{ "manifest_version": "1.0.0", "template": { "id": "39936187-bf40-4724-8761-d4208d07cebc", "slug": "multica-v06-ai-agent-team-workspace", "name": "Multica v0.6 AI Agent Team Workspace", "description": "Assign issues to coding agents like teammates and track every run.", "url": "https://railway.com/deploy/multica-v06-ai-agent-team-workspace", "upstream": { "repo_url": "https://github.com/baranberkay96/multica-railway" } }, "status": "unvalidated", "validated_at": null, "success_rate_30d": null, "services": [ { "name": "Multica Web", "source": { "image": "ghcr.io/multica-ai/multica-web:v0.6.2" }, "needs_volume": false, "http": false }, { "name": "Gateway", "source": { "repo": "https://github.com/baranberkay96/multica-railway" }, "needs_volume": false, "http": true }, { "name": "Postgres", "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:17" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false }, { "name": "Redis", "source": { "image": "redis:8.2" }, "needs_volume": true, "volume_mount_path": "/data", "http": false }, { "name": "Multica Backend", "source": { "image": "ghcr.io/multica-ai/multica-backend:v0.6.2" }, "needs_volume": false, "http": false }, { "name": "Agent Runtime", "source": { "repo": "https://github.com/baranberkay96/multica-railway" }, "needs_volume": true, "volume_mount_path": "/home/agent", "http": false } ], "required_inputs": [ { "key": "PORT", "service": "Multica Web", "description": "Port the Next.js server listens on (the gateway and the healthcheck use it).", "secret": false, "strategy": "default", "default": "3000" }, { "key": "DOCS_URL", "service": "Multica Web", "description": "Where /docs is proxied to. Leave the official docs or clear it to disable /docs.", "secret": false, "strategy": "default", "default": "https://multica.ai" }, { "key": "HOSTNAME", "service": "Multica Web", "description": "Bind address. '::' is dual-stack in Node, so IPv4 and IPv6 private networking both work.", "secret": false, "strategy": "default", "default": "::" }, { "key": "REMOTE_API_URL", "service": "Multica Web", "description": "Backend origin (no path). The web server forwards /api, /auth, /v1 and /uploads there at runtime.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PORT", "service": "Gateway", "description": "Port Caddy listens on; the public domain and the healthcheck target it.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "MULTICA_WEB_UPSTREAM", "service": "Gateway", "description": "Private address of the Multica web app (receives every path not listed below).", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "MULTICA_BACKEND_UPSTREAM", "service": "Gateway", "description": "Private address of the Multica backend (receives /ws, /api/daemon/ws and /health).", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGDATA", "service": "Postgres", "description": "Location where the database will be initialized.", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "PGHOST", "service": "Postgres", "description": "Railway Private Domain Name.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGPORT", "service": "Postgres", "description": "Port to connect to Postgres.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "PGUSER", "service": "Postgres", "description": "Required variable for the Data panel.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGDATABASE", "service": "Postgres", "description": "Required variable for the Data panel.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGPASSWORD", "service": "Postgres", "description": "Required variable for the Data panel.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_DB", "service": "Postgres", "description": "Default database created when the image is started.", "secret": false, "strategy": "default", "default": "railway" }, { "key": "DATABASE_URL", "service": "Postgres", "description": "URL to connect to the Postgres database.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_USER", "service": "Postgres", "description": "User to connect to the Postgres DB.