{ "manifest_version": "1.0.0", "template": { "id": "53cfc809-a428-419e-a2a3-f95e1a66e4cc", "slug": "onyx", "name": "Onyx", "description": "Onyx - Open Source AI Platform - AI Chat with advanced features", "url": "https://railway.com/deploy/onyx", "upstream": { "image": "nginx:1.25.5-alpine" } }, "services": [ { "name": "api-server", "source": { "image": "onyxdotapp/onyx-backend:v4.5.4" }, "needs_volume": false, "http": false }, { "name": "inference-model-server", "source": { "image": "onyxdotapp/onyx-model-server:v4.5.4" }, "needs_volume": true, "volume_mount_path": "/app/.cache/huggingface", "http": false }, { "name": "web-server", "source": { "image": "onyxdotapp/onyx-web-server:v4.5.4" }, "needs_volume": false, "http": false }, { "name": "background", "source": { "image": "onyxdotapp/onyx-backend:v4.5.4" }, "needs_volume": false, "http": false }, { "name": "postgres", "source": { "image": "pgvector/pgvector:pg15" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false }, { "name": "nginx", "source": { "image": "nginx:1.25.5-alpine" }, "needs_volume": false, "http": true }, { "name": "indexing-model-server", "source": { "image": "onyxdotapp/onyx-model-server:v4.5.4" }, "needs_volume": true, "volume_mount_path": "/app/.cache/huggingface", "http": false }, { "name": "opensearch", "source": { "image": "opensearchproject/opensearch:3.6.0" }, "needs_volume": true, "volume_mount_path": "/usr/share/opensearch/data", "http": false }, { "name": "redis", "source": { "image": "valkey/valkey:8-alpine" }, "needs_volume": false, "http": false }, { "name": "minio", "source": { "image": "minio/minio:RELEASE.2025-07-23T15-54-02Z-cpuv1" }, "needs_volume": true, "volume_mount_path": "/data", "http": false } ], "required_inputs": [ { "key": "PORT", "service": "api-server", "description": "Port uvicorn listens on", "secret": false, "strategy": "default", "default": "8080" }, { "key": "AUTH_TYPE", "service": "api-server", "description": "Authentication scheme: `basic` (email/password — the first user to register becomes admin)", "secret": false, "strategy": "default", "default": "basic" }, { "key": "LOG_LEVEL", "service": "api-server", "description": "Log verbosity for the API server.", "secret": false, "strategy": "default", "default": "info" }, { "key": "REDIS_HOST", "service": "api-server", "description": "Redis/Valkey hostname", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "WEB_DOMAIN", "service": "api-server", "description": "Public base URL of the deployment.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "POSTGRES_DB", "service": "api-server", "description": "Database name", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_HOST", "service": "api-server", "description": "Postgres hostname on the private network", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_PORT", "service": "api-server", "description": "Postgres port", "secret": false, "strategy": "default", "default": "5432" }, { "key": "POSTGRES_USER", "service": "api-server", "description": " Database user", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "OPENSEARCH_HOST", "service": "api-server", "description": "OpenSearch hostname on the private network", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "S3_ENDPOINT_URL", "service": "api-server", "description": "S3-compatible endpoint for the file store", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "USER_AUTH_SECRET", "service": "api-server", "description": "Signs session cookies and password-reset / email-verification / OAuth-state tokens", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "MODEL_SERVER_HOST", "service": "api-server", "description": "Hostname of the inference model server", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_PASSWORD", "service": "api-server", "description": "Database password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "FILE_STORE_BACKEND", "service": "api-server", "description": "File