{ "manifest_version": "1.0.0", "template": { "id": "2473e81c-1662-4bb5-8d45-f4446ecf7bd3", "slug": "openbot", "name": "OpenBot", "description": "Open-source AI coworkers with their own browser, files and tools", "url": "https://railway.com/deploy/openbot", "upstream": { "image": "caddy:2-alpine" } }, "services": [ { "name": "Gate", "source": { "image": "caddy:2-alpine" }, "needs_volume": false, "http": true }, { "name": "Postgres", "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:18" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false }, { "name": "OpenBot", "source": { "image": "ghcr.io/copilotkit/openbot:v0.0.5" }, "needs_volume": true, "volume_mount_path": "/data", "http": false }, { "name": "Routines", "source": { "image": "ghcr.io/copilotkit/openbot:v0.0.5" }, "needs_volume": false, "http": false }, { "name": "Agent", "source": { "image": "ghcr.io/will-bogusz/openbot-agent-langgraph:v0.0.5" }, "needs_volume": false, "http": false } ], "required_inputs": [ { "key": "PORT", "service": "Gate", "description": "Port Caddy listens on; matches the public HTTP proxy.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "UPSTREAM", "service": "Gate", "description": "Where the gate forwards to over the private network; wired automatically.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "GATE_USER", "service": "Gate", "description": "Username your browser asks for when you open the OpenBot URL.", "secret": false, "strategy": "default", "default": "admin" }, { "key": "GATE_PASSWORD", "service": "Gate", "description": "Password your browser asks for when you open the OpenBot URL. Generated; copy it from here. Change it any time and redeploy Gate.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "PGDATA", "service": "Postgres", "description": "Location where the database will be initialized", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "PGHOST", "service": "Postgres", "description": "Railway Private Domain Name.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGPORT", "service": "Postgres", "description": "Port to connect to Postgres.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "PGUSER", "service": "Postgres", "description": "Required variable for Data panel", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGDATABASE", "service": "Postgres", "description": "Required variable for the data panel.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGPASSWORD", "service": "Postgres", "description": "Required variable for Data panel", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_DB", "service": "Postgres", "description": "Default database created when image is started.", "secret": false, "strategy": "default", "default": "railway" }, { "key": "DATABASE_URL", "service": "Postgres", "description": "URL to connect to Postgres database.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_USER", "service": "Postgres", "description": "User to connect to Postgres DB", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "SSL_CERT_DAYS", "service": "Postgres", "description": "Optional - SSL certificate expiry in days.", "secret": false, "strategy": "default", "default": "820" }, { "key": "POSTGRES_PASSWORD", "service": "Postgres", "description": "Password to connect to DB", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "Postgres", "description": "Allow Postgres to cleanly shut down", "secret": false, "strategy": "default", "default": "60" }, { "key": "PORT", "service": "OpenBot", "description": "Tells Railway's healthcheck which port to probe. The image serves the app and API on 3001 - do not change it.", "secret": false, "strategy": "default", "default": "3001" }, { "key": "DATABASE_URL", "service": "OpenBot", "description": "Wired to the Postgres service over the private network. Migrations run at start (single replica).", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PROFILES_DIR", "service": "OpenBot", "description": "Coworkers' browser logins, on the /data volume so they survive redeploys.", "secret": false, "strategy": "default", "default": "/data/profiles" }, { "key": "WORKSPACE_DIR", "service": "OpenBot", "description": "Coworkers' files, on the /data volume so they survive redeploys.", "secret": false, "strategy": "default", "default": "/data/workspace" }, { "key": "COMPUTER_TOKEN", "service": "OpenBot", "description": "Shared secret between the API and the in-container browser (agent-computer). Generated.