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "SSL_CERT_DAYS", "service": "Postgres", "description": "SSL certificate expiry in days.", "secret": false, "strategy": "default", "default": "820" }, { "key": "POSTGRES_PASSWORD", "service": "Postgres", "description": "Password to connect to the DB (generated).", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "Postgres", "description": "Allow Postgres to shut down cleanly.", "secret": false, "strategy": "default", "default": "60" }, { "key": "REDISHOST", "service": "Redis", "description": "Private network hostname of the Redis service, only resolvable from services in the same environment.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "REDISPORT", "service": "Redis", "description": "Port that Redis listens on.", "secret": false, "strategy": "default", "default": "6379" }, { "key": "REDISUSER", "service": "Redis", "description": "Username for authenticating with Redis.", "secret": false, "strategy": "default", "default": "default" }, { "key": "REDIS_URL", "service": "Redis", "description": "Connection string for connecting to Redis using the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDISPASSWORD", "service": "Redis", "description": "Alias of REDIS_PASSWORD for clients that expect the unseparated name.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_PASSWORD", "service": "Redis", "description": "Randomly generated password for authenticating with Redis.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "PORT", "service": "Multica Backend", "description": "Port of the Go API/WebSocket server (dual-stack); the healthcheck probes it.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "APP_ENV", "service": "Multica Backend", "description": "Enables production safety checks (insecure JWT secrets and fixed verification codes are refused).", "secret": false, "strategy": "default", "default": "production" }, { "key": "REDIS_URL", "service": "Multica Backend", "description": "Redis for per-IP auth rate limiting, the realtime relay between replicas and task-claim caches.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_BUCKET", "service": "Multica Backend", "description": "Railway Bucket name for attachments, avatars and uploads.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_REGION", "service": "Multica Backend", "description": "Bucket region (used for request signing).", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "JWT_SECRET", "service": "Multica Backend", "description": "Signs sessions, daemon tokens and attachment/avatar URL signatures (generated). Changing it logs everyone out.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "ALLOW_SIGNUP", "service": "Multica Backend", "description": "Keep false: new accounts only for ALLOWED_EMAILS, ALLOWED_EMAIL_DOMAINS or workspace invitations.", "secret": false, "strategy": "default", "default": "false" }, { "key": "DATABASE_URL", "service": "Multica Backend", "description": "Postgres connection string on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ALLOWED_EMAILS", "service": "Multica Backend", "description": "REQUIRED. Your email address (comma-separated for several). Only these addresses, allowed domains and invited people can sign up.", "secret": false, "strategy": "ask_user" }, { "key": "FRONTEND_ORIGIN", "service": "Multica Backend", "description": "Public URL of the app (the Gateway domain). Change it when you add a custom domain.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "MULTICA_APP_URL", "service": "Multica Backend", "description": "App URL used in invitation emails, CLI login and links.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "AWS_ENDPOINT_URL", "service": "Multica Backend", "description": "S3-compatible endpoint of the Railway Bucket.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "AWS_ACCESS_KEY_ID", "service": "Multica Backend", "description": "Bucket access key.