{
  "manifest_version": "1.0.0",
  "template": {
    "id": "fd606cf4-e46d-422e-9823-d817f64878de",
    "slug": "mastodon-server",
    "name": "Mastodon",
    "description": "Social network server that connects to the wider fediverse",
    "url": "https://railway.com/deploy/mastodon-server",
    "upstream": {
      "image": "ghcr.io/mastodon/mastodon-streaming:v4.7.0"
    }
  },
  "services": [
    {
      "name": "sidekiq-scheduler",
      "source": {
        "repo": "https://github.com/gridalpha/mastodon-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "sidekiq",
      "source": {
        "repo": "https://github.com/gridalpha/mastodon-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "Redis",
      "source": {
        "image": "redis:8.2"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": false
    },
    {
      "name": "streaming",
      "source": {
        "image": "ghcr.io/mastodon/mastodon-streaming:v4.7.0"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "mailpit",
      "source": {
        "image": "axllent/mailpit:latest"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": true
    },
    {
      "name": "web",
      "source": {
        "repo": "https://github.com/gridalpha/mastodon-railway"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "media",
      "source": {
        "repo": "https://github.com/gridalpha/mastodon-railway"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "Postgres",
      "source": {
        "image": "ghcr.io/railwayapp-templates/postgres-ssl:18"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/postgresql/data",
      "http": false
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "sidekiq-scheduler",
      "description": "Metrics port used as health check",
      "secret": false,
      "strategy": "default",
      "default": "9394"
    },
    {
      "key": "DB_HOST",
      "service": "sidekiq-scheduler",
      "description": "Private Postgres hostname",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "DB_NAME",
      "service": "sidekiq-scheduler",
      "description": "Postgres database name",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DB_PASS",
      "service": "sidekiq-scheduler",
      "description": "Postgres password",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DB_PORT",
      "service": "sidekiq-scheduler",
      "description": "Postgres port",
      "secret": false,
      "strategy": "default",
      "default": "5432"
    },
    {
      "key": "DB_USER",
      "service": "sidekiq-scheduler",
      "description": "Postgres user",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDIS_URL",
      "service": "sidekiq-scheduler",
      "description": "Cache, queues and pub/sub",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "S3_BUCKET",
      "service": "sidekiq-scheduler",
      "description": "Media bucket name",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "S3_REGION",
      "service": "sidekiq-scheduler",
      "description": "Bucket region",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_PORT",
      "service": "sidekiq-scheduler",
      "description": "Outgoing mail port",
      "secret": false,
      "strategy": "default",
      "default": "1025"
    },
    {
      "key": "S3_ENABLED",
      "service": "sidekiq-scheduler",
      "description": "Store uploads in object storage",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SMTP_LOGIN",
      "service": "sidekiq-scheduler",
      "description": "SMTP username",
      "secret": false,
      "strategy": "default",
      "default": "mastodon"
    },
    {
      "key": "S3_ENDPOINT",
      "service": "sidekiq-scheduler",
      "description": "Bucket API endpoint",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_SERVER",
      "service": "sidekiq-scheduler",
      "description": "Outgoing mail host",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "LOCAL_DOMAIN",
      "service": "sidekiq-scheduler",
      "description": "Federation identity, shared with web",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "MASTODON_ROLE",
      "service": "sidekiq-scheduler",
      "description": "Runs the scheduler queue only, one replica",
      "secret": false,
      "strategy": "default",
      "default": "sidekiq-scheduler"
    },
    {
      "key": "S3_ALIAS_HOST",
      "service": "sidekiq-scheduler",
      "description": "Public hostname in media URLs",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "S3_PERMISSION",
      "service": "sidekiq-scheduler",
      "description": "No public ACL on uploads",
      "secret": false,
      "strategy": "default",
      "default": "private"
    },
    {
      "key": "SMTP_PASSWORD",
      "service": "sidekiq-scheduler",
      "description": "SMTP password",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "RAILS_LOG_LEVEL",
      "service": "sidekiq-scheduler",
      "description": "Application log level",
      "secret": false,
      "strategy": "default",
      "default": "info"
    },
    {
      "key": "SECRET_KEY_BASE",
      "service": "sidekiq-scheduler",
      "description": "Must match the web service",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_AUTH_METHOD",
      "service": "sidekiq-scheduler",
      "description": "Plain SMTP authentication",
      "secret": false,
      "strategy": "default",
      "default": "plain"
    },
    {
      "key": "TRUSTED_PROXY_IP",
      "service": "sidekiq-scheduler",
      "description": "Real client IP behind the edge",
      "secret": false,
      "strategy": "default",
      "default": "100.64.0.0/10,152.233.0.0/17,fd00::/8"
    },
    {
      "key": "AWS_ACCESS_KEY_ID",
      "service": "sidekiq-scheduler",
      "description": "Bucket access key",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_FROM_ADDRESS",
      "service": "sidekiq-scheduler",
      "description": "From address on outgoing mail",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "SIDEKIQ_CONCURRENCY",
      "service": "sidekiq-scheduler",
      "description": "Threads for scheduled jobs",
      "secret": false,
      "strategy": "default",
      "default": "5"
    },
    {
      "key": "SMTP_ENABLE_STARTTLS",
      "service": "sidekiq-scheduler",
      "description": "Private listener offers no STARTTLS",
      "secret": false,
      "strategy": "default",
      "default": "never"
    },
    {
      "key": "AWS_SECRET_ACCESS_KEY",
      "service": "sidekiq-scheduler",
      "description": "Bucket secret key",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "STREAMING_API_BASE_URL",
      "service": "sidekiq-scheduler",
      "description": "WebSocket origin for clients",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "S3_FORCE_SINGLE_REQUEST",
      "service": "sidekiq-scheduler",
      "description": "Simpler object download path",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SMTP_ENABLE_STARTTLS_AUTO",
      "service": "sidekiq-scheduler",
      "description": "Do not probe for STARTTLS",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "MASTODON_PROMETHEUS_EXPORTER_HOST",
      "service": "sidekiq-scheduler",
      "description": "Metrics bind address",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0"
    },
    {
      "key": "MASTODON_PROMETHEUS_EXPORTER_PORT",
      "service": "sidekiq-scheduler",
      "description": "Metrics listening port",
      "secret": false,
      "strategy": "default",
      "default": "9394"
    },
    {
      "key": "MASTODON_PROMETHEUS_EXPORTER_LOCAL",
      "service": "sidekiq-scheduler",
      "description": "Serve metrics in-process",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY",
      "service": "sidekiq-scheduler",
      "description": "Must match the web service",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MASTODON_PROMETHEUS_EXPORTER_ENABLED",
      "service": "sidekiq-scheduler",
      "description": "Expose worker metrics",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY",
      "service": "sidekiq-scheduler",
      "description": "Must match the web service",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT",
      "service": "sidekiq-scheduler",
      "description": "Must match the web service",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PORT",
      "service": "sidekiq",
      "description": "Metrics port used as health check",
      "secret": false,
      "strategy": "default",
      "default": "9394"
    },
    {
      "key": "DB_HOST",
      "service": "sidekiq",
      "description": "Private Postgres hostname",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "DB_NAME",
      "service": "sidekiq",
