{ "manifest_version": "1.0.0", "template": { "id": "19724e12-2a9d-42dc-b1d0-900e8df27dd9", "slug": "openclaw-ai-n8n-workflows-tailscale-secu", "name": "OpenClaw AI + n8n workflows + Tailscale security", "description": "OpenClaw AI Agent Stack — n8n , Tailscale Mesh, Modal & 500+ Integrations", "url": "https://railway.com/deploy/openclaw-ai-n8n-workflows-tailscale-secu", "upstream": { "image": "n8nio/n8n" } }, "status": "unvalidated", "validated_at": null, "success_rate_30d": null, "services": [ { "name": "Primary", "source": { "image": "n8nio/n8n" }, "needs_volume": false, "http": true }, { "name": "openclaw-railway-template", "source": { "repo": "https://github.com/TrendpilotAI/openclaw-railway-tailscale" }, "needs_volume": true, "volume_mount_path": "/data", "http": true }, { "name": "Postgres", "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:16" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false }, { "name": "Redis", "source": { "image": "railwayapp/redis" }, "needs_volume": true, "volume_mount_path": "/bitnami", "http": false }, { "name": "Worker", "source": { "image": "n8nio/n8n" }, "needs_volume": false, "http": false } ], "required_inputs": [ { "key": "PORT", "service": "Primary", "description": "HTTP port for n8n primary instance", "secret": false, "strategy": "ask_user" }, { "key": "WEBHOOK_URL", "service": "Primary", "description": "Public URL for n8n webhooks", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "NODE_OPTIONS", "service": "Primary", "description": "Node.js runtime options (e.g. --max-old-space-size)", "secret": false, "strategy": "ask_user" }, { "key": "N8N_TRUST_PROXY", "service": "Primary", "description": "Trust reverse proxy headers (default: true)", "secret": false, "strategy": "ask_user" }, { "key": "DB_POSTGRESDB_HOST", "service": "Primary", "description": "PostgreSQL host (use Railway reference variable)", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DB_POSTGRESDB_PORT", "service": "Primary", "description": "PostgreSQL port (use Railway reference variable)", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DB_POSTGRESDB_USER", "service": "Primary", "description": "PostgreSQL user (use Railway reference variable)", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "N8N_ENCRYPTION_KEY", "service": "Primary", "description": "Encryption key for credentials storage", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "N8N_LISTEN_ADDRESS", "service": "Primary", "description": "Address n8n listens on (default: 0.0.0.0)", "secret": false, "strategy": "ask_user" }, { "key": "N8N_EDITOR_BASE_URL", "service": "Primary", "description": "Base URL for the n8n editor UI", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "N8N_RUNNERS_ENABLED", "service": "Primary", "description": "Enable task runners (default: true)", "secret": false, "strategy": "ask_user" }, { "key": "QUEUE_BULL_REDIS_HOST", "service": "Primary", "description": "Redis host for queue mode (use Railway reference) │", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "QUEUE_BULL_REDIS_PORT", "service": "Primary", "description": "Redis port for queue mode (use Railway reference)", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DB_POSTGRESDB_DATABASE", "service": "Primary", "description": "PostgreSQL database name (use Railway reference)", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DB_POSTGRESDB_PASSWORD", "service": "Primary", "description": "PostgreSQL password (use Railway reference)", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "QUEUE_BULL_REDIS_PASSWORD", "service": "Primary", "description": "Redis password for queue mode (use Railway reference) │", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "QUEUE_BULL_REDIS_USERNAME", "service": "Primary", "description": "Redis username for queue mode", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "QUEUE_BULL_REDIS_DUALSTACK", "service": "Primary", "description": "Enable Redis dual-stack networking", "secret": false, "strategy": "ask_user" }, { "key": "ENABLE_ALPINE_PRIVATE_NETWORKING", "service": "Primary", "description": "Enable Railway private networking", "secret": false, "strategy": "ask_user" }, { "key": "OFFLOAD_MANUAL_EXECUTIONS_TO_WORKERS", "service": "Primary", "description": "Offload manual runs to worker