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_USE_PATH_STYLE", "service": "Multica Backend", "description": "Railway Buckets use virtual-hosted-style addressing. Set true only if the bucket's Credentials tab says path-style.", "secret": false, "strategy": "default", "default": "false" }, { "key": "DATABASE_MAX_CONNS", "service": "Multica Backend", "description": "Max Postgres connections per backend replica. Keep replicas x this well below Postgres max_connections (100).", "secret": false, "strategy": "default", "default": "20" }, { "key": "MULTICA_PUBLIC_URL", "service": "Multica Backend", "description": "Public API URL for webhook URLs and the daemon setup command shown in the UI (same origin via the Gateway).", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "GOOGLE_REDIRECT_URI", "service": "Multica Backend", "description": "OAuth callback to register in Google Cloud Console when Google login is enabled.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CORS_ALLOWED_ORIGINS", "service": "Multica Backend", "description": "Origins allowed for CORS and the realtime WebSocket origin check.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "AWS_SECRET_ACCESS_KEY", "service": "Multica Backend", "description": "Bucket secret key.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "MULTICA_VCS_SECRET_KEY", "service": "Multica Backend", "description": "Base64 32-byte key encrypting Git provider tokens at rest (generated). Keep it; losing it makes stored tokens unreadable.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "REALTIME_METRICS_TOKEN", "service": "Multica Backend", "description": "Bearer token protecting /health/realtime metrics (generated).", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "MULTICA_TRUSTED_PROXIES", "service": "Multica Backend", "description": "Same trusted ranges for the webhook rate limiter and the WebSocket origin check.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ATTACHMENT_DOWNLOAD_MODE", "service": "Multica Backend", "description": "Serve files through the backend so the bucket stays private and needs no CORS setup.", "secret": false, "strategy": "default", "default": "proxy" }, { "key": "MULTICA_SLACK_SECRET_KEY", "service": "Multica Backend", "description": "Base64 32-byte key encrypting bring-your-own Slack app tokens; enables the Slack integration (generated).", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "MULTICA_PLUGIN_SECRET_KEY", "service": "Multica Backend", "description": "Base64 32-byte key for plugin secret settings and hook signing (generated).", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "DISABLE_WORKSPACE_CREATION", "service": "Multica Backend", "description": "Set true after creating your workspace so other users can only join workspaces they are invited to.", "secret": false, "strategy": "default", "default": "false" }, { "key": "RATE_LIMIT_TRUSTED_PROXIES", "service": "Multica Backend", "description": "Private ranges (Gateway, web app, Railway edge) whose X-Forwarded-For is trusted for per-IP auth rate limits.", "secret": false, "strategy": "default", "default": "10.0.0.0/8,100.64.0.0/10,172.16.0.0/12,192.168.0.0/16,fd00::/8" }, { "key": "MULTICA_TELEGRAM_SECRET_KEY", "service": "Multica Backend", "description": "Base64 32-byte key encrypting Telegram bot tokens; enables the Telegram integration (generated).", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "MULTICA_VCS_INTEGRATION_ENABLED", "service": "Multica Backend", "description": "Enable self-hosted Git providers (Gitea, Forgejo, GitLab), as in upstream's self-host compose.", "secret": false, "strategy": "default", "default": "true" }, { "key": "MULTICA_DATABASE_STARTUP_TIMEOUT", "service": "Multica Backend", "description": "How long migrations and the server keep retrying while Postgres is still starting.", "secret": false, "strategy": "default", "default": "15m" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "Multica Backend", "description": "Time for open WebSocket and daemon connections to close cleanly on redeploy.", "secret": false, "strategy": "default", "default": "30" }, { "key": "MULTICA_APP_URL", "service": "Agent Runtime", "description": "Public app URL used in links the daemon and agents produce (follows the backend's FRONTEND_ORIGIN).", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "MULTICA_SERVER_URL", "service": "Agent Runtime", "description": "Backend URL on the private network; the daemon's HTTP and WebSocket traffic never leaves Railway.