storage backend", "secret": false, "strategy": "default", "default": "s3" }, { "key": "S3_AWS_ACCESS_KEY_ID", "service": "api-server", "description": "S3 access key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ENCRYPTION_KEY_SECRET", "service": "api-server", "description": "Encrypts connector credentials at rest in Postgres", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "S3_AWS_SECRET_ACCESS_KEY", "service": "api-server", "description": "S3 secret key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "OPENSEARCH_ADMIN_PASSWORD", "service": "api-server", "description": "Basic-auth password for the OpenSearch", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_FILE_STORE_BUCKET_NAME", "service": "api-server", "description": "Bucket for uploaded files", "secret": false, "strategy": "default", "default": "onyx-file-store-bucket" }, { "key": "PORT", "service": "inference-model-server", "description": "Port the model server listens on; used by the Railway healthcheck.", "secret": false, "strategy": "default", "default": "9000" }, { "key": "LOG_LEVEL", "service": "inference-model-server", "description": "Log verbosity", "secret": false, "strategy": "default", "default": "info" }, { "key": "PORT", "service": "web-server", "description": "Port the Next.js standalone server listens on", "secret": false, "strategy": "default", "default": "3000" }, { "key": "INTERNAL_URL", "service": "web-server", "description": " URL the Next.js server uses for server-side API calls over the private network", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "AUTH_TYPE", "service": "background", "description": "Must match api-server", "secret": false, "strategy": "default", "default": "basic" }, { "key": "LOG_LEVEL", "service": "background", "description": "Log verbosity for all Celery workers and bots", "secret": false, "strategy": "default", "default": "info" }, { "key": "REDIS_HOST", "service": "background", "description": "Celery broker / cache hostname", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "WEB_DOMAIN", "service": "background", "description": " Public base URL", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "POSTGRES_DB", "service": "background", "description": "Database name", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_HOST", "service": "background", "description": "Postgres hostname on the private network", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_PORT", "service": "background", "description": "Postgres port", "secret": false, "strategy": "default", "default": "5432" }, { "key": "POSTGRES_USER", "service": "background", "description": "Database user", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "API_SERVER_HOST", "service": "background", "description": " How workers and bots (e.g. Discord) reach the API over the private network", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "OPENSEARCH_HOST", "service": "background", "description": " OpenSearch hostname on the private network", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "S3_ENDPOINT_URL", "service": "background", "description": "S3-compatible endpoint (MinIO)", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "USER_AUTH_SECRET", "service": "background", "description": "Must be identical to api-server", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "MODEL_SERVER_HOST", "service": "background", "description": "Inference model server hostname (port 9000)", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_PASSWORD", "service": "background", "description": "Database password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "FILE_STORE_BACKEND", "service": "background", "description": " Must match api-server", "secret": false, "strategy": "default", "default": "s3" }, { "key": "API_SERVER_PROTOCOL", "service": "background", "description": "Protocol for internal API calls (plain HTTP