      "description": "Postgres database name",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DB_PASS",
      "service": "sidekiq",
      "description": "Postgres password",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DB_PORT",
      "service": "sidekiq",
      "description": "Postgres port",
      "secret": false,
      "strategy": "default",
      "default": "5432"
    },
    {
      "key": "DB_USER",
      "service": "sidekiq",
      "description": "Postgres user",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDIS_URL",
      "service": "sidekiq",
      "description": "Cache, queues and pub/sub",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "S3_BUCKET",
      "service": "sidekiq",
      "description": "Media bucket name",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "S3_REGION",
      "service": "sidekiq",
      "description": "Bucket region",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_PORT",
      "service": "sidekiq",
      "description": "Outgoing mail port",
      "secret": false,
      "strategy": "default",
      "default": "1025"
    },
    {
      "key": "S3_ENABLED",
      "service": "sidekiq",
      "description": "Store uploads in object storage",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SMTP_LOGIN",
      "service": "sidekiq",
      "description": "SMTP username",
      "secret": false,
      "strategy": "default",
      "default": "mastodon"
    },
    {
      "key": "S3_ENDPOINT",
      "service": "sidekiq",
      "description": "Bucket API endpoint",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_SERVER",
      "service": "sidekiq",
      "description": "Outgoing mail host",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "LOCAL_DOMAIN",
      "service": "sidekiq",
      "description": "Federation identity, shared with web",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "MASTODON_ROLE",
      "service": "sidekiq",
      "description": "Runs every queue except scheduler",
      "secret": false,
      "strategy": "default",
      "default": "sidekiq"
    },
    {
      "key": "S3_ALIAS_HOST",
      "service": "sidekiq",
      "description": "Public hostname in media URLs",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "S3_PERMISSION",
      "service": "sidekiq",
      "description": "No public ACL on uploads",
      "secret": false,
      "strategy": "default",
      "default": "private"
    },
    {
      "key": "SMTP_PASSWORD",
      "service": "sidekiq",
      "description": "SMTP password",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "RAILS_LOG_LEVEL",
      "service": "sidekiq",
      "description": "Application log level",
      "secret": false,
      "strategy": "default",
      "default": "info"
    },
    {
      "key": "SECRET_KEY_BASE",
      "service": "sidekiq",
      "description": "Must match the web service",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_AUTH_METHOD",
      "service": "sidekiq",
      "description": "Plain SMTP authentication",
      "secret": false,
      "strategy": "default",
      "default": "plain"
    },
    {
      "key": "TRUSTED_PROXY_IP",
      "service": "sidekiq",
      "description": "Real client IP behind the edge",
      "secret": false,
      "strategy": "default",
      "default": "100.64.0.0/10,152.233.0.0/17,fd00::/8"
    },
    {
      "key": "AWS_ACCESS_KEY_ID",
      "service": "sidekiq",
      "description": "Bucket access key",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_FROM_ADDRESS",
      "service": "sidekiq",
      "description": "From address on outgoing mail",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "SIDEKIQ_CONCURRENCY",
      "service": "sidekiq",
      "description": "Threads per worker process",
      "secret": false,
      "strategy": "default",
      "default": "10"
    },
    {
      "key": "SMTP_ENABLE_STARTTLS",
      "service": "sidekiq",
      "description": "Private listener offers no STARTTLS",
      "secret": false,
      "strategy": "default",
      "default": "never"
    },
    {
      "key": "AWS_SECRET_ACCESS_KEY",
      "service": "sidekiq",
      "description": "Bucket secret key",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "STREAMING_API_BASE_URL",
      "service": "sidekiq",
      "description": "WebSocket origin for clients",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "S3_FORCE_SINGLE_REQUEST",
      "service": "sidekiq",
      "description": "Simpler object download path",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SMTP_ENABLE_STARTTLS_AUTO",
      "service": "sidekiq",
      "description": "Do not probe for STARTTLS",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "MASTODON_PROMETHEUS_EXPORTER_HOST",
      "service": "sidekiq",
      "description": "Metrics bind address",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0"
    },
    {
      "key": "MASTODON_PROMETHEUS_EXPORTER_PORT",
      "service": "sidekiq",
      "description": "Metrics listening port",
      "secret": false,
      "strategy": "default",
      "default": "9394"
    },
    {
      "key": "MASTODON_PROMETHEUS_EXPORTER_LOCAL",
      "service": "sidekiq",
      "description": "Serve metrics in-process",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY",
      "service": "sidekiq",
      "description": "Must match the web service",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MASTODON_PROMETHEUS_EXPORTER_ENABLED",
      "service": "sidekiq",
      "description": "Expose worker metrics",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY",
      "service": "sidekiq",
      "description": "Must match the web service",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT",
      "service": "sidekiq",
      "description": "Must match the web service",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDISHOST",
      "service": "Redis",
      "description": "Data panel alias, not read by the server",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDISPORT",
      "service": "Redis",
      "description": "Data panel alias, not read by the server",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDISUSER",
      "service": "Redis",
      "description": "Data panel alias, not read by the server",
      "secret": false,
      "strategy": "default",
      "default": "default"
    },
    {
      "key": "REDIS_URL",
      "service": "Redis",
      "description": "Private connection string",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDISPASSWORD",
      "service": "Redis",
      "description": "Data panel alias, not read by the server",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "Redis",
      "description": "Auth password, read by the server",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "BIND",
      "service": "streaming",
      "description": "Listen on all interfaces",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0"
    },
    {
      "key": "PORT",
      "service": "streaming",
      "description": "HTTP port Railway probes",
      "secret": false,
      "strategy": "default",
      "default": "4000"
    },
    {
      "key": "DB_HOST",
      "service": "streaming",
      "description": "Private Postgres hostname",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "DB_NAME",
      "service": "streaming",
      "description": "Postgres database name",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DB_PASS",
      "service": "streaming",
      "description": "Postgres password",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DB_POOL",
      "service": "streaming",
      "description": "Postgres connection pool size",
      "secret": false,
      "strategy": "default",
      "default": "10"
    },
    {
      "key": "DB_PORT",
      "service": "streaming",
      "description": "Postgres port",
      "secret": false,
      "strategy": "default",
      "default": "5432"
    },
    {
      "key": "DB_USER",
      "service": "streaming",
      "description": "Postgres user",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "NODE_ENV",
      "service": "streaming",
      "description": "Node environment",
      "secret": false,
      "strategy": "default",
      "default": "production"
    },
    {
      "key": "REDIS_URL",
      "service": "streaming",
      "description": "Streaming pub/sub channel",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "LOCAL_DOMAIN",
      "service": "streaming",
      "description": "Federation identity, shared with web",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "TRUSTED_PROXY_IP",
      "service": "streaming",
      "description": "Real client IP behind the edge",
      "secret": false,
      "strategy": "default",