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "MULTICA_DAEMON_DEVICE_NAME", "service": "Agent Runtime", "description": "Name of this machine in Settings > Runtimes.", "secret": false, "strategy": "default", "default": "Railway" }, { "key": "MULTICA_DAEMON_MAX_CONCURRENT_TASKS", "service": "Agent Runtime", "description": "Agent runs executed in parallel on this service (upstream default 20 is sized for workstations).", "secret": false, "strategy": "default", "default": "4" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "Agent Runtime", "description": "Grace period for the daemon to deregister cleanly on redeploy.", "secret": false, "strategy": "default", "default": "60" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "multica-v06-ai-agent-team-workspace" } }, "cli": "railway deploy --template multica-v06-ai-agent-team-workspace", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "39936187-bf40-4724-8761-d4208d07cebc", "serializedConfig": { "buckets": { "c895ab7b-3805-54ae-8324-8f530cb162f9": { "name": "Bucket" } }, "services": { "528eed3d-c756-5a9a-9d04-2b6b360a07d0": { "icon": "https://cdn.jsdelivr.net/gh/multica-ai/multica@v0.6.2/apps/web/public/favicon.svg", "name": "Multica Web", "deploy": { "healthcheckPath": "/login", "restartPolicyType": "ALWAYS", "healthcheckTimeout": 300 }, "source": { "image": "ghcr.io/multica-ai/multica-web:v0.6.2" }, "variables": { "PORT": { "isOptional": true, "description": "Port the Next.js server listens on (the gateway and the healthcheck use it).", "defaultValue": "3000" }, "DOCS_URL": { "isOptional": true, "description": "Where /docs is proxied to. Leave the official docs or clear it to disable /docs.", "defaultValue": "https://multica.ai" }, "HOSTNAME": { "isOptional": true, "description": "Bind address. '::' is dual-stack in Node, so IPv4 and IPv6 private networking both work.", "defaultValue": "::" }, "REMOTE_API_URL": { "isOptional": true, "description": "Backend origin (no path). The web server forwards /api, /auth, /v1 and /uploads there at runtime.", "defaultValue": "http://${{Multica Backend.RAILWAY_PRIVATE_DOMAIN}}:${{Multica Backend.PORT}}" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "8da92f63-ad84-5d69-b373-ece22f14e08c": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/caddy.svg", "name": "Gateway", "build": { "builder": "DOCKERFILE" }, "deploy": { "healthcheckPath": "/_gateway/health", "restartPolicyType": "ALWAYS", "healthcheckTimeout": 300 }, "source": { "repo": "baranberkay96/multica-railway", "branch": "main", "rootDirectory": "/services/gateway" }, "variables": { "PORT": { "isOptional": true, "description": "Port Caddy listens on; the public domain and the healthcheck target it.", "defaultValue": "8080" }, "MULTICA_WEB_UPSTREAM": { "isOptional": true, "description": "Private address of the Multica web app (receives every path not listed below).", "defaultValue": "${{Multica Web.RAILWAY_PRIVATE_DOMAIN}}:${{Multica Web.PORT}}" }, "MULTICA_BACKEND_UPSTREAM": { "isOptional": true, "description": "Private address of the Multica backend (receives /ws, /api/daemon/ws and /health).", "defaultValue": "${{Multica Backend.RAILWAY_PRIVATE_DOMAIN}}:${{Multica Backend.PORT}}" } }, "networking": { "tcpProxies": {}, "serviceDomains": { ":8080": { "port": 8080 } } } }, "b4d7ec0f-e6a3-5f6b-a6fe-940b7ff0d483": { "icon": "https://devicons.railway.app/i/postgresql.svg", "name": "Postgres", "deploy": { "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:17" }, "variables": { "PGDATA": { "isOptional": true, "description": "Location where the database will be initialized.", "defaultValue": "/var/lib/postgresql/data/pgdata" }, "PGHOST": { "isOptional": true, "description": "Railway Private Domain Name.", "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "PGPORT": { "isOptional": true, "description": "Port to connect to Postgres.", "defaultValue": "5432" }, "PGUSER": { "isOptional": true, "description": "Required variable for the Data panel.", "defaultValue": "${{ POSTGRES_USER }}" }, "PGDATABASE": { "isOptional": true, "description": "Required