nodes", "secret": false, "strategy": "ask_user" }, { "key": "N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS", "service": "Primary", "description": "Enforce strict file permissions on settings", "secret": false, "strategy": "ask_user" }, { "key": "PORT", "service": "openclaw-railway-template", "description": "HTTP port for the Express wrapper (default: 8080)", "secret": false, "strategy": "ask_user" }, { "key": "CACHEBUST", "service": "openclaw-railway-template", "description": "Change to force a fresh Docker build", "secret": false, "strategy": "ask_user" }, { "key": "N8N_API_KEY", "service": "openclaw-railway-template", "description": "n8n API key for workflow automation integration", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "GITHUB_TOKEN", "service": "openclaw-railway-template", "description": "GitHub PAT for repo access from the instance", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "GROK_API_KEY", "service": "openclaw-railway-template", "description": "xAI Grok API key (optional LLM provider)", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENAI_API_KEY", "service": "openclaw-railway-template", "description": "OpenAI API key (optional LLM provider)", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SETUP_PASSWORD", "service": "openclaw-railway-template", "description": "Password to access the /setup wizard (required)", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SETUP_USERNAME", "service": "openclaw-railway-template", "description": "Username for /setup Basic auth (default: admin)", "secret": false, "strategy": "ask_user" }, { "key": "RUNWARE_API_KEY", "service": "openclaw-railway-template", "description": "Runware API key for image generation", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "SLACK_BOT_TOKEN", "service": "openclaw-railway-template", "description": "Slack bot token for channel integration", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "TAILSCALE_SERVE", "service": "openclaw-railway-template", "description": "Enable Tailscale Serve HTTPS proxy (default: true)", "secret": false, "strategy": "ask_user" }, { "key": "AWS_ENDPOINT_URL", "service": "openclaw-railway-template", "description": "S3-compatible endpoint URL for storage", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DEEPSEEK_API_KEY", "service": "openclaw-railway-template", "description": "DeepSeek API key (optional LLM provider)", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "ANTHROPIC_API_KEY", "service": "openclaw-railway-template", "description": "Anthropic API key for Claude models", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "AWS_ACCESS_KEY_ID", "service": "openclaw-railway-template", "description": "AWS access key for S3 storage", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "TAILSCALE_AUTHKEY", "service": "openclaw-railway-template", "description": "Tailscale auth key (reusable + ephemeral recommended)", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "AWS_DEFAULT_REGION", "service": "openclaw-railway-template", "description": "AWS region for S3 storage", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "AWS_S3_BUCKET_NAME", "service": "openclaw-railway-template", "description": "S3 bucket name for file storage", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CLAWDBOT_STATE_DIR", "service": "openclaw-railway-template", "description": "Deprecated: use OPENCLAW_STATE_DIR instead", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CLOUDFLARE_API_KEY", "service": "openclaw-railway-template", "description": "Cloudflare API key for DNS/tunnel integration", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCLAW_STATE_DIR", "service": "openclaw-railway-template", "description": "State directory path (default: /data/.openclaw)", "secret": false, "strategy": "ask_user" }, { "key": "TAILSCALE_HOSTNAME", "service": "openclaw-railway-template", "description": "Tailnet hostname (default: openclaw-railway)", "secret": false, "strategy": "ask_user" }, { "key": "AWS_SECRET_ACCESS_KEY", "service": "openclaw-railway-template", "description": "AWS secret key for S3 storage", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CLAWDBOT_GATEWAY_TOKEN", "service": "openclaw-railway-template", "description": "Deprecated: use OPENCLAW_GATEWAY_TOKEN instead", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CLAWDBOT_WORKSPACE_DIR", "service": "openclaw-railway-template", "description": "Deprecated: use OPENCLAW_GATEWAY_TOKEN instead", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "OPENCLAW_GATEWAY_TOKEN", "service": "openclaw-railway-template", "description": "Gateway auth token (auto-generated if not set)", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCLAW_WORKSPACE_DIR", "service": "openclaw-railway-template", "description": "Workspace directory path (default: /data/workspace)", "secret": false, "strategy": "ask_user" }, { "key": "Openclaw_exec_security", "service": "openclaw-railway-template", "description": "Execution security policy for tool sandboxing", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CLAUDE_CODE_OAUTH_TOKEN", "service": "openclaw-railway-template", "description": "Claude Code OAuth token for Anthropic auth", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "PGDATA", "service": "Postgres", "description": "PostgreSQL data directory path", "secret": false, "strategy": "ask_user" }, { "key": "PGHOST", "service": "Postgres", "description": "PostgreSQL host address", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGPORT", "service": "Postgres", "description": "PostgreSQL listen port", "secret": false, "strategy": "ask_user" }, { "key": "PGUSER", "service": "Postgres", "description": "PostgreSQL superuser name", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGDATABASE", "service": "Postgres", "description": "Default database name", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGPASSWORD", "service": "Postgres", "description": "PostgreSQL superuser password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_DB", "service": "Postgres", "description": "Database to create on first start", "secret": false, "strategy": "ask_user" }, { "key": "DATABASE_URL", "service": "Postgres", "description": "Full PostgreSQL connection string", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_USER", "service": "Postgres", "description": "User to create on first start", "secret": false, "strategy": "ask_user" }, { "key": "SSL_CERT_DAYS", "service": "Postgres", "description": "SSL certificate validity in days", "secret": false, "strategy": "ask_user" }, { "key": "POSTGRES_PASSWORD", "service": "Postgres", "description": "Password for the created user", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "DATABASE_PUBLIC_URL", "service": "Postgres", "description": "Public PostgreSQL connection string", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "Postgres", "description": "Graceful shutdown drain period in seconds", "secret": false, "strategy": "ask_user" }, { "key": "REDISHOST", "service": "Redis", "description": "Redis server hostname", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "REDISPORT", "service": "Redis", "description": "Redis server port", "secret": false, "strategy": "ask_user" }, { "key": "REDISUSER", "service": "Redis", "description": "Redis username", "secret": false, "strategy": "ask_user" }, { "key": "REDIS_URL", "service": "Redis", "description": "Full Redis connection string", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDISPASSWORD", "service": "Redis", "description": "Redis password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_PASSWORD", "service": "Redis", "description": "Redis password (alternate var name)", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "RAILWAY_RUN_UID", "service": "Redis", "description": "UID for Railway process execution", "secret": false, "strategy": "ask_user" }, { "key": "REDIS_PUBLIC_URL", "service": "Redis", "description": "Public Redis connection string", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PORT", "service": "Worker", "description": "HTTP port for n8n worker", "secret": false, "strategy": "ask_user" }, { "key": "DB_TYPE", "service": "Worker", "description": "Database type (postgresdb)", "secret": false, "strategy": "ask_user" }, { "key": "WEBHOOK_URL", "service": "Worker", "description": "Public URL for n8n webhooks", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "NODE_OPTIONS", "service": "Worker", "description": "Node.js runtime options", "secret": false, "strategy": "ask_user" }, { "key": "EXECUTIONS_MODE", "service": "Worker", "description": "Execution mode: queue", "secret": false, "strategy": "ask_user" }, { "key": "DB_POSTGRESDB_HOST", "service": "Worker", "description": "PostgreSQL