{
  "manifest_version": "1.0.0",
  "template": {
    "id": "0dfdc556-abe9-46b4-9eef-d99bd50f9a9a",
    "slug": "nginx-modsecurity-waf",
    "name": "nginx-modsecurity-waf",
    "description": "Deploy and Host nginx-modsecurity-waf with Railway",
    "url": "https://railway.com/deploy/nginx-modsecurity-waf",
    "upstream": {
      "image": "ghcr.io/coreruleset/modsecurity-crs:nginx-alpine"
    }
  },
  "status": "unvalidated",
  "validated_at": null,
  "success_rate_30d": null,
  "services": [
    {
      "name": "coreruleset/modsecurity-crs",
      "source": {
        "image": "ghcr.io/coreruleset/modsecurity-crs:nginx-alpine"
      },
      "needs_volume": false,
      "tcp_ports": [
        8443
      ],
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "BACKEND",
      "service": "coreruleset/modsecurity-crs",
      "description": "Your backend URL",
      "secret": false,
      "strategy": "ask_user"
    },
    {
      "key": "LOGLEVEL",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for LOGLEVEL.",
      "secret": false,
      "strategy": "default",
      "default": "warn"
    },
    {
      "key": "SSL_PORT",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for SSL_PORT.",
      "secret": false,
      "strategy": "default",
      "default": "8443"
    },
    {
      "key": "SSL_ENGINE",
      "service": "coreruleset/modsecurity-crs",
      "description": "enable if needed",
      "secret": false,
      "strategy": "default",
      "default": "off"
    },
    {
      "key": "SERVER_NAME",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for SERVER_NAME.",
      "secret": false,
      "strategy": "ask_user"
    },
    {
      "key": "ALLOWED_METHODS",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for ALLOWED_METHODS.",
      "secret": false,
      "strategy": "default",
      "default": "GET HEAD POST OPTIONS"
    },
    {
      "key": "MODSEC_AUDIT_LOG",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for MODSEC_AUDIT_LOG.",
      "secret": false,
      "strategy": "default",
      "default": "/dev/stdout"
    },
    {
      "key": "BLOCKING_PARANOIA",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for BLOCKING_PARANOIA.",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "METRICS_DENY_FROM",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for METRICS_DENY_FROM.",
      "secret": false,
      "strategy": "default",
      "default": "none"
    },
    {
      "key": "DETECTION_PARANOIA",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for DETECTION_PARANOIA.",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "METRICS_ALLOW_FROM",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for METRICS_ALLOW_FROM.",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0/0"
    },
    {
      "key": "CRS_DISABLE_PLUGINS",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for CRS_DISABLE_PLUGINS.",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "MODSEC_AUDIT_ENGINE",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for MODSEC_AUDIT_ENGINE.",
      "secret": false,
      "strategy": "default",
      "default": "RelevantOnly"
    },
    {
      "key": "VALIDATE_UTF8_ENCODING",
      "service": "coreruleset/modsecurity-crs",
      "description": "common false-positive source",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "NGINX_ALWAYS_TLS_REDIRECT",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for NGINX_ALWAYS_TLS_REDIRECT.",
      "secret": false,
      "strategy": "default",
      "default": "off"
    },
    {
      "key": "APACHE_ALWAYS_TLS_REDIRECT",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for APACHE_ALWAYS_TLS_REDIRECT.",
      "secret": false,
      "strategy": "default",
      "default": "off"
    },
    {
      "key": "ALLOWED_REQUEST_CONTENT_TYPE",
      "service": "coreruleset/modsecurity-crs",
      "description": "Provide a value for ALLOWED_REQUEST_CONTENT_TYPE.",
      "secret": false,
      "strategy": "default",
      "default": "|application/json|"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "nginx-modsecurity-waf"
      }
    },
    "cli": "railway deploy --template nginx-modsecurity-waf",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "0dfdc556-abe9-46b4-9eef-d99bd50f9a9a",
            "serializedConfig": {
              "services": {
                "8cd3a3ff-d9d9-42c9-9638-07ca4d939dc9": {
                  "name": "coreruleset/modsecurity-crs",
                  "deploy": {
                    "healthcheckPath": "/healthz"
                  },
                  "source": {
                    "image": "ghcr.io/coreruleset/modsecurity-crs:nginx-alpine"
                  },
                  "variables": {
                    "BACKEND": {
                      "isOptional": false,
                      "description": "Your backend URL",
                      "defaultValue": "{{BACKEND}}"
                    },
                    "LOGLEVEL": {
                      "defaultValue": "warn"
                    },
                    "SSL_PORT": {
                      "defaultValue": "8443"
                    },
                    "SSL_ENGINE": {
                      "description": "enable if needed",
                      "defaultValue": "off"
                    },
                    "SERVER_NAME": {
                      "defaultValue": "{{SERVER_NAME}}"
                    },
                    "ALLOWED_METHODS": {
                      "defaultValue": "GET HEAD POST OPTIONS"
                    },
                    "MODSEC_AUDIT_LOG": {
                      "defaultValue": "/dev/stdout"
                    },
                    "BLOCKING_PARANOIA": {
                      "defaultValue": "1"
                    },
                    "METRICS_DENY_FROM": {
                      "defaultValue": "none"
                    },
                    "DETECTION_PARANOIA": {
                      "defaultValue": "1"
                    },
                    "METRICS_ALLOW_FROM": {
                      "defaultValue": "0.0.0.0/0"
                    },
                    "CRS_DISABLE_PLUGINS": {
                      "defaultValue": "0"
                    },
                    "MODSEC_AUDIT_ENGINE": {
                      "defaultValue": "RelevantOnly"
                    },
                    "VALIDATE_UTF8_ENCODING": {
                      "description": "common false-positive source",
                      "defaultValue": "0"
                    },
                    "NGINX_ALWAYS_TLS_REDIRECT": {
                      "defaultValue": "off"
                    },
                    "APACHE_ALWAYS_TLS_REDIRECT": {
                      "defaultValue": "off"
                    },
                    "ALLOWED_REQUEST_CONTENT_TYPE": {
                      "defaultValue": "|application/json|"
                    }
                  },
                  "networking": {
                    "tcpProxies": {
                      "8443": {}
                    },
                    "serviceDomains": {
                      "<hasDomain>:8080": {
                        "port": 8080
                      }
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "coreruleset/modsecurity-crs",
      "method": "GET",
      "path": "/healthz",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 1,
    "needs_volume": false
  },
  "generated_at": "2026-09-20T16:14:49.616Z",
  "generator_version": "0.1.0"
}