{
  "manifest_version": "1.0.0",
  "template": {
    "id": "b54a69ca-c369-458a-9a58-b1edc493505f",
    "slug": "invio",
    "name": "Invio",
    "description": "Self-hosted invoicing without the bloat.",
    "url": "https://railway.com/deploy/invio",
    "upstream": {
      "image": "ghcr.io/kittendevv/invio-frontend:latest"
    }
  },
  "services": [
    {
      "name": "frontend",
      "source": {
        "image": "ghcr.io/kittendevv/invio-frontend:latest"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "backend",
      "source": {
        "image": "ghcr.io/kittendevv/invio-backend:latest"
      },
      "needs_volume": true,
      "volume_mount_path": "/app/data/",
      "http": false
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "frontend",
      "description": "Provide a value for PORT.",
      "secret": false,
      "strategy": "default",
      "default": "8000"
    },
    {
      "key": "BACKEND_URL",
      "service": "frontend",
      "description": "Provide a value for BACKEND_URL.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "ENABLE_HSTS",
      "service": "frontend",
      "description": "Provide a value for ENABLE_HSTS.",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "COOKIE_SECURE",
      "service": "frontend",
      "description": "Provide a value for COOKIE_SECURE.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "RATE_LIMIT_ENABLED",
      "service": "frontend",
      "description": "Enable or disable rate limiting for login endpoint (default: true)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SESSION_TTL_SECONDS",
      "service": "frontend",
      "description": "Provide a value for SESSION_TTL_SECONDS.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "FRONTEND_PORT_INTERNAL",
      "service": "frontend",
      "description": "Provide a value for FRONTEND_PORT_INTERNAL.",
      "secret": false,
      "strategy": "default",
      "default": "8000"
    },
    {
      "key": "RATE_LIMIT_TRUST_PROXY",
      "service": "frontend",
      "description": "Trust X-Forwarded-For header for client IP detection (set to true when behind reverse proxy) Set to true if using nginx, Apache, Caddy, or running in Docker with a reverse proxy",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "RATE_LIMIT_MAX_ATTEMPTS",
      "service": "frontend",
      "description": "Maximum failed login attempts before blocking (default: 5)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SECURE_HEADERS_DISABLED",
      "service": "frontend",
      "description": "Provide a value for SECURE_HEADERS_DISABLED.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "RATE_LIMIT_WINDOW_SECONDS",
      "service": "frontend",
      "description": "Time window in seconds for rate limiting (default: 900 = 15 minutes)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "FRONTEND_SECURE_HEADERS_DISABLED",
      "service": "frontend",
      "description": "Provide a value for FRONTEND_SECURE_HEADERS_DISABLED.",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "PORT",
      "service": "backend",
      "description": "Provide a value for PORT.",
      "secret": false,
      "strategy": "default",
      "default": "3000"
    },
    {
      "key": "ADMIN_PASS",
      "service": "backend",
      "description": "Provide a value for ADMIN_PASS.",
      "secret": false,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "ADMIN_USER",
      "service": "backend",
      "description": "Provide a value for ADMIN_USER.",
      "secret": false,
      "strategy": "default",
      "default": "admin"
    },
    {
      "key": "JWT_SECRET",
      "service": "backend",
      "description": "Provide a value for JWT_SECRET.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "FRONTEND_URL",
      "service": "backend",
      "description": "Provide a value for FRONTEND_URL.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "COOKIE_SECURE",
      "service": "backend",
      "description": "Provide a value for COOKIE_SECURE.",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "RATE_LIMIT_ENABLED",
      "service": "backend",
      "description": "Enable or disable rate limiting for login endpoint (default: true)",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SESSION_TTL_SECONDS",
      "service": "backend",
      "description": "Provide a value for SESSION_TTL_SECONDS.",
      "secret": false,
      "strategy": "default",
      "default": "3600"
    },
    {
      "key": "RATE_LIMIT_TRUST_PROXY",
      "service": "backend",
      "description": "Trust X-Forwarded-For header for client IP detection (set to true when behind reverse proxy) Set to true if using nginx, Apache, Caddy, or running in Docker with a reverse proxy",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "RATE_LIMIT_MAX_ATTEMPTS",
      "service": "backend",
      "description": "Maximum failed login attempts before blocking (default: 5)",
      "secret": false,
      "strategy": "default",
      "default": "5"
    },
    {
      "key": "SECURE_HEADERS_DISABLED",
      "service": "backend",
      "description": "Provide a value for SECURE_HEADERS_DISABLED.",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "RATE_LIMIT_WINDOW_SECONDS",
      "service": "backend",
      "description": "Time window in seconds for rate limiting (default: 900 = 15 minutes)",
      "secret": false,
      "strategy": "default",
      "default": "900"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "invio"
      }
    },