inside the private network)", "secret": false, "strategy": "default", "default": "http" }, { "key": "S3_AWS_ACCESS_KEY_ID", "service": "background", "description": "S3 access key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ENCRYPTION_KEY_SECRET", "service": "background", "description": "Must be identical to api-server", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_AWS_SECRET_ACCESS_KEY", "service": "background", "description": "S3 secret key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "OPENSEARCH_ADMIN_PASSWORD", "service": "background", "description": "OpenSearch admin password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "S3_FILE_STORE_BUCKET_NAME", "service": "background", "description": "File store bucket", "secret": false, "strategy": "default", "default": "onyx-file-store-bucket" }, { "key": "INDEXING_MODEL_SERVER_HOST", "service": "background", "description": "Dedicated indexing model server hostname (port 9000)", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGDATA", "service": "postgres", "description": "Postgres data directory", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "POSTGRES_DB", "service": "postgres", "description": "Database created on first boot and used by Onyx", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "POSTGRES_USER", "service": "postgres", "description": "Database superuser created on first boot. The Onyx backend connects as this user.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "POSTGRES_PASSWORD", "service": "postgres", "description": "Superuser password", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "PORT", "service": "nginx", "description": "Target port for the Railway public domain", "secret": false, "strategy": "default", "default": "80" }, { "key": "NGINX_CONF", "service": "nginx", "description": "nginx config", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PORT", "service": "indexing-model-server", "description": "Port the model server listens on", "secret": false, "strategy": "default", "default": "9000" }, { "key": "LOG_LEVEL", "service": "indexing-model-server", "description": "Log verbosity", "secret": false, "strategy": "default", "default": "info" }, { "key": "INDEXING_ONLY", "service": "indexing-model-server", "description": "Runs this instance in indexing mode", "secret": false, "strategy": "default", "default": "True" }, { "key": "VESPA_SEARCHER_THREADS", "service": "indexing-model-server", "description": "Embedding worker threads during indexing", "secret": false, "strategy": "default", "default": "1" }, { "key": "RAILWAY_RUN_UID", "service": "opensearch", "description": "Starts the container as root", "secret": false, "strategy": "default", "default": "0" }, { "key": "OPENSEARCH_JAVA_OPTS", "service": "opensearch", "description": "JVM heap size. Keep Xms = Xmx at roughly 50% of the memory available to this service.", "secret": false, "strategy": "default", "default": "-Xms2g -Xmx2g" }, { "key": "OPENSEARCH_INITIAL_ADMIN_PASSWORD", "service": "opensearch", "description": "Admin password applied by the security plugin's demo config on first boot", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "DISABLE_PERFORMANCE_ANALYZER_AGENT_CLI", "service": "opensearch", "description": " Disables the Performance Analyzer telemetry sidecar.", "secret": false, "strategy": "default", "default": "true" }, { "key": "MINIO_ROOT_USER", "service": "minio", "description": "MinIO root access key", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "MINIO_ROOT_PASSWORD", "service": "minio", "description": "MinIO root secret key", "secret": true, "strategy": "generate", "generate": "strong_password" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "onyx" } }, "cli": "railway deploy --template