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENAI_API_KEY", "service": "OpenBot", "description": "Your OpenAI API key. The built-in coworkers spend it. To use OpenRouter instead, paste an OpenRouter key here and set OPENAI_BASE_URL to https://openrouter.ai/api/v1.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "AGENT_TOOL_TOKEN", "service": "OpenBot", "description": "Shared secret the Agent service presents when calling governed tools through OpenBot. Generated.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "EMBEDDED_POSTGRES", "service": "OpenBot", "description": "Postgres is the separate Railway service; migrations run once at start via the start command.", "secret": false, "strategy": "default", "default": "off" }, { "key": "KEY_ENCRYPTION_KEY", "service": "OpenBot", "description": "Encrypts the credential vault at rest (base64, 32 bytes). Generated for you. NEVER change it - every stored credential becomes unreadable.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENBOT_PUBLIC_URL", "service": "OpenBot", "description": "This deployment's public address (the Gate service's domain). Used to build the callback URL when someone connects Google Drive or Notion.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "MANAGED_AGENT_TOKEN", "service": "OpenBot", "description": "Shared secret OpenBot presents to the Agent service on every coworker run. Generated.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENBOT_SINGLE_USER", "service": "OpenBot", "description": "Everyone who opens the URL is the one administrator - no sign-in. Fine to try it out. Before sharing the URL, configure Google, Microsoft or Okta sign-in (see the README); a configured provider always wins over this switch.", "secret": false, "strategy": "default", "default": "true" }, { "key": "INTELLIGENCE_API_KEY", "service": "OpenBot", "description": "From step 1 of the guide: the value of the CPK_INTELLIGENCE_API_KEY line that `npx copilotkit@latest project select` writes to .env (starts with cpk-). Free.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "INTELLIGENCE_API_URL", "service": "OpenBot", "description": "CopilotKit Intelligence API (durable threads and memory). Leave as is unless you self-host Intelligence.", "secret": false, "strategy": "default", "default": "https://api.intelligence.copilotkit.ai" }, { "key": "WORKER_SHARED_SECRET", "service": "OpenBot", "description": "Authenticates the Routines service to OpenBot. Generated.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "MANAGED_AGENT_AG_UI_URL", "service": "OpenBot", "description": "Where coworkers you create run. Wired to the Agent service over the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "COPILOTKIT_LICENSE_TOKEN", "service": "OpenBot", "description": "From step 1 of the guide: the value of the COPILOTKIT_LICENSE_TOKEN line that `npx copilotkit@latest license --write` writes to .env (long, starts with eyJ). Free.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "INTELLIGENCE_GATEWAY_WS_URL", "service": "OpenBot", "description": "CopilotKit Intelligence realtime gateway. Leave as is unless you self-host Intelligence.", "secret": false, "strategy": "default", "default": "wss://realtime.intelligence.copilotkit.ai" }, { "key": "DATABASE_URL", "service": "Routines", "description": "Wired to the Postgres service over the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "KEY_ENCRYPTION_KEY", "service": "Routines", "description": "Same key as OpenBot. Wired automatically.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "OPENBOT_SINGLE_USER", "service": "Routines", "description": "Matches OpenBot's single-user mode; the sweep itself never signs anyone in.", "secret": false, "strategy": "default", "default": "true" }, { "key": "SERVER_INTERNAL_URL", "service": "Routines", "description": "OpenBot over the private network, where due routines are handed off.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "INTELLIGENCE_API_KEY", "service": "Routines", "description": "Same as OpenBot. Wired automatically.