      "default": "100.64.0.0/10,152.233.0.0/17,fd00::/8"
    },
    {
      "key": "PORT",
      "service": "mailpit",
      "description": "Web inbox port Railway probes",
      "secret": false,
      "strategy": "default",
      "default": "8025"
    },
    {
      "key": "MP_UI_AUTH",
      "service": "mailpit",
      "description": "Basic auth on the web inbox",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MP_DATABASE",
      "service": "mailpit",
      "description": "Message store on the volume",
      "secret": false,
      "strategy": "default",
      "default": "/data/mailpit.db"
    },
    {
      "key": "MP_SMTP_AUTH",
      "service": "mailpit",
      "description": "Credentials required to send",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MP_MAX_MESSAGES",
      "service": "mailpit",
      "description": "Messages retained before rotation",
      "secret": false,
      "strategy": "default",
      "default": "5000"
    },
    {
      "key": "MP_UI_BIND_ADDR",
      "service": "mailpit",
      "description": "Web inbox bind address",
      "secret": false,
      "strategy": "default",
      "default": "[::]:8025"
    },
    {
      "key": "MAILPIT_PASSWORD",
      "service": "mailpit",
      "description": "Shared inbox and SMTP password",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "MP_SMTP_BIND_ADDR",
      "service": "mailpit",
      "description": "SMTP bind address",
      "secret": false,
      "strategy": "default",
      "default": "[::]:1025"
    },
    {
      "key": "MP_SMTP_AUTH_ALLOW_INSECURE",
      "service": "mailpit",
      "description": "Allow auth on the plain listener",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "PORT",
      "service": "web",
      "description": "HTTP port Railway probes",
      "secret": false,
      "strategy": "default",
      "default": "3000"
    },
    {
      "key": "DB_HOST",
      "service": "web",
      "description": "Private Postgres hostname",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "DB_NAME",
      "service": "web",
      "description": "Postgres database name",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DB_PASS",
      "service": "web",
      "description": "Postgres password",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DB_PORT",
      "service": "web",
      "description": "Postgres port",
      "secret": false,
      "strategy": "default",
      "default": "5432"
    },
    {
      "key": "DB_USER",
      "service": "web",
      "description": "Postgres user",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDIS_URL",
      "service": "web",
      "description": "Cache, queues and pub/sub",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "S3_BUCKET",
      "service": "web",
      "description": "Media bucket name",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "S3_REGION",
      "service": "web",
      "description": "Bucket region",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_PORT",
      "service": "web",
      "description": "Outgoing mail port",
      "secret": false,
      "strategy": "default",
      "default": "1025"
    },
    {
      "key": "S3_ENABLED",
      "service": "web",
      "description": "Store uploads in object storage",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SMTP_LOGIN",
      "service": "web",
      "description": "SMTP username",
      "secret": false,
      "strategy": "default",
      "default": "mastodon"
    },
    {
      "key": "MAX_THREADS",
      "service": "web",
      "description": "Puma threads per worker",
      "secret": false,
      "strategy": "default",
      "default": "5"
    },
    {
      "key": "S3_ENDPOINT",
      "service": "web",
      "description": "Bucket API endpoint",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_SERVER",
      "service": "web",
      "description": "Outgoing mail host",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "LOCAL_DOMAIN",
      "service": "web",
      "description": "Permanent federation identity",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "MASTODON_ROLE",
      "service": "web",
      "description": "Selects the Puma web role",
      "secret": false,
      "strategy": "default",
      "default": "web"
    },
    {
      "key": "S3_ALIAS_HOST",
      "service": "web",
      "description": "Public hostname in media URLs",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "S3_PERMISSION",
      "service": "web",
      "description": "No public ACL on uploads",
      "secret": false,
      "strategy": "default",
      "default": "private"
    },
    {
      "key": "SMTP_PASSWORD",
      "service": "web",
      "description": "SMTP password",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "RAILS_LOG_LEVEL",
      "service": "web",
      "description": "Application log level",
      "secret": false,
      "strategy": "default",
      "default": "info"
    },
    {
      "key": "SECRET_KEY_BASE",
      "service": "web",
      "description": "Rails session signing key",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "WEB_CONCURRENCY",
      "service": "web",
      "description": "Puma worker processes",
      "secret": false,
      "strategy": "default",
      "default": "2"
    },
    {
      "key": "SMTP_AUTH_METHOD",
      "service": "web",
      "description": "Plain SMTP authentication",
      "secret": false,
      "strategy": "default",
      "default": "plain"
    },
    {
      "key": "TRUSTED_PROXY_IP",
      "service": "web",
      "description": "Real client IP behind the edge",
      "secret": false,
      "strategy": "default",
      "default": "100.64.0.0/10,152.233.0.0/17,fd00::/8"
    },
    {
      "key": "AWS_ACCESS_KEY_ID",
      "service": "web",
      "description": "Bucket access key",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SMTP_FROM_ADDRESS",
      "service": "web",
      "description": "From address on outgoing mail",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "SMTP_ENABLE_STARTTLS",
      "service": "web",
      "description": "Private listener offers no STARTTLS",
      "secret": false,
      "strategy": "default",
      "default": "never"
    },
    {
      "key": "AWS_SECRET_ACCESS_KEY",
      "service": "web",
      "description": "Bucket secret key",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "STREAMING_API_BASE_URL",
      "service": "web",
      "description": "WebSocket origin for clients",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "MASTODON_ADMIN_PASSWORD",
      "service": "web",
      "description": "Owner account password, change after first login",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "MASTODON_ADMIN_USERNAME",
      "service": "web",
      "description": "Owner account username",
      "secret": false,
      "strategy": "default",
      "default": "admin"
    },
    {
      "key": "S3_FORCE_SINGLE_REQUEST",
      "service": "web",
      "description": "Simpler object download path",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SMTP_ENABLE_STARTTLS_AUTO",
      "service": "web",
      "description": "Do not probe for STARTTLS",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY",
      "service": "web",
      "description": "At-rest encryption key",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY",
      "service": "web",
      "description": "Deterministic encryption key",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT",
      "service": "web",
      "description": "Encryption key derivation salt",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "PORT",
      "service": "media",
      "description": "HTTP port Railway probes",
      "secret": false,
      "strategy": "default",
      "default": "3000"
    },
    {
      "key": "S3_BUCKET",
      "service": "media",
      "description": "Media bucket name",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "S3_REGION",
      "service": "media",
      "description": "Bucket region",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "S3_ENDPOINT",
      "service": "media",
      "description": "Bucket API endpoint",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PUBLIC_PREFIXES",
      "service": "media",
      "description": "Key prefixes served publicly",
      "secret": false,
      "strategy": "default",
      "default": "media_attachments/,accounts/,custom_emojis/,preview_cards/,site_uploads/,cache/"
    },
    {
      "key": "S3_ACCESS_KEY_ID",
      "service": "media",
      "description": "Bucket access key",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "S3_SECRET_ACCESS_KEY",
      "service": "media",
      "description": "Bucket secret key",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGDATA",