variable for the Data panel.", "defaultValue": "${{POSTGRES_DB}}" }, "PGPASSWORD": { "isOptional": true, "description": "Required variable for the Data panel.", "defaultValue": "${{POSTGRES_PASSWORD}}" }, "POSTGRES_DB": { "isOptional": true, "description": "Default database created when the image is started.", "defaultValue": "railway" }, "DATABASE_URL": { "isOptional": true, "description": "URL to connect to the Postgres database.", "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{PGDATABASE}}" }, "POSTGRES_USER": { "isOptional": true, "description": "User to connect to the Postgres DB.", "defaultValue": "postgres" }, "SSL_CERT_DAYS": { "isOptional": true, "description": "SSL certificate expiry in days.", "defaultValue": "820" }, "POSTGRES_PASSWORD": { "isOptional": true, "description": "Password to connect to the DB (generated).", "defaultValue": "{{POSTGRES_PASSWORD}}" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": true, "description": "Allow Postgres to shut down cleanly.", "defaultValue": "60" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} }, "volumeMounts": { "697ee7c3-a358-528c-a2e9-b3c6ed5398de": { "mountPath": "/var/lib/postgresql/data" } } }, "d8203e29-ff9d-5084-8394-fa2258dd9c39": { "icon": "https://cdn.sanity.io/images/sy1jschh/production/0ce0bfdcfbdbf69662b1116671f97c2dd788b655-157x157.svg", "name": "Redis", "deploy": { "startCommand": "/bin/sh -c \"rm -rf $RAILWAY_VOLUME_MOUNT_PATH/lost+found/ && exec docker-entrypoint.sh redis-server --requirepass $REDIS_PASSWORD --save 60 1 --dir $RAILWAY_VOLUME_MOUNT_PATH\"", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "redis:8.2" }, "variables": { "REDISHOST": { "isOptional": true, "description": "Private network hostname of the Redis service, only resolvable from services in the same environment.", "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "REDISPORT": { "isOptional": true, "description": "Port that Redis listens on.", "defaultValue": "6379" }, "REDISUSER": { "isOptional": true, "description": "Username for authenticating with Redis.", "defaultValue": "default" }, "REDIS_URL": { "isOptional": true, "description": "Connection string for connecting to Redis using the private network.", "defaultValue": "redis://${{ REDISUSER }}:${{ REDIS_PASSWORD }}@${{ REDISHOST }}:${{ REDISPORT }}" }, "REDISPASSWORD": { "isOptional": true, "description": "Alias of REDIS_PASSWORD for clients that expect the unseparated name.", "defaultValue": "${{REDIS_PASSWORD}}" }, "REDIS_PASSWORD": { "isOptional": true, "description": "Randomly generated password for authenticating with Redis.", "defaultValue": "{{REDIS_PASSWORD}}" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} }, "volumeMounts": { "efc8d69f-450a-5f52-ad76-8afb982465c1": { "mountPath": "/data" } } }, "f82932f2-3fac-520a-b222-2e282bfd3595": { "icon": "https://cdn.jsdelivr.net/gh/multica-ai/multica@v0.6.2/apps/web/public/favicon.svg", "name": "Multica Backend", "deploy": { "healthcheckPath": "/readyz", "preDeployCommand": [ "/app/migrate up" ], "restartPolicyType": "ALWAYS", "healthcheckTimeout": 600, "preDeployTimeoutSeconds": 1200 }, "source": { "image": "ghcr.io/multica-ai/multica-backend:v0.6.2" }, "variables": { "PORT": { "isOptional": true, "description": "Port of the Go API/WebSocket server (dual-stack); the healthcheck probes it.", "defaultValue": "8080" }, "APP_ENV": { "isOptional": true, "description": "Enables production safety checks (insecure JWT secrets and fixed verification codes are refused).", "defaultValue": "production" }, "REDIS_URL": { "isOptional": true, "description": "Redis for per-IP auth rate limiting, the realtime relay between replicas and task-claim caches.", "defaultValue": "${{Redis.REDIS_URL}}" }, "S3_BUCKET": { "isOptional": true, "description": "Railway Bucket name for attachments, avatars and uploads.", "defaultValue": "${{Bucket.BUCKET}}" }, "S3_REGION": { "isOptional": true, "description": "Bucket region (used for request signing).", "defaultValue": "${{Bucket.REGION}}" }, "JWT_SECRET": { "isOptional": true, "description": "Signs sessions, daemon tokens and attachment/avatar URL signatures (generated). Changing it logs everyone out.", "defaultValue": "{{JWT_SECRET}}" }, "ALLOW_SIGNUP": { "isOptional": true, "description": "Keep false: new accounts only for ALLOWED_EMAILS, ALLOWED_EMAIL_DOMAINS or workspace invitations.", "defaultValue": "false" }, "DATABASE_URL": { "isOptional": true, "description": "Postgres connection string on the private network.", "defaultValue": "${{Postgres.DATABASE_URL}}" }, "DO_NOT_TRACK": { "isOptional": true, "description": "Upstream sends one anonymous deployment snapshot per day. Set 1 to turn it off.", "defaultValue": "" }, "ALLOWED_EMAILS": { "isOptional": false, "description": "REQUIRED. Your email address (comma-separated for several). Only these addresses, allowed domains and invited people can sign up.", "defaultValue": "{{ALLOWED_EMAILS}}" }, "RESEND_API_KEY": { "isOptional": true, "description": "Optional. Resend API key to email login codes and invitations (HTTP API, works on every Railway plan). Without it codes are printed to this service's logs.", "defaultValue": "" }, "FRONTEND_ORIGIN": { "isOptional": true, "description": "Public URL of the app (the Gateway domain). Change it when you add a custom domain.", "defaultValue": "https://${{Gateway.RAILWAY_PUBLIC_DOMAIN}}" }, "MULTICA_APP_URL": { "isOptional": true, "description": "App URL used in invitation emails, CLI login and links.", "defaultValue": "${{FRONTEND_ORIGIN}}" }, "AWS_ENDPOINT_URL": { "isOptional": true, "description": "S3-compatible endpoint of the Railway Bucket.", "defaultValue": "${{Bucket.ENDPOINT}}" }, "GOOGLE_CLIENT_ID": { "isOptional": true, "description": "Optional. Google OAuth client ID to show 'Continue with Google'.", "defaultValue": "" }, "AWS_ACCESS_KEY_ID": { "isOptional": true, "description": "Bucket access key.", "defaultValue": "${{Bucket.ACCESS_KEY_ID}}" }, "RESEND_FROM_EMAIL": { "isOptional": true, "description": "Sender address on a domain verified in Resend. Required as soon as RESEND_API_KEY is set.", "defaultValue": "" }, "S3_USE_PATH_STYLE": { "isOptional": true, "description": "Railway Buckets use virtual-hosted-style addressing. Set true only if the bucket's Credentials tab says path-style.", "defaultValue": "false" }, "DATABASE_MAX_CONNS": { "isOptional": true, "description": "Max Postgres connections per backend replica. Keep replicas x this well below Postgres max_connections (100).", "defaultValue": "20" }, "MULTICA_PUBLIC_URL": { "isOptional": true, "description": "Public API URL for webhook URLs and the daemon setup command shown in the UI (same origin via the Gateway).", "defaultValue": "${{FRONTEND_ORIGIN}}" }, "GOOGLE_REDIRECT_URI": { "isOptional": true, "description": "OAuth callback to register in Google Cloud Console when Google login is enabled.", "defaultValue": "${{FRONTEND_ORIGIN}}/auth/callback" }, "CORS_ALLOWED_ORIGINS": { "isOptional": true, "description": "Origins allowed for CORS and the realtime WebSocket origin check.", "defaultValue": "${{FRONTEND_ORIGIN}}" }, "GOOGLE_CLIENT_SECRET": { "isOptional": true, "description": "Optional. Google OAuth client secret (with GOOGLE_CLIENT_ID).", "defaultValue": "" }, "ALLOWED_EMAIL_DOMAINS": { "isOptional": true, "description": "Optional. Comma-separated email domains (e.g. example.com) whose users may sign up.", "defaultValue": "" }, "AWS_SECRET_ACCESS_KEY": { "isOptional": true, "description": "Bucket secret key.", "defaultValue": "${{Bucket.SECRET_ACCESS_KEY}}" }, "MULTICA_VCS_SECRET_KEY": { "isOptional": true, "description": "Base64 32-byte key encrypting Git provider tokens at rest (generated). Keep it; losing it makes stored tokens unreadable.", "defaultValue": "{{MULTICA_VCS_SECRET_KEY}}" }, "REALTIME_METRICS_TOKEN": { "isOptional": true, "description": "Bearer token protecting /health/realtime metrics (generated).", "defaultValue": "{{REALTIME_METRICS_TOKEN}}" }, "MULTICA_TRUSTED_PROXIES": { "isOptional": true, "description": "Same trusted ranges for the webhook rate limiter and the WebSocket origin check.", "defaultValue": "${{RATE_LIMIT_TRUSTED_PROXIES}}" }, "ATTACHMENT_DOWNLOAD_MODE": { "isOptional": true, "description": "Serve files through