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "INTELLIGENCE_API_URL", "service": "Routines", "description": "Same as OpenBot. Wired automatically.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "WORKER_SHARED_SECRET", "service": "Routines", "description": "Authenticates routine dispatches to OpenBot. Wired automatically.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "COPILOTKIT_LICENSE_TOKEN", "service": "Routines", "description": "Same as OpenBot. Wired automatically.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "INTELLIGENCE_GATEWAY_WS_URL", "service": "Routines", "description": "Same as OpenBot. Wired automatically.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PORT", "service": "Agent", "description": "Port the Agent serves on and Railway's healthcheck probes. Do not change.", "secret": false, "strategy": "default", "default": "4201" }, { "key": "BOT_MODEL", "service": "Agent", "description": "Model the coworkers you create ask for, sent verbatim to the provider.", "secret": false, "strategy": "default", "default": "gpt-5.6-terra" }, { "key": "BOT_PROVIDER", "service": "Agent", "description": "Model provider for coworkers you create: openai, anthropic or google. Anything but openai needs its own key added here (ANTHROPIC_API_KEY or GOOGLE_API_KEY).", "secret": false, "strategy": "default", "default": "openai" }, { "key": "OPENAI_API_KEY", "service": "Agent", "description": "Uses OpenBot's model key; coworkers you create spend it on every turn.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "OPENAI_BASE_URL", "service": "Agent", "description": "Optional - Uses OpenBot's OpenAI-compatible endpoint. Blank means api.openai.com.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "AGENT_TOOL_TOKEN", "service": "Agent", "description": "OpenBot's generated token for governed tool callbacks. Wired automatically.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "OPENBOT_TOOL_URL", "service": "Agent", "description": "Private callback where OpenBot enforces tool grants, policy and audit.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "MANAGED_AGENT_TOKEN", "service": "Agent", "description": "OpenBot's generated token, checked on every request. Wired automatically.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "openbot" } }, "cli": "railway deploy --template openbot", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "2473e81c-1662-4bb5-8d45-f4446ecf7bd3", "serializedConfig": { "buckets": {}, "services": { "11f8698b-20e9-4fe1-848e-c756027f47df": { "icon": "https://bogusz.co/external/openbot-gate-icon.png", "name": "Gate", "deploy": { "startCommand": "sh -c 'H=$(caddy hash-password --plaintext \"$GATE_PASSWORD\") && printf \":%s {\\n\\t@health path /health\\n\\thandle @health {\\n\\t\\trespond 200\\n\\t}\\n\\thandle {\\n\\t\\tbasic_auth {\\n\\t\\t\\t%s %s\\n\\t\\t}\\n\\t\\treverse_proxy %s\\n\\t}\\n}\\n\" \"$PORT\" \"$GATE_USER\" \"$H\" \"$UPSTREAM\" > /tmp/Caddyfile && exec caddy run --config /tmp/Caddyfile --adapter caddyfile'", "healthcheckPath": "/health" }, "source": { "image": "caddy:2-alpine" }, "variables": { "PORT": { "description": "Port Caddy listens on; matches the public HTTP proxy.", "defaultValue": "8080" }, "UPSTREAM": { "description": "Where the gate forwards to over the private network; wired automatically.", "defaultValue": "http://${{OpenBot.RAILWAY_PRIVATE_DOMAIN}}:3001" }, "GATE_USER": { "description": "Username your browser asks for when you open the OpenBot URL.", "defaultValue": "admin" }, "GATE_PASSWORD": { "description": "Password your browser asks for when you open the OpenBot URL. Generated; copy it from here. Change it any time and redeploy Gate.", "defaultValue": "{{GATE_PASSWORD}}" } }, "networking": { "serviceDomains": { ":8080": { "port": 8080 } } } }, "1ba3ead1-880d-41c0-ae1b-b0fe403d2b3c": { "icon": "https://devicons.railway.com/i/postgresql.svg", "name": "Postgres", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:18" }, "variables": { "PGDATA": { "isOptional": false, "description": "Location where the database will be initialized", "defaultValue": "/var/lib/postgresql/data/pgdata" }, "PGHOST": { "isOptional": false, "description": "Railway Private Domain