      "service": "Postgres",
      "description": "Cluster location on the volume",
      "secret": false,
      "strategy": "default",
      "default": "/var/lib/postgresql/data/pgdata"
    },
    {
      "key": "PGHOST",
      "service": "Postgres",
      "description": "Data panel alias, not read by the server",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "PGPORT",
      "service": "Postgres",
      "description": "Data panel alias, not read by the server",
      "secret": false,
      "strategy": "default",
      "default": "5432"
    },
    {
      "key": "PGUSER",
      "service": "Postgres",
      "description": "Data panel alias, not read by the server",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGDATABASE",
      "service": "Postgres",
      "description": "Data panel alias, not read by the server",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGPASSWORD",
      "service": "Postgres",
      "description": "Data panel alias, not read by the server",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "POSTGRES_DB",
      "service": "Postgres",
      "description": "Database created on first boot",
      "secret": false,
      "strategy": "default",
      "default": "railway"
    },
    {
      "key": "DATABASE_URL",
      "service": "Postgres",
      "description": "Private connection string",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "POSTGRES_USER",
      "service": "Postgres",
      "description": "Superuser created on first boot",
      "secret": false,
      "strategy": "default",
      "default": "postgres"
    },
    {
      "key": "SSL_CERT_DAYS",
      "service": "Postgres",
      "description": "SSL certificate expiry in days",
      "secret": false,
      "strategy": "default",
      "default": "820"
    },
    {
      "key": "POSTGRES_PASSWORD",
      "service": "Postgres",
      "description": "Superuser password",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS",
      "service": "Postgres",
      "description": "Clean shutdown window",
      "secret": false,
      "strategy": "default",
      "default": "60"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "mastodon-server"
      }
    },
    "cli": "railway deploy --template mastodon-server",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "fd606cf4-e46d-422e-9823-d817f64878de",
            "serializedConfig": {
              "buckets": {
                "6c3829c5-47f5-40b8-8a14-5c767cd78b56": {
                  "name": "mastodon-media"
                }
              },
              "services": {
                "58f4059e-558b-4990-9f18-ba296c84523f": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/mastodon.svg",
                  "name": "sidekiq-scheduler",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/metrics",
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/gridalpha/mastodon-railway",
                    "rootDirectory": "mastodon"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "Metrics port used as health check",
                      "defaultValue": "9394"
                    },
                    "DB_HOST": {
                      "isOptional": false,
                      "description": "Private Postgres hostname",
                      "defaultValue": "${{Postgres.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "DB_NAME": {
                      "isOptional": false,
                      "description": "Postgres database name",
                      "defaultValue": "${{Postgres.PGDATABASE}}"
                    },
                    "DB_PASS": {
                      "isOptional": false,
                      "description": "Postgres password",
                      "defaultValue": "${{Postgres.PGPASSWORD}}"
                    },
                    "DB_PORT": {
                      "isOptional": false,
                      "description": "Postgres port",
                      "defaultValue": "5432"
                    },
                    "DB_USER": {
                      "isOptional": false,
                      "description": "Postgres user",
                      "defaultValue": "${{Postgres.PGUSER}}"
                    },
                    "REDIS_URL": {
                      "isOptional": false,
                      "description": "Cache, queues and pub/sub",
                      "defaultValue": "${{Redis.REDIS_URL}}"
                    },
                    "S3_BUCKET": {
                      "isOptional": false,
                      "description": "Media bucket name",
                      "defaultValue": "${{mastodon-media.BUCKET}}"
                    },
                    "S3_REGION": {
                      "isOptional": false,
                      "description": "Bucket region",
                      "defaultValue": "${{mastodon-media.REGION}}"
                    },
                    "SMTP_PORT": {
                      "isOptional": false,
                      "description": "Outgoing mail port",
                      "defaultValue": "1025"
                    },
                    "S3_ENABLED": {
                      "isOptional": false,
                      "description": "Store uploads in object storage",
                      "defaultValue": "true"
                    },
                    "SMTP_LOGIN": {
                      "isOptional": false,
                      "description": "SMTP username",
                      "defaultValue": "mastodon"
                    },
                    "S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "Bucket API endpoint",
                      "defaultValue": "${{mastodon-media.ENDPOINT}}"
                    },
                    "SMTP_SERVER": {
                      "isOptional": false,
                      "description": "Outgoing mail host",
                      "defaultValue": "${{mailpit.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "LOCAL_DOMAIN": {
                      "isOptional": false,
                      "description": "Federation identity, shared with web",
                      "defaultValue": "${{web.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "MASTODON_ROLE": {
                      "isOptional": false,
                      "description": "Runs the scheduler queue only, one replica",
                      "defaultValue": "sidekiq-scheduler"
                    },
                    "S3_ALIAS_HOST": {
                      "isOptional": false,
                      "description": "Public hostname in media URLs",
                      "defaultValue": "${{media.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "S3_PERMISSION": {
                      "isOptional": false,
                      "description": "No public ACL on uploads",
                      "defaultValue": "private"
                    },
                    "SMTP_PASSWORD": {
                      "isOptional": false,
                      "description": "SMTP password",
                      "defaultValue": "${{mailpit.MAILPIT_PASSWORD}}"
                    },
                    "RAILS_LOG_LEVEL": {
                      "isOptional": false,
                      "description": "Application log level",
                      "defaultValue": "info"
                    },
                    "SECRET_KEY_BASE": {
                      "isOptional": false,
                      "description": "Must match the web service",
                      "defaultValue": "${{web.SECRET_KEY_BASE}}"
                    },
                    "SMTP_AUTH_METHOD": {
                      "isOptional": false,
                      "description": "Plain SMTP authentication",
                      "defaultValue": "plain"
                    },
                    "TRUSTED_PROXY_IP": {
                      "isOptional": false,
                      "description": "Real client IP behind the edge",
                      "defaultValue": "100.64.0.0/10,152.233.0.0/17,fd00::/8"
                    },
                    "AWS_ACCESS_KEY_ID": {
                      "isOptional": false,
                      "description": "Bucket access key",
                      "defaultValue": "${{mastodon-media.ACCESS_KEY_ID}}"
                    },
                    "SMTP_FROM_ADDRESS": {
                      "isOptional": false,
                      "description": "From address on outgoing mail",
                      "defaultValue": "notifications@${{web.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "SIDEKIQ_CONCURRENCY": {
                      "isOptional": false,
                      "description": "Threads for scheduled jobs",