host (use Railway reference)", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DB_POSTGRESDB_PORT", "service": "Worker", "description": "PostgreSQL port (use Railway reference)", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DB_POSTGRESDB_USER", "service": "Worker", "description": "PostgreSQL user (use Railway reference)", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "N8N_ENCRYPTION_KEY", "service": "Worker", "description": "Encryption key (must match Primary)", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "N8N_LISTEN_ADDRESS", "service": "Worker", "description": "Address worker listens on", "secret": false, "strategy": "ask_user" }, { "key": "N8N_RUNNERS_ENABLED", "service": "Worker", "description": "Enable task runners", "secret": false, "strategy": "ask_user" }, { "key": "QUEUE_BULL_REDIS_HOST", "service": "Worker", "description": "Redis host (use Railway reference)", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "QUEUE_BULL_REDIS_PORT", "service": "Worker", "description": "Redis port (use Railway reference)", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DB_POSTGRESDB_DATABASE", "service": "Worker", "description": "PostgreSQL database (use Railway reference)", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DB_POSTGRESDB_PASSWORD", "service": "Worker", "description": "PostgreSQL password (use Railway reference) │", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "QUEUE_BULL_REDIS_PASSWORD", "service": "Worker", "description": "Redis password (use Railway reference)", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "QUEUE_BULL_REDIS_USERNAME", "service": "Worker", "description": "Redis username", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "QUEUE_BULL_REDIS_DUALSTACK", "service": "Worker", "description": "Enable Redis dual-stack networking", "secret": false, "strategy": "ask_user" }, { "key": "ENABLE_ALPINE_PRIVATE_NETWORKING", "service": "Worker", "description": "Enable Railway private networking", "secret": false, "strategy": "ask_user" }, { "key": "OFFLOAD_MANUAL_EXECUTIONS_TO_WORKERS", "service": "Worker", "description": "Offload manual runs to workers", "secret": false, "strategy": "ask_user" }, { "key": "N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS", "service": "Worker", "description": "Enforce strict file permissions", "secret": false, "strategy": "ask_user" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "openclaw-ai-n8n-workflows-tailscale-secu" } }, "cli": "railway deploy --template openclaw-ai-n8n-workflows-tailscale-secu", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "19724e12-2a9d-42dc-b1d0-900e8df27dd9", "serializedConfig": { "buckets": { "e6ff6fa1-597a-48c0-a4d7-dcfd6b791944": { "name": "preserved-carrier" } }, "services": { "0e1c6382-18da-42f2-9548-6b03ac8511e1": { "icon": "https://devicons.railway.app/i/n8n.svg", "name": "Primary", "deploy": { "startCommand": "n8n start", "healthcheckPath": "/healthz", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "n8nio/n8n" }, "variables": { "PORT": { "isOptional": false, "description": "HTTP port for n8n primary instance", "defaultValue": "{{PORT}}" }, "WEBHOOK_URL": { "isOptional": false, "description": "Public URL for n8n webhooks", "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}" }, "NODE_OPTIONS": { "isOptional": false, "description": "Node.js runtime options (e.g. --max-old-space-size)", "defaultValue": "{{NODE_OPTIONS}}" }, "N8N_TRUST_PROXY": { "description": "Trust reverse proxy headers (default: true)", "defaultValue": "{{N8N_TRUST_PROXY}}" }, "DB_POSTGRESDB_HOST": { "isOptional": false, "description": "PostgreSQL host (use Railway reference variable)", "defaultValue": "${{Postgres.PGHOST}}" }, "DB_POSTGRESDB_PORT": { "isOptional": false, "description": "PostgreSQL port (use Railway reference variable)", "defaultValue": "${{Postgres.PGPORT}}" }, "DB_POSTGRESDB_USER": { "isOptional": false, "description": "PostgreSQL user (use Railway reference variable)", "defaultValue": "${{Postgres.POSTGRES_USER}}" }, "N8N_ENCRYPTION_KEY": { "isOptional": false, "description": "Encryption key for credentials storage", "defaultValue": "{{N8N_ENCRYPTION_KEY}}" }, "N8N_LISTEN_ADDRESS": { "isOptional": false, "description": "Address n8n listens on (default: 