Name.", "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "PGPORT": { "isOptional": false, "description": "Port to connect to Postgres.", "defaultValue": "5432" }, "PGUSER": { "isOptional": false, "description": "Required variable for Data panel", "defaultValue": "${{ POSTGRES_USER }}" }, "PGDATABASE": { "isOptional": false, "description": "Required variable for the data panel.", "defaultValue": "${{POSTGRES_DB}}" }, "PGPASSWORD": { "isOptional": false, "description": "Required variable for Data panel", "defaultValue": "${{POSTGRES_PASSWORD}}" }, "POSTGRES_DB": { "isOptional": false, "description": "Default database created when image is started.", "defaultValue": "railway" }, "DATABASE_URL": { "isOptional": false, "description": "URL to connect to Postgres database.", "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{PGDATABASE}}" }, "POSTGRES_USER": { "isOptional": false, "description": "User to connect to Postgres DB", "defaultValue": "postgres" }, "SSL_CERT_DAYS": { "isOptional": false, "description": "Optional - SSL certificate expiry in days.", "defaultValue": "820" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Password to connect to DB", "defaultValue": "{{POSTGRES_PASSWORD}}" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": false, "description": "Allow Postgres to cleanly shut down", "defaultValue": "60" } }, "volumeMounts": { "1ba3ead1-880d-41c0-ae1b-b0fe403d2b3c": { "mountPath": "/var/lib/postgresql/data" } } }, "3778279a-bed3-4c29-ac34-236420ac15ef": { "icon": "https://bogusz.co/external/openbot-icon.png", "name": "OpenBot", "deploy": { "startCommand": "sh -c \"mkdir -p /data/workspace /data/profiles && chown pwuser:pwuser /data /data/workspace /data/profiles && cd /app/server && /command/s6-setuidgid pwuser /usr/local/bin/bun scripts/migrate.ts && { (cd /app/agent-computer && PORT=4100 exec /command/s6-setuidgid pwuser /usr/local/bin/bun src/index.ts) & cd /app/server && exec /command/s6-setuidgid pwuser /usr/local/bin/bun src/index.ts; }\"", "healthcheckPath": "/health" }, "source": { "image": "ghcr.io/copilotkit/openbot:v0.0.5" }, "variables": { "PORT": { "description": "Tells Railway's healthcheck which port to probe. The image serves the app and API on 3001 - do not change it.", "defaultValue": "3001" }, "DATABASE_URL": { "description": "Wired to the Postgres service over the private network. Migrations run at start (single replica).", "defaultValue": "${{Postgres.DATABASE_URL}}" }, "PROFILES_DIR": { "description": "Coworkers' browser logins, on the /data volume so they survive redeploys.", "defaultValue": "/data/profiles" }, "WORKSPACE_DIR": { "description": "Coworkers' files, on the /data volume so they survive redeploys.", "defaultValue": "/data/workspace" }, "COMPUTER_TOKEN": { "description": "Shared secret between the API and the in-container browser (agent-computer). Generated.", "defaultValue": "{{COMPUTER_TOKEN}}" }, "OPENAI_API_KEY": { "description": "Your OpenAI API key. The built-in coworkers spend it. To use OpenRouter instead, paste an OpenRouter key here and set OPENAI_BASE_URL to https://openrouter.ai/api/v1.", "defaultValue": "{{OPENAI_API_KEY}}" }, "BETTER_AUTH_URL": { "isOptional": true, "description": "Optional - Where OAuth callbacks return to: https://the Gate service's domain (no trailing slash). Only with a sign-in provider.", "defaultValue": "" }, "OPENAI_BASE_URL": { "isOptional": true, "description": "Optional - OpenAI-compatible endpoint for OPENAI_API_KEY, e.g. https://openrouter.ai/api/v1 or your own gateway. Leave blank for api.openai.com. The coworkers ask that endpoint for the model gpt-5.6-terra.", "defaultValue": "" }, "TRUSTED_ORIGINS": { "isOptional": true, "description": "Optional - Extra origins the API accepts, comma-separated. Leave blank when app and API share this one domain.", "defaultValue": "" }, "AGENT_TOOL_TOKEN": { "description": "Shared secret the Agent service presents when calling governed tools through OpenBot. Generated.", "defaultValue": "{{AGENT_TOOL_TOKEN}}" }, "EMBEDDED_POSTGRES": { "description": "Postgres is the separate Railway service; migrations run once at start via the start command.", "defaultValue": "off" }, "OKTA_OAUTH_ISSUER": { "isOptional": true, "description": "Optional - Okta