                      "defaultValue": "5"
                    },
                    "SMTP_ENABLE_STARTTLS": {
                      "isOptional": false,
                      "description": "Private listener offers no STARTTLS",
                      "defaultValue": "never"
                    },
                    "AWS_SECRET_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "Bucket secret key",
                      "defaultValue": "${{mastodon-media.SECRET_ACCESS_KEY}}"
                    },
                    "STREAMING_API_BASE_URL": {
                      "isOptional": false,
                      "description": "WebSocket origin for clients",
                      "defaultValue": "wss://${{streaming.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "S3_FORCE_SINGLE_REQUEST": {
                      "isOptional": false,
                      "description": "Simpler object download path",
                      "defaultValue": "true"
                    },
                    "SMTP_ENABLE_STARTTLS_AUTO": {
                      "isOptional": false,
                      "description": "Do not probe for STARTTLS",
                      "defaultValue": "false"
                    },
                    "MASTODON_PROMETHEUS_EXPORTER_HOST": {
                      "isOptional": false,
                      "description": "Metrics bind address",
                      "defaultValue": "0.0.0.0"
                    },
                    "MASTODON_PROMETHEUS_EXPORTER_PORT": {
                      "isOptional": false,
                      "description": "Metrics listening port",
                      "defaultValue": "9394"
                    },
                    "MASTODON_PROMETHEUS_EXPORTER_LOCAL": {
                      "isOptional": false,
                      "description": "Serve metrics in-process",
                      "defaultValue": "true"
                    },
                    "ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY": {
                      "isOptional": false,
                      "description": "Must match the web service",
                      "defaultValue": "${{web.ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY}}"
                    },
                    "MASTODON_PROMETHEUS_EXPORTER_ENABLED": {
                      "isOptional": false,
                      "description": "Expose worker metrics",
                      "defaultValue": "true"
                    },
                    "ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY": {
                      "isOptional": false,
                      "description": "Must match the web service",
                      "defaultValue": "${{web.ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY}}"
                    },
                    "ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT": {
                      "isOptional": false,
                      "description": "Must match the web service",
                      "defaultValue": "${{web.ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT}}"
                    }
                  }
                },
                "9543444b-9fc7-4c79-b953-cd8070e382fa": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/mastodon.svg",
                  "name": "sidekiq",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/metrics",
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/gridalpha/mastodon-railway",
                    "rootDirectory": "mastodon"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "Metrics port used as health check",
                      "defaultValue": "9394"
                    },
                    "DB_HOST": {
                      "isOptional": false,
                      "description": "Private Postgres hostname",
                      "defaultValue": "${{Postgres.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "DB_NAME": {
                      "isOptional": false,
                      "description": "Postgres database name",
                      "defaultValue": "${{Postgres.PGDATABASE}}"
                    },
                    "DB_PASS": {
                      "isOptional": false,
                      "description": "Postgres password",
                      "defaultValue": "${{Postgres.PGPASSWORD}}"
                    },
                    "DB_PORT": {
                      "isOptional": false,
                      "description": "Postgres port",
                      "defaultValue": "5432"
                    },
                    "DB_USER": {
                      "isOptional": false,
                      "description": "Postgres user",
                      "defaultValue": "${{Postgres.PGUSER}}"
                    },
                    "REDIS_URL": {
                      "isOptional": false,
                      "description": "Cache, queues and pub/sub",
                      "defaultValue": "${{Redis.REDIS_URL}}"
                    },
                    "S3_BUCKET": {
                      "isOptional": false,
                      "description": "Media bucket name",
                      "defaultValue": "${{mastodon-media.BUCKET}}"
                    },
                    "S3_REGION": {
                      "isOptional": false,
                      "description": "Bucket region",
                      "defaultValue": "${{mastodon-media.REGION}}"
                    },
                    "SMTP_PORT": {
                      "isOptional": false,
                      "description": "Outgoing mail port",
                      "defaultValue": "1025"
                    },
                    "S3_ENABLED": {
                      "isOptional": false,
                      "description": "Store uploads in object storage",
                      "defaultValue": "true"
                    },
                    "SMTP_LOGIN": {
                      "isOptional": false,
                      "description": "SMTP username",
                      "defaultValue": "mastodon"
                    },
                    "S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "Bucket API endpoint",
                      "defaultValue": "${{mastodon-media.ENDPOINT}}"
                    },
                    "SMTP_SERVER": {
                      "isOptional": false,
                      "description": "Outgoing mail host",
                      "defaultValue": "${{mailpit.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "LOCAL_DOMAIN": {
                      "isOptional": false,
                      "description": "Federation identity, shared with web",
                      "defaultValue": "${{web.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "MASTODON_ROLE": {
                      "isOptional": false,
                      "description": "Runs every queue except scheduler",
                      "defaultValue": "sidekiq"
                    },
                    "S3_ALIAS_HOST": {
                      "isOptional": false,
                      "description": "Public hostname in media URLs",
                      "defaultValue": "${{media.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "S3_PERMISSION": {
                      "isOptional": false,
                      "description": "No public ACL on uploads",
                      "defaultValue": "private"
                    },
                    "SMTP_PASSWORD": {
                      "isOptional": false,
                      "description": "SMTP password",
                      "defaultValue": "${{mailpit.MAILPIT_PASSWORD}}"
                    },
                    "RAILS_LOG_LEVEL": {
                      "isOptional": false,
                      "description": "Application log level",
                      "defaultValue": "info"
                    },
                    "SECRET_KEY_BASE": {
                      "isOptional": false,
                      "description": "Must match the web service",
                      "defaultValue": "${{web.SECRET_KEY_BASE}}"
                    },
                    "SMTP_AUTH_METHOD": {
                      "isOptional": false,
                      "description": "Plain SMTP authentication",
                      "defaultValue": "plain"
                    },
                    "TRUSTED_PROXY_IP": {
                      "isOptional": false,
                      "description": "Real client IP behind the edge",
                      "defaultValue": "100.64.0.0/10,152.233.0.0/17,fd00::/8"
                    },
                    "AWS_ACCESS_KEY_ID": {
                      "isOptional": false,
                      "description": "Bucket access key",