the backend so the bucket stays private and needs no CORS setup.", "defaultValue": "proxy" }, "MULTICA_SLACK_SECRET_KEY": { "isOptional": true, "description": "Base64 32-byte key encrypting bring-your-own Slack app tokens; enables the Slack integration (generated).", "defaultValue": "{{MULTICA_SLACK_SECRET_KEY}}" }, "MULTICA_PLUGIN_SECRET_KEY": { "isOptional": true, "description": "Base64 32-byte key for plugin secret settings and hook signing (generated).", "defaultValue": "{{MULTICA_PLUGIN_SECRET_KEY}}" }, "DISABLE_WORKSPACE_CREATION": { "isOptional": true, "description": "Set true after creating your workspace so other users can only join workspaces they are invited to.", "defaultValue": "false" }, "RATE_LIMIT_TRUSTED_PROXIES": { "isOptional": true, "description": "Private ranges (Gateway, web app, Railway edge) whose X-Forwarded-For is trusted for per-IP auth rate limits.", "defaultValue": "10.0.0.0/8,100.64.0.0/10,172.16.0.0/12,192.168.0.0/16,fd00::/8" }, "MULTICA_TELEGRAM_SECRET_KEY": { "isOptional": true, "description": "Base64 32-byte key encrypting Telegram bot tokens; enables the Telegram integration (generated).", "defaultValue": "{{MULTICA_TELEGRAM_SECRET_KEY}}" }, "MULTICA_VCS_INTEGRATION_ENABLED": { "isOptional": true, "description": "Enable self-hosted Git providers (Gitea, Forgejo, GitLab), as in upstream's self-host compose.", "defaultValue": "true" }, "MULTICA_DATABASE_STARTUP_TIMEOUT": { "isOptional": true, "description": "How long migrations and the server keep retrying while Postgres is still starting.", "defaultValue": "15m" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": true, "description": "Time for open WebSocket and daemon connections to close cleanly on redeploy.", "defaultValue": "30" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "fdc175a4-8f8d-5231-b7a6-f20c815c5c6d": { "icon": "https://cdn.jsdelivr.net/gh/multica-ai/multica@v0.6.2/apps/web/public/favicon.svg", "name": "Agent Runtime", "build": { "builder": "DOCKERFILE" }, "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "repo": "baranberkay96/multica-railway", "branch": "main", "rootDirectory": "/services/agent-runtime" }, "variables": { "OPENAI_API_KEY": { "isOptional": true, "description": "Optional. Lets Codex agents run on Railway (or run 'codex login' over Railway SSH).", "defaultValue": "" }, "MULTICA_APP_URL": { "isOptional": true, "description": "Public app URL used in links the daemon and agents produce (follows the backend's FRONTEND_ORIGIN).", "defaultValue": "${{Multica Backend.FRONTEND_ORIGIN}}" }, "ANTHROPIC_API_KEY": { "isOptional": true, "description": "Optional. Lets Claude Code agents run on Railway (or log in with a subscription over Railway SSH).", "defaultValue": "" }, "MULTICA_SERVER_URL": { "isOptional": true, "description": "Backend URL on the private network; the daemon's HTTP and WebSocket traffic never leaves Railway.", "defaultValue": "http://${{Multica Backend.RAILWAY_PRIVATE_DOMAIN}}:${{Multica Backend.PORT}}" }, "MULTICA_RUNTIME_TOKEN": { "isOptional": true, "description": "Optional, set after first login: a personal access token (mul_...) from Settings > API Tokens. Until set, this runtime stays idle.", "defaultValue": "" }, "MULTICA_DAEMON_DEVICE_NAME": { "isOptional": true, "description": "Name of this machine in Settings > Runtimes.", "defaultValue": "Railway" }, "MULTICA_DAEMON_MAX_CONCURRENT_TASKS": { "isOptional": true, "description": "Agent runs executed in parallel on this service (upstream default 20 is sized for workstations).", "defaultValue": "4" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": true, "description": "Grace period for the daemon to deregister cleanly on redeploy.", "defaultValue": "60" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} }, "volumeMounts": { "5286ad91-edc3-51ea-ae3b-453eee2f43f7": { "mountPath": "/home/agent" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "Gateway", "method": "GET", "path": "/_gateway/health", "expect_status": 200 } }, "resources": { "expected_services": 6, "needs_volume": true }, "generated_at": "2026-10-13T22:14:42.035Z", "generator_version": "0.1.0" }