onyx", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "53cfc809-a428-419e-a2a3-f95e1a66e4cc", "serializedConfig": { "buckets": {}, "services": { "0d2ce7af-721b-4788-97bf-ad1be957bb54": { "icon": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/onyx-light.svg", "name": "api-server", "deploy": { "startCommand": "/bin/sh -c \"alembic upgrade head && echo 'Starting Onyx Api Server' && exec uvicorn onyx.main:app --host 0.0.0.0 --port 8080\"", "healthcheckPath": "/health", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "onyxdotapp/onyx-backend:v4.5.4" }, "variables": { "PORT": { "isOptional": false, "description": "Port uvicorn listens on", "defaultValue": "8080" }, "AUTH_TYPE": { "isOptional": false, "description": "Authentication scheme: `basic` (email/password — the first user to register becomes admin)", "defaultValue": "basic" }, "LOG_LEVEL": { "isOptional": false, "description": "Log verbosity for the API server.", "defaultValue": "info" }, "REDIS_HOST": { "isOptional": false, "description": "Redis/Valkey hostname", "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}" }, "WEB_DOMAIN": { "isOptional": false, "description": "Public base URL of the deployment.", "defaultValue": "https://${{nginx.RAILWAY_PUBLIC_DOMAIN}}" }, "POSTGRES_DB": { "isOptional": false, "description": "Database name", "defaultValue": "${{postgres.POSTGRES_DB}}" }, "POSTGRES_HOST": { "isOptional": false, "description": "Postgres hostname on the private network", "defaultValue": "${{postgres.RAILWAY_PRIVATE_DOMAIN}}" }, "POSTGRES_PORT": { "isOptional": false, "description": "Postgres port", "defaultValue": "5432" }, "POSTGRES_USER": { "isOptional": false, "description": " Database user", "defaultValue": "${{postgres.POSTGRES_USER}}" }, "OPENSEARCH_HOST": { "isOptional": false, "description": "OpenSearch hostname on the private network", "defaultValue": "${{opensearch.RAILWAY_PRIVATE_DOMAIN}}" }, "S3_ENDPOINT_URL": { "isOptional": false, "description": "S3-compatible endpoint for the file store", "defaultValue": "http://${{minio.RAILWAY_PRIVATE_DOMAIN}}:9000" }, "USER_AUTH_SECRET": { "isOptional": false, "description": "Signs session cookies and password-reset / email-verification / OAuth-state tokens", "defaultValue": "{{USER_AUTH_SECRET}}" }, "MODEL_SERVER_HOST": { "isOptional": false, "description": "Hostname of the inference model server", "defaultValue": "${{inference-model-server.RAILWAY_PRIVATE_DOMAIN}}" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Database password", "defaultValue": "${{postgres.POSTGRES_PASSWORD}}" }, "FILE_STORE_BACKEND": { "isOptional": false, "description": "File storage backend", "defaultValue": "s3" }, "S3_AWS_ACCESS_KEY_ID": { "isOptional": false, "description": "S3 access key", "defaultValue": "${{minio.MINIO_ROOT_USER}}" }, "ENCRYPTION_KEY_SECRET": { "isOptional": false, "description": "Encrypts connector credentials at rest in Postgres", "defaultValue": "{{ENCRYPTION_KEY_SECRET}}" }, "S3_AWS_SECRET_ACCESS_KEY": { "isOptional": false, "description": "S3 secret key", "defaultValue": "${{minio.MINIO_ROOT_PASSWORD}}" }, "OPENSEARCH_ADMIN_PASSWORD": { "isOptional": false, "description": "Basic-auth password for the OpenSearch", "defaultValue": "${{opensearch.OPENSEARCH_INITIAL_ADMIN_PASSWORD}}" }, "S3_FILE_STORE_BUCKET_NAME": { "isOptional": false, "description": "Bucket for uploaded files", "defaultValue": "onyx-file-store-bucket" } } }, "15736213-74a3-4530-87e0-5473cacefed3": { "icon": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/onyx-light.svg", "name": "inference-model-server", "deploy": { "startCommand": null, "healthcheckPath": "/api/health", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "onyxdotapp/onyx-model-server:v4.5.4" }, "variables": { "PORT": { "isOptional": false, "description": "Port the model server listens on; used by the Railway healthcheck.", "defaultValue": "9000" }, "LOG_LEVEL": { "isOptional": false, "description": "Log