      "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "S3_ACCESS_KEY_ID": {
                      "description": "Access key ID used to authenticate with S3-compatible storage. Required for authenticated bucket access.",
                      "defaultValue": "${{Bucket.ACCESS_KEY_ID}}"
                    },
                    "VERIFY_USER_EMAIL": {
                      "description": "Verify user e-mail",
                      "defaultValue": "false"
                    },
                    "APP_LISTEN_HOSTNAME": {
                      "description": "App Listening (Default 0.0.0.0)",
                      "defaultValue": "0.0.0.0"
                    },
                    "FORM_ENCRYPTION_KEY": {
                      "description": "Ecnryption Key",
                      "defaultValue": "{{FORM_ENCRYPTION_KEY}}"
                    },
                    "S3_SECRET_ACCESS_KEY": {
                      "description": "Secret access key paired with S3_ACCESS_KEY_ID for S3 authentication. Keep this value private.",
                      "defaultValue": "${{Bucket.SECRET_ACCESS_KEY}}"
                    },
                    "APP_DISABLE_REGISTRATION": {
                      "description": "Disable Registration (Change to true after creating first user)",
                      "defaultValue": "false"
                    },
                    "RAILWAY_HEALTHCHECK_TIMEOUT_SEC": {
                      "description": "Healtcheck Timeout",
                      "defaultValue": "300"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:9157": {
                        "port": 9157
                      }
                    }
                  }
                },
                "afa748d6-a691-479f-ba59-5a55d8189ab2": {
                  "icon": "https://cdn.sanity.io/images/sy1jschh/production/0ce0bfdcfbdbf69662b1116671f97c2dd788b655-157x157.svg",
                  "name": "Redis",
                  "deploy": {
                    "startCommand": "/bin/sh -c \"rm -rf $RAILWAY_VOLUME_MOUNT_PATH/lost+found/ && exec docker-entrypoint.sh redis-server --requirepass $REDIS_PASSWORD --save 60 1 --dir $RAILWAY_VOLUME_MOUNT_PATH\""
                  },
                  "source": {
                    "image": "redis:8.2"
                  },
                  "variables": {
                    "REDISHOST": {
                      "isOptional": false,
                      "description": "Private network hostname of the Redis service, only resolvable from services in the same environment",
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDISPORT": {
                      "isOptional": false,
                      "description": "Port that Redis listens on",
                      "defaultValue": "6379"
                    },
                    "REDISUSER": {
                      "isOptional": false,
                      "description": "Username for authenticating with Redis",
                      "defaultValue": "default"
                    },
                    "REDIS_URL": {
                      "isOptional": false,
                      "description": "Connection string for connecting to Redis using the private network",
                      "defaultValue": "redis://${{ REDISUSER }}:${{ REDIS_PASSWORD }}@${{ REDISHOST }}:${{ REDISPORT }}"
                    },
                    "REDISPASSWORD": {
                      "isOptional": false,
                      "description": "Alias of REDIS_PASSWORD for clients that expect the unseparated name",
                      "defaultValue": "${{REDIS_PASSWORD}}"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Randomly generated password for authenticating with Redis",
                      "defaultValue": "{{REDIS_PASSWORD}}"
                    }
                  },
                  "volumeMounts": {
                    "afa748d6-a691-479f-ba59-5a55d8189ab2": {
                      "mountPath": "/data"
                    }
                  },
                  "haTemplateCode": "redis-ha"
                },
                "cb82d8bf-22b5-4e35-8476-f6700fd692ff": {
                  "icon": "https://devicons.railway.app/i/mongodb.svg",
                  "name": "MongoDB",
                  "deploy": {
                    "startCommand": "docker-entrypoint.sh mongod --ipv6 --bind_ip ::,0.0.0.0 --setParameter diagnosticDataCollectionEnabled=false",
                    "requiredMountPath": "/data/db"
                  },
                  "source": {
                    "image": "mongo:8.0"
                  },
                  "variables": {
                    "MONGOHOST": {
                      "isOptional": false,
                      "description": "Railway Private Domain Name.",
                      "defaultValue": "${{ RAILWAY_PRIVATE_DOMAIN }}"
                    },
                    "MONGOPORT": {
                      "isOptional": false,
                      "description": "MongoDB Port.",
                      "defaultValue": "27017"
                    },
                    "MONGOUSER": {
                      "isOptional": false,
                      "description": "Mongodb user.",
                      "defaultValue": "${{ MONGO_INITDB_ROOT_USERNAME }}"
                    },
                    "MONGO_URL": {
                      "isOptional": false,
                      "description": "Private URL to connect to MongoDB.",
                      "defaultValue": "mongodb://${{MONGO_INITDB_ROOT_USERNAME}}:${{MONGO_INITDB_ROOT_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:27017"
                    },
                    "MONGOPASSWORD": {
                      "isOptional": false,
                      "description": "Root password.",
                      "defaultValue": "${{ MONGO_INITDB_ROOT_PASSWORD }}"
                    },
                    "MONGO_INITDB_ROOT_PASSWORD": {
                      "isOptional": false,
                      "description": "Root user password, set during initialization.",
                      "defaultValue": "{{MONGO_INITDB_ROOT_PASSWORD}}"
                    },
                    "MONGO_INITDB_ROOT_USERNAME": {
                      "isOptional": false,
                      "description": "User created during initialization, given the root role.",
                      "defaultValue": "mongo"
                    }
                  },
                  "volumeMounts": {
                    "cb82d8bf-22b5-4e35-8476-f6700fd692ff": {
                      "mountPath": "/data/db"
                    }
                  }
                },
                "ee83d837-041d-40a8-93e1-0d964519c5f5": {
                  "icon": "https://raw.githubusercontent.com/tweedegolf/mailcrab/main/frontend/img/mailcrab.svg",
                  "name": "Mailcrab",
                  "source": {
                    "image": "marlonb/mailcrab:latest"
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:1080": {
                        "port": 1080
                      }
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 4,
    "needs_volume": true
  },
  "generated_at": "2026-09-22T22:14:50.114Z",
  "generator_version": "0.1.0",
  "status": "degraded",
  "validated_at": "2026-09-22T19:22:43.647Z",
  "success_rate_30d": 0,
  "validation": {
    "last_run_id": "run_6901676b54e149fc9a18",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": false,
        "detail": "Your workspace has been restricted. Please contact support to resolve this."
      }
    ]
  }
}