issuer, e.g. https://example.okta.com/oauth2/default.", "defaultValue": "" }, "BETTER_AUTH_SECRET": { "isOptional": true, "description": "Optional - Signs sign-in cookies; any random string of 32+ characters. Only set it together with a sign-in provider - set on its own it stops the server.", "defaultValue": "" }, "KEY_ENCRYPTION_KEY": { "description": "Encrypts the credential vault at rest (base64, 32 bytes). Generated for you. NEVER change it - every stored credential becomes unreadable.", "defaultValue": "{{KEY_ENCRYPTION_KEY}}" }, "OPENBOT_PUBLIC_URL": { "description": "This deployment's public address (the Gate service's domain). Used to build the callback URL when someone connects Google Drive or Notion.", "defaultValue": "https://${{Gate.RAILWAY_PUBLIC_DOMAIN}}" }, "MANAGED_AGENT_TOKEN": { "description": "Shared secret OpenBot presents to the Agent service on every coworker run. Generated.", "defaultValue": "{{MANAGED_AGENT_TOKEN}}" }, "OPENBOT_SINGLE_USER": { "description": "Everyone who opens the URL is the one administrator - no sign-in. Fine to try it out. Before sharing the URL, configure Google, Microsoft or Okta sign-in (see the README); a configured provider always wins over this switch.", "defaultValue": "true" }, "AUDIT_RETENTION_DAYS": { "isOptional": true, "description": "Optional - Days of audit trail to keep. Blank keeps everything (the safe default).", "defaultValue": "" }, "INITIAL_ADMIN_EMAILS": { "isOptional": true, "description": "Optional - Comma-separated emails that get the administrator role on sign-in. Required once a sign-in provider is configured; nothing else grants the role.", "defaultValue": "" }, "INTELLIGENCE_API_KEY": { "description": "From step 1 of the guide: the value of the CPK_INTELLIGENCE_API_KEY line that `npx copilotkit@latest project select` writes to .env (starts with cpk-). Free.", "defaultValue": "{{INTELLIGENCE_API_KEY}}" }, "INTELLIGENCE_API_URL": { "description": "CopilotKit Intelligence API (durable threads and memory). Leave as is unless you self-host Intelligence.", "defaultValue": "https://api.intelligence.copilotkit.ai" }, "OKTA_OAUTH_CLIENT_ID": { "isOptional": true, "description": "Optional - Okta sign-in. Redirect URI: https://the Gate service's domain/api/auth/callback/okta. Needs OKTA_OAUTH_ISSUER too.", "defaultValue": "" }, "WORKER_SHARED_SECRET": { "description": "Authenticates the Routines service to OpenBot. Generated.", "defaultValue": "{{WORKER_SHARED_SECRET}}" }, "AGENT_COMPUTER_POLICY": { "isOptional": true, "description": "Optional - JSON action policy for what Bots may do in the browser; normally edited at /admin/boundaries instead.", "defaultValue": "" }, "GOOGLE_OAUTH_CLIENT_ID": { "isOptional": true, "description": "Optional - Google sign-in. Redirect URI: https://the Gate service's domain/api/auth/callback/google. Set together with GOOGLE_OAUTH_CLIENT_SECRET, BETTER_AUTH_SECRET, BETTER_AUTH_URL and INITIAL_ADMIN_EMAILS.", "defaultValue": "" }, "MANAGED_AGENT_AG_UI_URL": { "description": "Where coworkers you create run. Wired to the Agent service over the private network.", "defaultValue": "http://${{Agent.RAILWAY_PRIVATE_DOMAIN}}:4201/ag-ui" }, "COPILOTKIT_LICENSE_TOKEN": { "description": "From step 1 of the guide: the value of the COPILOTKIT_LICENSE_TOKEN line that `npx copilotkit@latest license --write` writes to .env (long, starts with eyJ). Free.", "defaultValue": "{{COPILOTKIT_LICENSE_TOKEN}}" }, "OKTA_OAUTH_CLIENT_SECRET": { "isOptional": true, "description": "Optional - Okta sign-in client secret.", "defaultValue": "" }, "MICROSOFT_OAUTH_CLIENT_ID": { "isOptional": true, "description": "Optional - Microsoft (Entra ID) sign-in. Redirect URI: https://the Gate service's domain/api/auth/callback/microsoft.", "defaultValue": "" }, "MICROSOFT_OAUTH_TENANT_ID": { "isOptional": true, "description": "Optional - Your directory (tenant) GUID to admit only your company; blank means common.", "defaultValue": "" }, "GOOGLE_OAUTH_CLIENT_SECRET": { "isOptional": true, "description": "Optional - Google sign-in client secret.", "defaultValue": "" }, "INTELLIGENCE_GATEWAY_WS_URL": { "description": "CopilotKit Intelligence realtime gateway. Leave as is unless you self-host