    "cli": "railway deploy --template invio",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "b54a69ca-c369-458a-9a58-b1edc493505f",
            "serializedConfig": {
              "services": {
                "3c6e94e0-3867-4b0e-a537-b41b54108b89": {
                  "name": "frontend",
                  "source": {
                    "image": "ghcr.io/kittendevv/invio-frontend:latest"
                  },
                  "variables": {
                    "PORT": {
                      "defaultValue": "8000"
                    },
                    "BACKEND_URL": {
                      "defaultValue": "http://${{backend.RAILWAY_PRIVATE_DOMAIN}}:${{backend.PORT}}"
                    },
                    "ENABLE_HSTS": {
                      "defaultValue": "false"
                    },
                    "COOKIE_SECURE": {
                      "defaultValue": "${{backend.COOKIE_SECURE}}"
                    },
                    "RATE_LIMIT_ENABLED": {
                      "description": "Enable or disable rate limiting for login endpoint (default: true)",
                      "defaultValue": "${{backend.RATE_LIMIT_ENABLED}}"
                    },
                    "SESSION_TTL_SECONDS": {
                      "defaultValue": "${{backend.SESSION_TTL_SECONDS}}"
                    },
                    "FRONTEND_PORT_INTERNAL": {
                      "defaultValue": "8000"
                    },
                    "RATE_LIMIT_TRUST_PROXY": {
                      "description": "Trust X-Forwarded-For header for client IP detection (set to true when behind reverse proxy) Set to true if using nginx, Apache, Caddy, or running in Docker with a reverse proxy",
                      "defaultValue": "${{backend.RATE_LIMIT_TRUST_PROXY}}"
                    },
                    "RATE_LIMIT_MAX_ATTEMPTS": {
                      "description": "Maximum failed login attempts before blocking (default: 5)",
                      "defaultValue": "${{backend.RATE_LIMIT_MAX_ATTEMPTS}}"
                    },
                    "SECURE_HEADERS_DISABLED": {
                      "defaultValue": "${{backend.SECURE_HEADERS_DISABLED}}"
                    },
                    "RATE_LIMIT_WINDOW_SECONDS": {
                      "description": "Time window in seconds for rate limiting (default: 900 = 15 minutes)",
                      "defaultValue": "${{backend.RATE_LIMIT_WINDOW_SECONDS}}"
                    },
                    "FRONTEND_SECURE_HEADERS_DISABLED": {
                      "defaultValue": "false"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:8000": {
                        "port": 8000
                      }
                    }
                  }
                },
                "645203a6-fcb3-49cc-b77d-3182c3596395": {
                  "name": "backend",
                  "source": {
                    "image": "ghcr.io/kittendevv/invio-backend:latest"
                  },
                  "variables": {
                    "PORT": {
                      "defaultValue": "3000"
                    },
                    "ADMIN_PASS": {
                      "defaultValue": "{{ADMIN_PASS}}"
                    },
                    "ADMIN_USER": {
                      "defaultValue": "admin"
                    },
                    "JWT_SECRET": {
                      "defaultValue": "{{JWT_SECRET}}"
                    },
                    "FRONTEND_URL": {
                      "defaultValue": "http://${{frontend.RAILWAY_PRIVATE_DOMAIN}}:${{frontend.PORT}}"
                    },
                    "COOKIE_SECURE": {
                      "defaultValue": "true"
                    },
                    "RATE_LIMIT_ENABLED": {
                      "description": "Enable or disable rate limiting for login endpoint (default: true)",
                      "defaultValue": "true"
                    },
                    "SESSION_TTL_SECONDS": {
                      "defaultValue": "3600"
                    },
                    "RATE_LIMIT_TRUST_PROXY": {
                      "description": "Trust X-Forwarded-For header for client IP detection (set to true when behind reverse proxy) Set to true if using nginx, Apache, Caddy, or running in Docker with a reverse proxy",
                      "defaultValue": "true"
                    },
                    "RATE_LIMIT_MAX_ATTEMPTS": {
                      "description": "Maximum failed login attempts before blocking (default: 5)",
                      "defaultValue": "5"
                    },
                    "SECURE_HEADERS_DISABLED": {
                      "defaultValue": "false"
                    },
                    "RATE_LIMIT_WINDOW_SECONDS": {
                      "description": "Time window in seconds for rate limiting (default: 900 = 15 minutes)",
                      "defaultValue": "900"
                    }
                  },
                  "volumeMounts": {
                    "645203a6-fcb3-49cc-b77d-3182c3596395": {
                      "mountPath": "/app/data/"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 2,
    "needs_volume": true
  },
  "generated_at": "2026-09-20T16:14:49.616Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-09-18T14:55:52.612Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_b878ee0e89aa4c1492fb",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 82,
    "typical_build_seconds": 0,
    "typical_start_seconds": 20,
    "slowest_service": "backend"
  }
}