verbosity", "defaultValue": "info" } }, "volumeMounts": { "15736213-74a3-4530-87e0-5473cacefed3": { "mountPath": "/app/.cache/huggingface" } } }, "1c805bf5-3e2b-43a0-8147-8724bf31b42f": { "icon": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/onyx-light.svg", "name": "web-server", "deploy": { "startCommand": null, "healthcheckPath": "/", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "onyxdotapp/onyx-web-server:v4.5.4" }, "variables": { "PORT": { "isOptional": false, "description": "Port the Next.js standalone server listens on", "defaultValue": "3000" }, "INTERNAL_URL": { "isOptional": false, "description": " URL the Next.js server uses for server-side API calls over the private network", "defaultValue": "http://${{api-server.RAILWAY_PRIVATE_DOMAIN}}:8080" } } }, "25eaaee3-2b67-4c80-b898-76c3d0cd5769": { "icon": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/onyx-light.svg", "name": "background", "deploy": { "startCommand": "/app/scripts/supervisord_entrypoint.sh", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "onyxdotapp/onyx-backend:v4.5.4" }, "variables": { "AUTH_TYPE": { "isOptional": false, "description": "Must match api-server", "defaultValue": "basic" }, "LOG_LEVEL": { "isOptional": false, "description": "Log verbosity for all Celery workers and bots", "defaultValue": "info" }, "REDIS_HOST": { "isOptional": false, "description": "Celery broker / cache hostname", "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}" }, "WEB_DOMAIN": { "isOptional": false, "description": " Public base URL", "defaultValue": "https://${{nginx.RAILWAY_PUBLIC_DOMAIN}}" }, "POSTGRES_DB": { "isOptional": false, "description": "Database name", "defaultValue": "${{postgres.POSTGRES_DB}}" }, "POSTGRES_HOST": { "isOptional": false, "description": "Postgres hostname on the private network", "defaultValue": "${{postgres.RAILWAY_PRIVATE_DOMAIN}}" }, "POSTGRES_PORT": { "isOptional": false, "description": "Postgres port", "defaultValue": "5432" }, "POSTGRES_USER": { "isOptional": false, "description": "Database user", "defaultValue": "${{postgres.POSTGRES_USER}}" }, "API_SERVER_HOST": { "isOptional": false, "description": " How workers and bots (e.g. Discord) reach the API over the private network", "defaultValue": "${{api-server.RAILWAY_PRIVATE_DOMAIN}}" }, "OPENSEARCH_HOST": { "isOptional": false, "description": " OpenSearch hostname on the private network", "defaultValue": "${{opensearch.RAILWAY_PRIVATE_DOMAIN}}" }, "S3_ENDPOINT_URL": { "isOptional": false, "description": "S3-compatible endpoint (MinIO)", "defaultValue": "http://${{minio.RAILWAY_PRIVATE_DOMAIN}}:9000" }, "USER_AUTH_SECRET": { "isOptional": false, "description": "Must be identical to api-server", "defaultValue": "${{api-server.USER_AUTH_SECRET}}" }, "MODEL_SERVER_HOST": { "isOptional": false, "description": "Inference model server hostname (port 9000)", "defaultValue": "${{inference-model-server.RAILWAY_PRIVATE_DOMAIN}}" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Database password", "defaultValue": "${{postgres.POSTGRES_PASSWORD}}" }, "FILE_STORE_BACKEND": { "isOptional": false, "description": " Must match api-server", "defaultValue": "s3" }, "API_SERVER_PROTOCOL": { "isOptional": false, "description": "Protocol for internal API calls (plain HTTP inside the private network)", "defaultValue": "http" }, "S3_AWS_ACCESS_KEY_ID": { "isOptional": false, "description": "S3 access key", "defaultValue": "${{minio.MINIO_ROOT_USER}}" }, "ENCRYPTION_KEY_SECRET": { "isOptional": false, "description": "Must be identical to api-server", "defaultValue": "${{api-server.ENCRYPTION_KEY_SECRET}}" }, "S3_AWS_SECRET_ACCESS_KEY": { "isOptional": false, "description": "S3 secret key", "defaultValue": "${{minio.MINIO_ROOT_PASSWORD}}" }, "OPENSEARCH_ADMIN_PASSWORD": { "isOptional": false, "description": "OpenSearch admin password", "defaultValue": "${{opensearch.OPENSEARCH_INITIAL_ADMIN_PASSWORD}}" }, "S3_FILE_STORE_BUCKET_NAME": { "isOptional": false, "description": "File store