Intelligence.", "defaultValue": "wss://realtime.intelligence.copilotkit.ai" }, "MICROSOFT_OAUTH_CLIENT_SECRET": { "isOptional": true, "description": "Optional - Microsoft sign-in client secret.", "defaultValue": "" } }, "networking": { "serviceDomains": null }, "volumeMounts": { "3778279a-bed3-4c29-ac34-236420ac15ef": { "mountPath": "/data" } } }, "7dad381f-5160-44d2-8d21-c37df0ba0943": { "icon": "https://bogusz.co/external/openbot-icon.png", "name": "Routines", "deploy": { "cronSchedule": "*/5 * * * *", "startCommand": "sh -c \"cd /app/server && exec timeout -s KILL 240 /usr/local/bin/bun scripts/fire-routines.ts\"", "restartPolicyMaxRetries": 1 }, "source": { "image": "ghcr.io/copilotkit/openbot:v0.0.5" }, "variables": { "DATABASE_URL": { "description": "Wired to the Postgres service over the private network.", "defaultValue": "${{Postgres.DATABASE_URL}}" }, "KEY_ENCRYPTION_KEY": { "description": "Same key as OpenBot. Wired automatically.", "defaultValue": "${{OpenBot.KEY_ENCRYPTION_KEY}}" }, "OPENBOT_SINGLE_USER": { "description": "Matches OpenBot's single-user mode; the sweep itself never signs anyone in.", "defaultValue": "true" }, "SERVER_INTERNAL_URL": { "description": "OpenBot over the private network, where due routines are handed off.", "defaultValue": "http://${{OpenBot.RAILWAY_PRIVATE_DOMAIN}}:3001" }, "INTELLIGENCE_API_KEY": { "description": "Same as OpenBot. Wired automatically.", "defaultValue": "${{OpenBot.INTELLIGENCE_API_KEY}}" }, "INTELLIGENCE_API_URL": { "description": "Same as OpenBot. Wired automatically.", "defaultValue": "${{OpenBot.INTELLIGENCE_API_URL}}" }, "WORKER_SHARED_SECRET": { "description": "Authenticates routine dispatches to OpenBot. Wired automatically.", "defaultValue": "${{OpenBot.WORKER_SHARED_SECRET}}" }, "COPILOTKIT_LICENSE_TOKEN": { "description": "Same as OpenBot. Wired automatically.", "defaultValue": "${{OpenBot.COPILOTKIT_LICENSE_TOKEN}}" }, "INTELLIGENCE_GATEWAY_WS_URL": { "description": "Same as OpenBot. Wired automatically.", "defaultValue": "${{OpenBot.INTELLIGENCE_GATEWAY_WS_URL}}" } } }, "eb110054-2a82-4f28-86b2-47ba0272b865": { "icon": "https://bogusz.co/external/openbot-icon.png", "name": "Agent", "deploy": { "healthcheckPath": "/health" }, "source": { "image": "ghcr.io/will-bogusz/openbot-agent-langgraph:v0.0.5" }, "variables": { "PORT": { "description": "Port the Agent serves on and Railway's healthcheck probes. Do not change.", "defaultValue": "4201" }, "BOT_MODEL": { "description": "Model the coworkers you create ask for, sent verbatim to the provider.", "defaultValue": "gpt-5.6-terra" }, "BOT_PROVIDER": { "description": "Model provider for coworkers you create: openai, anthropic or google. Anything but openai needs its own key added here (ANTHROPIC_API_KEY or GOOGLE_API_KEY).", "defaultValue": "openai" }, "OPENAI_API_KEY": { "description": "Uses OpenBot's model key; coworkers you create spend it on every turn.", "defaultValue": "${{OpenBot.OPENAI_API_KEY}}" }, "OPENAI_BASE_URL": { "isOptional": true, "description": "Optional - Uses OpenBot's OpenAI-compatible endpoint. Blank means api.openai.com.", "defaultValue": "${{OpenBot.OPENAI_BASE_URL}}" }, "AGENT_TOOL_TOKEN": { "description": "OpenBot's generated token for governed tool callbacks. Wired automatically.", "defaultValue": "${{OpenBot.AGENT_TOOL_TOKEN}}" }, "OPENBOT_TOOL_URL": { "description": "Private callback where OpenBot enforces tool grants, policy and audit.", "defaultValue": "http://${{OpenBot.RAILWAY_PRIVATE_DOMAIN}}:3001/api/agent-tools/call" }, "MANAGED_AGENT_TOKEN": { "description": "OpenBot's generated token, checked on every request. Wired automatically.", "defaultValue": "${{OpenBot.MANAGED_AGENT_TOKEN}}" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "Gate", "method": "GET", "path": "/health", "expect_status": 200 } }, "resources": { "expected_services": 5, "needs_volume": true }, "generated_at": "2026-09-03T23:07:37.076Z", "generator_version": "0.1.0", "status": "degraded", "validated_at": "2026-09-03T21:27:32.174Z", "success_rate_30d": 0, "validation": { "last_run_id": "run_b951bf8ce96d4f308e62", "checks": [ { "name": "workflow_completed", "passed": true }, { "name": "all_services_deployed", "passed": false, "detail": "FAILED,DEPLOYING,SUCCESS,SUCCESS,SUCCESS" } ] } }