{
  "manifest_version": "1.0.0",
  "template": {
    "id": "5eae661e-dd2d-4f86-8bb0-c4bf58270859",
    "slug": "kali-linux-20263-web-terminal-browser-sh",
    "name": "Kali Linux 2026.3 Web Terminal (Browser Shell)",
    "description": "Kali shell in your browser: nmap, sqlmap, ffuf, hydra. Password-protected.",
    "url": "https://railway.com/deploy/kali-linux-20263-web-terminal-browser-sh",
    "upstream": {
      "repo_url": "https://github.com/baranberkay96/kali-terminal-railway"
    }
  },
  "status": "unvalidated",
  "validated_at": null,
  "success_rate_30d": null,
  "services": [
    {
      "name": "Terminal",
      "source": {
        "repo": "https://github.com/baranberkay96/kali-terminal-railway"
      },
      "needs_volume": true,
      "volume_mount_path": "/home",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "TZ",
      "service": "Terminal",
      "description": "Time zone of the shell, e.g. Europe/Istanbul.",
      "secret": false,
      "strategy": "default",
      "default": "UTC"
    },
    {
      "key": "PORT",
      "service": "Terminal",
      "description": "Port of the auth proxy (nginx). The public domain and healthcheck use it. ttyd stays on 127.0.0.1:7681.",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "PASSWORD",
      "service": "Terminal",
      "description": "Browser login password, generated at deploy (copy it from this variable). Min 12 chars. The terminal does not start without it.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "USERNAME",
      "service": "Terminal",
      "description": "Browser login name (letters, digits, . _ -). The Linux account is always 'kali', with sudo.",
      "secret": false,
      "strategy": "default",
      "default": "kali"
    },
    {
      "key": "TERMINAL_TMUX",
      "service": "Terminal",
      "description": "true: each tab attaches to a tmux session that survives closed tabs and reconnects. false: a new bash per tab.",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "TERMINAL_FONT_SIZE",
      "service": "Terminal",
      "description": "Font size of the browser terminal (8-40).",
      "secret": false,
      "strategy": "default",
      "default": "15"
    },
    {
      "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS",
      "service": "Terminal",
      "description": "Seconds between stop signal and kill on redeploy, so tmux shells exit cleanly and save history.",
      "secret": false,
      "strategy": "default",
      "default": "15"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "kali-linux-20263-web-terminal-browser-sh"
      }
    },
    "cli": "railway deploy --template kali-linux-20263-web-terminal-browser-sh",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "5eae661e-dd2d-4f86-8bb0-c4bf58270859",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "bcccbc20-b1c7-5dde-9212-587727426c6e": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/kali-linux.svg",
                  "name": "Terminal",
                  "build": {
                    "builder": "DOCKERFILE"
                  },
                  "deploy": {
                    "healthcheckPath": "/healthz",
                    "restartPolicyType": "ON_FAILURE",
                    "healthcheckTimeout": 120,
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "baranberkay96/kali-terminal-railway",
                    "branch": "main",
                    "rootDirectory": "/services/terminal"
                  },
                  "variables": {
                    "TZ": {
                      "isOptional": true,
                      "description": "Time zone of the shell, e.g. Europe/Istanbul.",
                      "defaultValue": "UTC"
                    },
                    "PORT": {
                      "isOptional": true,
                      "description": "Port of the auth proxy (nginx). The public domain and healthcheck use it. ttyd stays on 127.0.0.1:7681.",
                      "defaultValue": "8080"
                    },
                    "PASSWORD": {
                      "isOptional": true,
                      "description": "Browser login password, generated at deploy (copy it from this variable). Min 12 chars. The terminal does not start without it.",
                      "defaultValue": "{{PASSWORD}}"
                    },
                    "USERNAME": {
                      "isOptional": true,
                      "description": "Browser login name (letters, digits, . _ -). The Linux account is always 'kali', with sudo.",
                      "defaultValue": "kali"
                    },
                    "TERMINAL_TMUX": {
                      "isOptional": true,
                      "description": "true: each tab attaches to a tmux session that survives closed tabs and reconnects. false: a new bash per tab.",
                      "defaultValue": "true"
                    },
                    "TERMINAL_FONT_SIZE": {
                      "isOptional": true,
                      "description": "Font size of the browser terminal (8-40).",
                      "defaultValue": "15"
                    },
                    "KALI_EXTRA_PACKAGES": {
                      "isOptional": true,
                      "description": "Optional. Extra Kali packages baked into the image at build, e.g. metasploit-framework or kali-linux-headless. Changing it rebuilds.",
                      "defaultValue": ""
                    },
                    "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": {
                      "isOptional": true,
                      "description": "Seconds between stop signal and kill on redeploy, so tmux shells exit cleanly and save history.",
                      "defaultValue": "15"
                    }
                  },
                  "networking": {
                    "tcpProxies": {},
                    "serviceDomains": {
                      "<hasDomain>:8080": {
                        "port": 8080
                      }
                    }
                  },
                  "volumeMounts": {
                    "be9f7c33-8ee8-5d65-a61a-14405d3bddab": {
                      "mountPath": "/home"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "Terminal",
      "method": "GET",
      "path": "/healthz",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-11-08T16:15:10.586Z",
  "generator_version": "0.1.0"
}
