{ "manifest_version": "1.0.0", "template": { "id": "3c142e5e-716c-401c-b188-e339b9cc9736", "slug": "kali-linux-web-desktop", "name": "Kali Linux (Web GUI)", "description": "A real Kali XFCE desktop in the browser, not just a web terminal.", "url": "https://railway.com/deploy/kali-linux-web-desktop", "upstream": { "image": "caddy:2-alpine" } }, "status": "unvalidated", "validated_at": null, "success_rate_30d": null, "services": [ { "name": "proxy", "source": { "image": "caddy:2-alpine" }, "needs_volume": false, "http": true }, { "name": "kali", "source": { "image": "kasmweb/kali-rolling-desktop:1.19.0-rolling-weekly" }, "needs_volume": true, "volume_mount_path": "/home/kasm-user", "http": false } ], "required_inputs": [ { "key": "PORT", "service": "proxy", "description": "Port this service listens on. Leave as is.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "CADDYFILE", "service": "proxy", "description": "Proxy config written to disk at boot. Leave as is.", "secret": false, "strategy": "default", "default": "{\n\tadmin off\n\tauto_https off\n}\n\n:{$PORT} {\n\trespond /proxy-healthz 200\n\treverse_proxy https://{$KASM_HOST} {\n\t\ttransport http {\n\t\t\ttls_insecure_skip_verify\n\t\t}\n\t}\n}\n" }, { "key": "KASM_HOST", "service": "proxy", "description": "Private address of the desktop service. Leave as is.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PORT", "service": "kali", "description": "Port this service listens on. Leave as is.", "secret": false, "strategy": "default", "default": "6901" }, { "key": "VNC_PW", "service": "kali", "description": "Desktop login password, minimum 6 characters. Username is kasm_user.", "secret": false, "strategy": "ask_user" }, { "key": "RAILWAY_RUN_UID", "service": "kali", "description": "Starts as root to set up the volume, then drops to uid 1000.", "secret": false, "strategy": "default", "default": "0" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "kali-linux-web-desktop" } }, "cli": "railway deploy --template kali-linux-web-desktop", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "3c142e5e-716c-401c-b188-e339b9cc9736", "serializedConfig": { "services": { "bf4f81d3-f979-4c56-9db5-72aa71d3dfdf": { "icon": "https://github.com/caddyserver.png?size=460", "name": "proxy", "deploy": { "startCommand": "sh -c 'printf \"%s\" \"$CADDYFILE\" > /etc/caddy/Caddyfile && exec caddy run --config /etc/caddy/Caddyfile --adapter caddyfile'", "healthcheckPath": "/proxy-healthz", "restartPolicyType": "ON_FAILURE", "healthcheckTimeout": 900 }, "source": { "image": "caddy:2-alpine" }, "variables": { "PORT": { "isOptional": false, "description": "Port this service listens on. Leave as is.", "defaultValue": "8080" }, "CADDYFILE": { "isOptional": false, "description": "Proxy config written to disk at boot. Leave as is.", "defaultValue": "{\n\tadmin off\n\tauto_https off\n}\n\n:{$PORT} {\n\trespond /proxy-healthz 200\n\treverse_proxy https://{$KASM_HOST} {\n\t\ttransport http {\n\t\t\ttls_insecure_skip_verify\n\t\t}\n\t}\n}\n" }, "KASM_HOST": { "isOptional": false, "description": "Private address of the desktop service. Leave as is.", "defaultValue": "${{kali.RAILWAY_PRIVATE_DOMAIN}}:6901" } }, "networking": { "tcpProxies": {}, "serviceDomains": { "": { "port": 8080 } } } }, "dd50c12c-3887-4525-8dea-8a43895bd997": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/kali-linux.svg", "name": "kali", "deploy": { "startCommand": "bash -c 'set -e\nif [ ${#VNC_PW} -lt 6 ]; then echo \"FATAL: VNC_PW must be at least 6 characters (KasmVNC requirement). Set a longer password and redeploy.\" >&2; exit 1; fi\necho \"kasm-user ALL=(ALL) NOPASSWD:ALL\" > /etc/sudoers.d/kasm-user\nchmod 0440 /etc/sudoers.d/kasm-user\nchown -R 1000:1000 /home/kasm-user\nsetcap -r /usr/lib/nmap/nmap 2>/dev/null || true\ncat > /usr/bin/nmap <<\"NMAPEOF\"\n#!/usr/bin/env sh\nexec /usr/lib/nmap/nmap --unprivileged \"$@\"\nNMAPEOF\nchmod 755 /usr/bin/nmap\nXFCEDIR=/home/kasm-user/.config/xfce4/xfconf/xfce-perchannel-xml\nif [ ! -f $XFCEDIR/xfce4-desktop.xml ]; then\n mkdir -p $XFCEDIR\n cat > $XFCEDIR/xfce4-desktop.xml <<\"XFCEEOF\"\n\n\n \n \n \n \n \n \n \n \n \n \n\nXFCEEOF\n chown -R 1000:1000 /home/kasm-user/.config\nfi\nsed -i \"s|function wait_for_network_devices() {|function wait_for_network_devices() { return 0;|\" /dockerstartup/vnc_startup.sh\ngrep -q \"wait_for_network_devices() { return 0;\" /dockerstartup/vnc_startup.sh || { echo FATAL: Kasm startup changed, wait_for_network_devices patch no longer applies >&2; exit 1; }\nexec setpriv --reuid=1000 --regid=1000 --init-groups /dockerstartup/kasm_default_profile.sh /dockerstartup/vnc_startup.sh /dockerstartup/kasm_startup.sh --tail-log'", "healthcheckPath": null, "restartPolicyType": "ALWAYS" }, "source": { "image": "kasmweb/kali-rolling-desktop:1.19.0-rolling-weekly" }, "variables": { "PORT": { "isOptional": false, "description": "Port this service listens on. Leave as is.", "defaultValue": "6901" }, "VNC_PW": { "isOptional": false, "description": "Desktop login password, minimum 6 characters. Username is kasm_user.", "defaultValue": "{{VNC_PW}}" }, "RAILWAY_RUN_UID": { "isOptional": false, "description": "Starts as root to set up the volume, then drops to uid 1000.", "defaultValue": "0" } }, "volumeMounts": { "dd50c12c-3887-4525-8dea-8a43895bd997": { "mountPath": "/home/kasm-user" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "proxy", "method": "GET", "path": "/proxy-healthz", "expect_status": 200 } }, "resources": { "expected_services": 2, "needs_volume": true }, "generated_at": "2026-09-14T16:14:52.837Z", "generator_version": "0.1.0" }