bucket", "defaultValue": "onyx-file-store-bucket" }, "INDEXING_MODEL_SERVER_HOST": { "isOptional": false, "description": "Dedicated indexing model server hostname (port 9000)", "defaultValue": "${{indexing-model-server.RAILWAY_PRIVATE_DOMAIN}}" } } }, "2eff53be-71ba-4532-8cc0-cdd5620e8034": { "icon": "https://devicons.railway.app/postgres", "name": "postgres", "deploy": { "startCommand": "docker-entrypoint.sh postgres -c max_connections=250", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "pgvector/pgvector:pg15" }, "variables": { "PGDATA": { "isOptional": false, "description": "Postgres data directory", "defaultValue": "/var/lib/postgresql/data/pgdata" }, "POSTGRES_DB": { "isOptional": false, "description": "Database created on first boot and used by Onyx", "defaultValue": "postgres" }, "POSTGRES_USER": { "isOptional": false, "description": "Database superuser created on first boot. The Onyx backend connects as this user.", "defaultValue": "postgres" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Superuser password", "defaultValue": "{{POSTGRES_PASSWORD}}" } }, "volumeMounts": { "2eff53be-71ba-4532-8cc0-cdd5620e8034": { "mountPath": "/var/lib/postgresql/data" } } }, "403d0619-ae1a-4ac1-aa66-9a35343e1d11": { "icon": "https://devicons.railway.app/nginx", "name": "nginx", "deploy": { "startCommand": "/bin/sh -c 'printenv NGINX_CONF > /etc/nginx/conf.d/default.conf; until nginx -t; do sleep 3; done; (while :; do sleep 60; nginx -s reload; done &); exec nginx -g \"daemon off;\"'", "healthcheckPath": "/nginx-health", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "nginx:1.25.5-alpine" }, "variables": { "PORT": { "isOptional": false, "description": "Target port for the Railway public domain", "defaultValue": "80" }, "NGINX_CONF": { "isOptional": false, "description": "nginx config", "defaultValue": "\nserver_tokens off;\n\nlog_format custom_main '$remote_addr - $remote_user [$time_local] \"$request\" '\n '$status $body_bytes_sent \"$http_referer\" '\n '\"$http_user_agent\" \"$http_x_forwarded_for\" '\n 'rt=$request_time';\n\nupstream api_server {\n server ${{api-server.RAILWAY_PRIVATE_DOMAIN}}:8080 fail_timeout=0;\n}\n\nupstream web_server {\n server ${{web-server.RAILWAY_PRIVATE_DOMAIN}}:3000 fail_timeout=0;\n}\n\nmap $http_upgrade $connection_upgrade {\n default upgrade;\n '' close;\n}\n\nserver {\n listen 80 default_server;\n listen [::]:80 default_server;\n\n client_max_body_size 5G;\n\n access_log /var/log/nginx/access.log custom_main;\n\n location = /nginx-health {\n access_log off;\n return 200 \"ok\\n\";\n }\n\n location ~ ^/auth/saml(/.*)?$ {\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;\n proxy_set_header X-Forwarded-Host $host;\n proxy_set_header Host $host;\n proxy_http_version 1.1;\n proxy_buffering off;\n proxy_redirect off;\n proxy_pass http://api_server;\n }\n\n location ~ ^/scim(/.*)?$ {\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;\n proxy_set_header X-Forwarded-Host $host;\n proxy_set_header Host $host;\n proxy_http_version 1.1;\n proxy_buffering off;\n proxy_redirect off;\n proxy_connect_timeout 300s;\n proxy_send_timeout 300s;\n proxy_read_timeout 300s;\n proxy_pass http://api_server;\n }\n\n location ~ ^/(api|openapi.json)(/.*)?$ {\n rewrite ^/api(/.*)$ $1 break;\n\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;\n proxy_set_header X-Forwarded-Host $host;\n proxy_set_header Host $host;\n\n proxy_http_version 1.1;\n proxy_set_header Upgrade $http_upgrade;\n proxy_set_header Connection $connection_upgrade;\n proxy_buffering off;\n\n proxy_connect_timeout 300s;\n proxy_send_timeout 300s;\n proxy_read_timeout 300s;\n\n proxy_redirect off;\n proxy_pass http://api_server;\n }\n\n location / {\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;\n proxy_set_header X-Forwarded-Host $host;\n proxy_set_header Host $host;\n\n proxy_http_version 1.1;\n\n proxy_connect_timeout 300s;\n proxy_send_timeout 