                      "defaultValue": "${{mastodon-media.ACCESS_KEY_ID}}"
                    },
                    "SMTP_FROM_ADDRESS": {
                      "isOptional": false,
                      "description": "From address on outgoing mail",
                      "defaultValue": "notifications@${{web.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "SIDEKIQ_CONCURRENCY": {
                      "isOptional": false,
                      "description": "Threads per worker process",
                      "defaultValue": "10"
                    },
                    "SMTP_ENABLE_STARTTLS": {
                      "isOptional": false,
                      "description": "Private listener offers no STARTTLS",
                      "defaultValue": "never"
                    },
                    "AWS_SECRET_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "Bucket secret key",
                      "defaultValue": "${{mastodon-media.SECRET_ACCESS_KEY}}"
                    },
                    "STREAMING_API_BASE_URL": {
                      "isOptional": false,
                      "description": "WebSocket origin for clients",
                      "defaultValue": "wss://${{streaming.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "S3_FORCE_SINGLE_REQUEST": {
                      "isOptional": false,
                      "description": "Simpler object download path",
                      "defaultValue": "true"
                    },
                    "SMTP_ENABLE_STARTTLS_AUTO": {
                      "isOptional": false,
                      "description": "Do not probe for STARTTLS",
                      "defaultValue": "false"
                    },
                    "MASTODON_PROMETHEUS_EXPORTER_HOST": {
                      "isOptional": false,
                      "description": "Metrics bind address",
                      "defaultValue": "0.0.0.0"
                    },
                    "MASTODON_PROMETHEUS_EXPORTER_PORT": {
                      "isOptional": false,
                      "description": "Metrics listening port",
                      "defaultValue": "9394"
                    },
                    "MASTODON_PROMETHEUS_EXPORTER_LOCAL": {
                      "isOptional": false,
                      "description": "Serve metrics in-process",
                      "defaultValue": "true"
                    },
                    "ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY": {
                      "isOptional": false,
                      "description": "Must match the web service",
                      "defaultValue": "${{web.ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY}}"
                    },
                    "MASTODON_PROMETHEUS_EXPORTER_ENABLED": {
                      "isOptional": false,
                      "description": "Expose worker metrics",
                      "defaultValue": "true"
                    },
                    "ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY": {
                      "isOptional": false,
                      "description": "Must match the web service",
                      "defaultValue": "${{web.ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY}}"
                    },
                    "ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT": {
                      "isOptional": false,
                      "description": "Must match the web service",
                      "defaultValue": "${{web.ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT}}"
                    }
                  }
                },
                "b0cb5c5f-5e8a-4371-a1a1-36d31de0e92b": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/redis.svg",
                  "name": "Redis",
                  "deploy": {
                    "startCommand": "/bin/sh -c \"rm -rf $RAILWAY_VOLUME_MOUNT_PATH/lost+found/ && exec docker-entrypoint.sh redis-server --requirepass $REDIS_PASSWORD --save 60 1 --dir $RAILWAY_VOLUME_MOUNT_PATH\"",
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "redis:8.2"
                  },
                  "variables": {
                    "REDISHOST": {
                      "isOptional": false,
                      "description": "Data panel alias, not read by the server",
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDISPORT": {
                      "isOptional": false,
                      "description": "Data panel alias, not read by the server",
                      "defaultValue": "6379"
                    },
                    "REDISUSER": {
                      "isOptional": false,
                      "description": "Data panel alias, not read by the server",
                      "defaultValue": "default"
                    },
                    "REDIS_URL": {
                      "isOptional": false,
                      "description": "Private connection string",
                      "defaultValue": "redis://${{REDISUSER}}:${{REDIS_PASSWORD}}@${{REDISHOST}}:${{REDISPORT}}"
                    },
                    "REDISPASSWORD": {
                      "isOptional": false,
                      "description": "Data panel alias, not read by the server",
                      "defaultValue": "${{REDIS_PASSWORD}}"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Auth password, read by the server",
                      "defaultValue": "{{REDIS_PASSWORD}}"
                    }
                  },
                  "volumeMounts": {
                    "b0cb5c5f-5e8a-4371-a1a1-36d31de0e92b": {
                      "mountPath": "/data"
                    }
                  }
                },
                "b7f3ce22-151b-4a29-a99c-4834798c70b1": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/mastodon.svg",
                  "name": "streaming",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/api/v1/streaming/health",
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "ghcr.io/mastodon/mastodon-streaming:v4.7.0"
                  },
                  "variables": {
                    "BIND": {
                      "isOptional": false,
                      "description": "Listen on all interfaces",
                      "defaultValue": "0.0.0.0"
                    },
                    "PORT": {
                      "isOptional": false,
                      "description": "HTTP port Railway probes",
                      "defaultValue": "4000"
                    },
                    "DB_HOST": {
                      "isOptional": false,
                      "description": "Private Postgres hostname",
                      "defaultValue": "${{Postgres.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "DB_NAME": {
                      "isOptional": false,
                      "description": "Postgres database name",
                      "defaultValue": "${{Postgres.PGDATABASE}}"
                    },
                    "DB_PASS": {
                      "isOptional": false,
                      "description": "Postgres password",
                      "defaultValue": "${{Postgres.PGPASSWORD}}"
                    },
                    "DB_POOL": {
                      "isOptional": false,
                      "description": "Postgres connection pool size",
                      "defaultValue": "10"
                    },
                    "DB_PORT": {
                      "isOptional": false,
                      "description": "Postgres port",
                      "defaultValue": "5432"
                    },
                    "DB_USER": {
                      "isOptional": false,
                      "description": "Postgres user",
                      "defaultValue": "${{Postgres.PGUSER}}"
                    },
                    "NODE_ENV": {
                      "isOptional": false,
                      "description": "Node environment",
                      "defaultValue": "production"
                    },
                    "REDIS_URL": {
                      "isOptional": false,
                      "description": "Streaming pub/sub channel",
                      "defaultValue": "${{Redis.REDIS_URL}}"
                    },
                    "LOCAL_DOMAIN": {
                      "isOptional": false,
                      "description": "Federation identity, shared with web",
                      "defaultValue": "${{web.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "TRUSTED_PROXY_IP": {
                      "isOptional": false,
                      "description": "Real client IP behind the edge",