300s;\n proxy_read_timeout 300s;\n\n proxy_redirect off;\n proxy_pass http://web_server;\n }\n}\n" } }, "networking": { "serviceDomains": { "": {} } } }, "b90f60ac-c0a9-47f2-9ee3-c0364736c97f": { "icon": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/onyx-light.svg", "name": "indexing-model-server", "deploy": { "startCommand": null, "healthcheckPath": "/api/health", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "onyxdotapp/onyx-model-server:v4.5.4" }, "variables": { "PORT": { "isOptional": false, "description": "Port the model server listens on", "defaultValue": "9000" }, "LOG_LEVEL": { "isOptional": false, "description": "Log verbosity", "defaultValue": "info" }, "INDEXING_ONLY": { "isOptional": false, "description": "Runs this instance in indexing mode", "defaultValue": "True" }, "VESPA_SEARCHER_THREADS": { "isOptional": false, "description": "Embedding worker threads during indexing", "defaultValue": "1" } }, "volumeMounts": { "b90f60ac-c0a9-47f2-9ee3-c0364736c97f": { "mountPath": "/app/.cache/huggingface" } } }, "cc256fa9-ef3a-44c4-9150-053838a7384f": { "icon": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/opensearch.svg", "name": "opensearch", "deploy": { "startCommand": "/bin/bash -c \"chown -R 1000:0 /usr/share/opensearch/data; export HOME=/usr/share/opensearch; exec chroot --userspec=1000:0 / /usr/share/opensearch/opensearch-docker-entrypoint.sh opensearch -Ediscovery.type=single-node\"", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "opensearchproject/opensearch:3.6.0" }, "variables": { "RAILWAY_RUN_UID": { "isOptional": false, "description": "Starts the container as root", "defaultValue": "0" }, "OPENSEARCH_JAVA_OPTS": { "isOptional": false, "description": "JVM heap size. Keep Xms = Xmx at roughly 50% of the memory available to this service.", "defaultValue": "-Xms2g -Xmx2g" }, "OPENSEARCH_INITIAL_ADMIN_PASSWORD": { "isOptional": false, "description": "Admin password applied by the security plugin's demo config on first boot", "defaultValue": "{{OPENSEARCH_INITIAL_ADMIN_PASSWORD}}" }, "DISABLE_PERFORMANCE_ANALYZER_AGENT_CLI": { "isOptional": false, "description": " Disables the Performance Analyzer telemetry sidecar.", "defaultValue": "true" } }, "volumeMounts": { "cc256fa9-ef3a-44c4-9150-053838a7384f": { "mountPath": "/usr/share/opensearch/data" } } }, "e32c3012-2004-4664-bf31-eaa2a50311de": { "icon": "https://devicons.railway.app/redis", "name": "redis", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "valkey/valkey:8-alpine" }, "variables": {} }, "f979e507-31a7-4d5d-ab50-13528a618c1b": { "icon": "https://devicons.railway.app/minio", "name": "minio", "deploy": { "startCommand": "minio server /data --console-address :9001", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "minio/minio:RELEASE.2025-07-23T15-54-02Z-cpuv1" }, "variables": { "MINIO_ROOT_USER": { "isOptional": false, "description": "MinIO root access key", "defaultValue": "{{MINIO_ROOT_USER}}" }, "MINIO_ROOT_PASSWORD": { "isOptional": false, "description": "MinIO root secret key", "defaultValue": "{{MINIO_ROOT_PASSWORD}}" } }, "volumeMounts": { "f979e507-31a7-4d5d-ab50-13528a618c1b": { "mountPath": "/data" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "nginx", "method": "GET", "path": "/nginx-health", "expect_status": 200 } }, "resources": { "expected_services": 10, "needs_volume": true }, "generated_at": "2026-09-10T16:14:52.212Z", "generator_version": "0.1.0", "status": "validated", "validated_at": "2026-09-09T01:54:17.301Z", "success_rate_30d": 1, "validation": { "last_run_id": "run_532e41e8b2db4deaaf24", "checks": [ { "name": "workflow_completed", "passed": true }, { "name": "all_services_deployed", "passed": true }, { "name": "healthcheck", "passed": true }, { "name": "stays_up", "passed": true } ], "typical_ready_seconds": 284, "typical_build_seconds": 0, "typical_start_seconds": 10, "slowest_service": "background" } }