                      "defaultValue": "100.64.0.0/10,152.233.0.0/17,fd00::/8"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  }
                },
                "bb9f4847-e10a-416d-98ac-f02ad1e20900": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/mailpit.svg",
                  "name": "mailpit",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/livez",
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "axllent/mailpit:latest"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "Web inbox port Railway probes",
                      "defaultValue": "8025"
                    },
                    "MP_UI_AUTH": {
                      "isOptional": false,
                      "description": "Basic auth on the web inbox",
                      "defaultValue": "mastodon:${{MAILPIT_PASSWORD}}"
                    },
                    "MP_DATABASE": {
                      "isOptional": false,
                      "description": "Message store on the volume",
                      "defaultValue": "/data/mailpit.db"
                    },
                    "MP_SMTP_AUTH": {
                      "isOptional": false,
                      "description": "Credentials required to send",
                      "defaultValue": "mastodon:${{MAILPIT_PASSWORD}}"
                    },
                    "MP_MAX_MESSAGES": {
                      "isOptional": false,
                      "description": "Messages retained before rotation",
                      "defaultValue": "5000"
                    },
                    "MP_UI_BIND_ADDR": {
                      "isOptional": false,
                      "description": "Web inbox bind address",
                      "defaultValue": "[::]:8025"
                    },
                    "MAILPIT_PASSWORD": {
                      "description": "Shared inbox and SMTP password",
                      "defaultValue": "{{MAILPIT_PASSWORD}}"
                    },
                    "MP_SMTP_BIND_ADDR": {
                      "isOptional": false,
                      "description": "SMTP bind address",
                      "defaultValue": "[::]:1025"
                    },
                    "MP_SMTP_AUTH_ALLOW_INSECURE": {
                      "isOptional": false,
                      "description": "Allow auth on the plain listener",
                      "defaultValue": "true"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  },
                  "volumeMounts": {
                    "bb9f4847-e10a-416d-98ac-f02ad1e20900": {
                      "mountPath": "/data"
                    }
                  }
                },
                "d6fc8e51-1fa4-4303-8f19-8c10fde846b7": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/mastodon.svg",
                  "name": "web",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/health",
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/gridalpha/mastodon-railway",
                    "rootDirectory": "mastodon"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "HTTP port Railway probes",
                      "defaultValue": "3000"
                    },
                    "DB_HOST": {
                      "isOptional": false,
                      "description": "Private Postgres hostname",
                      "defaultValue": "${{Postgres.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "DB_NAME": {
                      "isOptional": false,
                      "description": "Postgres database name",
                      "defaultValue": "${{Postgres.PGDATABASE}}"
                    },
                    "DB_PASS": {
                      "isOptional": false,
                      "description": "Postgres password",
                      "defaultValue": "${{Postgres.PGPASSWORD}}"
                    },
                    "DB_PORT": {
                      "isOptional": false,
                      "description": "Postgres port",
                      "defaultValue": "5432"
                    },
                    "DB_USER": {
                      "isOptional": false,
                      "description": "Postgres user",
                      "defaultValue": "${{Postgres.PGUSER}}"
                    },
                    "REDIS_URL": {
                      "isOptional": false,
                      "description": "Cache, queues and pub/sub",
                      "defaultValue": "${{Redis.REDIS_URL}}"
                    },
                    "S3_BUCKET": {
                      "isOptional": false,
                      "description": "Media bucket name",
                      "defaultValue": "${{mastodon-media.BUCKET}}"
                    },
                    "S3_REGION": {
                      "isOptional": false,
                      "description": "Bucket region",
                      "defaultValue": "${{mastodon-media.REGION}}"
                    },
                    "SMTP_PORT": {
                      "isOptional": false,
                      "description": "Outgoing mail port",
                      "defaultValue": "1025"
                    },
                    "S3_ENABLED": {
                      "isOptional": false,
                      "description": "Store uploads in object storage",
                      "defaultValue": "true"
                    },
                    "SMTP_LOGIN": {
                      "isOptional": false,
                      "description": "SMTP username",
                      "defaultValue": "mastodon"
                    },
                    "MAX_THREADS": {
                      "isOptional": false,
                      "description": "Puma threads per worker",
                      "defaultValue": "5"
                    },
                    "S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "Bucket API endpoint",
                      "defaultValue": "${{mastodon-media.ENDPOINT}}"
                    },
                    "SMTP_SERVER": {
                      "isOptional": false,
                      "description": "Outgoing mail host",
                      "defaultValue": "${{mailpit.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "LOCAL_DOMAIN": {
                      "isOptional": false,
                      "description": "Permanent federation identity",
                      "defaultValue": "${{RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "MASTODON_ROLE": {
                      "isOptional": false,
                      "description": "Selects the Puma web role",
                      "defaultValue": "web"
                    },
                    "S3_ALIAS_HOST": {
                      "isOptional": false,
                      "description": "Public hostname in media URLs",
                      "defaultValue": "${{media.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "S3_PERMISSION": {
                      "isOptional": false,
                      "description": "No public ACL on uploads",
                      "defaultValue": "private"
                    },
                    "SMTP_PASSWORD": {
                      "isOptional": false,
                      "description": "SMTP password",
                      "defaultValue": "${{mailpit.MAILPIT_PASSWORD}}"
                    },
                    "RAILS_LOG_LEVEL": {
                      "isOptional": false,
                      "description": "Application log level",
                      "defaultValue": "info"
                    },
                    "SECRET_KEY_BASE": {
                      "isOptional": false,
                      "description": "Rails session signing key",
                      "defaultValue": "{{SECRET_KEY_BASE}}"
                    },
                    "WEB_CONCURRENCY": {
                      "isOptional": false,
                      "description": "Puma worker processes",
                      "defaultValue": "2"
                    },
                    "SMTP_AUTH_METHOD": {
                      "isOptional": false,
                      "description": "Plain SMTP authentication",
                      "defaultValue": "plain"
                    },
                    "TRUSTED_PROXY_IP": {
                      "isOptional": false,
                      "description": "Real client IP behind the edge",
                      "defaultValue": "100.64.0.0/10,152.233.0.0/17,fd00::/8"
                    },
                    "AWS_ACCESS_KEY_ID": {
                      "isOptional": false,
                      "description": "Bucket access key",
                      "defaultValue": "${{mastodon-media.ACCESS_KEY_ID}}"
                    },
                    "SMTP_FROM_ADDRESS": {
                      "isOptional": false,
                      "description": "From address on outgoing mail",
                      "defaultValue": "notifications@${{RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "SMTP_ENABLE_STARTTLS": {
                      "isOptional": false,
                      "description": "Private listener offers no STARTTLS",
                      "defaultValue": "never"
                    },
                    "AWS_SECRET_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "Bucket secret key",
                      "defaultValue": "${{mastodon-media.SECRET_ACCESS_KEY}}"
                    },
                    "STREAMING_API_BASE_URL": {
                      "isOptional": false,
                      "description": "WebSocket origin for clients",
                      "defaultValue": "wss://${{streaming.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "MASTODON_ADMIN_PASSWORD": {
                      "isOptional": false,
                      "description": "Owner account password, change after first login",
                      "defaultValue": "{{MASTODON_ADMIN_PASSWORD}}"
                    },
                    "MASTODON_ADMIN_USERNAME": {
                      "isOptional": false,
                      "description": "Owner account username",
                      "defaultValue": "admin"
                    },
                    "S3_FORCE_SINGLE_REQUEST": {
                      "isOptional": false,
                      "description": "Simpler object download path",
                      "defaultValue": "true"
                    },
                    "SMTP_ENABLE_STARTTLS_AUTO": {
                      "isOptional": false,
                      "description": "Do not probe for STARTTLS",
                      "defaultValue": "false"
                    },
                    "ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY": {
                      "isOptional": false,
                      "description": "At-rest encryption key",
                      "defaultValue": "{{ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY}}"
                    },
                    "ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY": {
                      "isOptional": false,
                      "description": "Deterministic encryption key",
                      "defaultValue": "{{ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY}}"
                    },
                    "ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT": {
                      "isOptional": false,
                      "description": "Encryption key derivation salt",
                      "defaultValue": "{{ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT}}"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  }
                },
                "e4ed8079-54af-4728-8448-e7caf86a8acf": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/mastodon.svg",
                  "name": "media",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/healthz",
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/gridalpha/mastodon-railway",
                    "rootDirectory": "media-gateway"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "HTTP port Railway probes",
                      "defaultValue": "3000"
                    },
                    "S3_BUCKET": {
                      "isOptional": false,
                      "description": "Media bucket name",
                      "defaultValue": "${{mastodon-media.BUCKET}}"
                    },
                    "S3_REGION": {
                      "isOptional": false,
                      "description": "Bucket region",
                      "defaultValue": "${{mastodon-media.REGION}}"
                    },
                    "S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "Bucket API endpoint",
                      "defaultValue": "${{mastodon-media.ENDPOINT}}"
                    },
                    "PUBLIC_PREFIXES": {
                      "isOptional": false,
                      "description": "Key prefixes served publicly",
                      "defaultValue": "media_attachments/,accounts/,custom_emojis/,preview_cards/,site_uploads/,cache/"
                    },
                    "S3_ACCESS_KEY_ID": {
                      "isOptional": false,
                      "description": "Bucket access key",
                      "defaultValue": "${{mastodon-media.ACCESS_KEY_ID}}"
                    },
                    "S3_SECRET_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "Bucket secret key",
                      "defaultValue": "${{mastodon-media.SECRET_ACCESS_KEY}}"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  }
                },
                "e83ae77f-c853-47b4-84c3-be5c29c2cfd7": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/postgresql.svg",
                  "name": "Postgres",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "ghcr.io/railwayapp-templates/postgres-ssl:18"
                  },
                  "variables": {
                    "PGDATA": {
                      "isOptional": false,
                      "description": "Cluster location on the volume",
                      "defaultValue": "/var/lib/postgresql/data/pgdata"
                    },
                    "PGHOST": {
                      "isOptional": false,
                      "description": "Data panel alias, not read by the server",
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "PGPORT": {
                      "isOptional": false,
                      "description": "Data panel alias, not read by the server",
                      "defaultValue": "5432"
                    },
                    "PGUSER": {
                      "isOptional": false,
                      "description": "Data panel alias, not read by the server",
                      "defaultValue": "${{POSTGRES_USER}}"
                    },
                    "PGDATABASE": {
                      "isOptional": false,
                      "description": "Data panel alias, not read by the server",
                      "defaultValue": "${{POSTGRES_DB}}"
                    },
                    "PGPASSWORD": {
                      "isOptional": false,
                      "description": "Data panel alias, not read by the server",
                      "defaultValue": "${{POSTGRES_PASSWORD}}"
                    },
                    "POSTGRES_DB": {
                      "isOptional": false,
                      "description": "Database created on first boot",
                      "defaultValue": "railway"
                    },
                    "DATABASE_URL": {
                      "isOptional": false,
                      "description": "Private connection string",
                      "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{PGDATABASE}}"
                    },
                    "POSTGRES_USER": {
                      "isOptional": false,
                      "description": "Superuser created on first boot",
                      "defaultValue": "postgres"
                    },
                    "SSL_CERT_DAYS": {
                      "isOptional": false,
                      "description": "SSL certificate expiry in days",
                      "defaultValue": "820"
                    },
                    "POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Superuser password",
                      "defaultValue": "{{POSTGRES_PASSWORD}}"
                    },
                    "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": {
                      "isOptional": false,
                      "description": "Clean shutdown window",
                      "defaultValue": "60"
                    }
                  },
                  "volumeMounts": {
                    "e83ae77f-c853-47b4-84c3-be5c29c2cfd7": {
                      "mountPath": "/var/lib/postgresql/data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "streaming",
      "method": "GET",
      "path": "/api/v1/streaming/health",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 8,
    "needs_volume": true
  },
  "generated_at": "2026-09-20T10:14:37.339Z",
  "generator_version": "0.1.0",
  "status": "degraded",
  "validated_at": "2026-09-19T12:45:26.593Z",
  "success_rate_30d": 0.1667,
  "validation": {
    "last_run_id": "run_3069d78b4342456b92cf",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": false,
        "detail": "Your workspace has been restricted. Please contact support to resolve this."
      }
    ],
    "typical_ready_seconds": 97
  }
}