0.0.0.0)", "defaultValue": "{{N8N_LISTEN_ADDRESS}}" }, "N8N_EDITOR_BASE_URL": { "isOptional": false, "description": "Base URL for the n8n editor UI", "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}" }, "N8N_RUNNERS_ENABLED": { "isOptional": false, "description": "Enable task runners (default: true)", "defaultValue": "{{N8N_RUNNERS_ENABLED}}" }, "QUEUE_BULL_REDIS_HOST": { "isOptional": false, "description": "Redis host for queue mode (use Railway reference) │", "defaultValue": "${{Redis.REDISHOST}}" }, "QUEUE_BULL_REDIS_PORT": { "isOptional": false, "description": "Redis port for queue mode (use Railway reference)", "defaultValue": "${{Redis.REDISPORT}}" }, "DB_POSTGRESDB_DATABASE": { "isOptional": false, "description": "PostgreSQL database name (use Railway reference)", "defaultValue": "${{Postgres.POSTGRES_DB}}" }, "DB_POSTGRESDB_PASSWORD": { "isOptional": false, "description": "PostgreSQL password (use Railway reference)", "defaultValue": "${{Postgres.POSTGRES_PASSWORD}}" }, "QUEUE_BULL_REDIS_PASSWORD": { "isOptional": false, "description": "Redis password for queue mode (use Railway reference) │", "defaultValue": "${{Redis.REDIS_PASSWORD}}" }, "QUEUE_BULL_REDIS_USERNAME": { "isOptional": false, "description": "Redis username for queue mode", "defaultValue": "${{Redis.REDISUSER}}" }, "QUEUE_BULL_REDIS_DUALSTACK": { "isOptional": false, "description": "Enable Redis dual-stack networking", "defaultValue": "{{QUEUE_BULL_REDIS_DUALSTACK}}" }, "ENABLE_ALPINE_PRIVATE_NETWORKING": { "isOptional": false, "description": "Enable Railway private networking", "defaultValue": "{{ENABLE_ALPINE_PRIVATE_NETWORKING}}" }, "OFFLOAD_MANUAL_EXECUTIONS_TO_WORKERS": { "isOptional": false, "description": "Offload manual runs to worker nodes", "defaultValue": "{{OFFLOAD_MANUAL_EXECUTIONS_TO_WORKERS}}" }, "N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS": { "isOptional": false, "description": "Enforce strict file permissions on settings", "defaultValue": "{{N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS}}" } }, "networking": { "serviceDomains": { "": {} } } }, "2e0db282-e06d-4958-a351-8e0f0869aa3a": { "icon": null, "name": "openclaw-railway-template", "deploy": { "startCommand": "/app/start.sh ", "healthcheckPath": "/setup/healthz", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/TrendpilotAI/openclaw-railway-tailscale", "rootDirectory": "/" }, "variables": { "PORT": { "isOptional": false, "description": "HTTP port for the Express wrapper (default: 8080)", "defaultValue": "{{PORT}}" }, "CACHEBUST": { "isOptional": false, "description": "Change to force a fresh Docker build", "defaultValue": "{{CACHEBUST}}" }, "N8N_API_KEY": { "isOptional": false, "description": "n8n API key for workflow automation integration", "defaultValue": "{{N8N_API_KEY}}" }, "GITHUB_TOKEN": { "isOptional": false, "description": "GitHub PAT for repo access from the instance", "defaultValue": "{{GITHUB_TOKEN}}" }, "GROK_API_KEY": { "isOptional": false, "description": "xAI Grok API key (optional LLM provider)", "defaultValue": "{{GROK_API_KEY}}" }, "OPENAI_API_KEY": { "isOptional": false, "description": "OpenAI API key (optional LLM provider)", "defaultValue": "${{shared.OPENAI_API_KEY}}" }, "SETUP_PASSWORD": { "isOptional": false, "description": "Password to access the /setup wizard (required)", "defaultValue": "${{shared.SETUP_PASSWORD}}" }, "SETUP_USERNAME": { "isOptional": false, "description": "Username for /setup Basic auth (default: admin)", "defaultValue": "{{SETUP_USERNAME}}" }, "RUNWARE_API_KEY": { "isOptional": false, "description": "Runware API key for image generation", "defaultValue": "{{RUNWARE_API_KEY}}" }, "SLACK_BOT_TOKEN": { "isOptional": false, "description": "Slack bot token for channel integration", "defaultValue": "{{SLACK_BOT_TOKEN}}" }, "TAILSCALE_SERVE": { "isOptional": false, "description": "Enable Tailscale Serve HTTPS proxy (default: true)", "defaultValue": "{{TAILSCALE_SERVE}}" }, "AWS_ENDPOINT_URL": { "isOptional": false, "description": "S3-compatible endpoint URL for storage", "defaultValue": "${{preserved-carrier.ENDPOINT}}" }, "DEEPSEEK_API_KEY": { "isOptional": false, "description": "DeepSeek API key (optional LLM provider)", "defaultValue": "{{DEEPSEEK_API_KEY}}" }, "ANTHROPIC_API_KEY": { "isOptional": false, "description": "Anthropic API key for Claude models", "defaultValue": "${{shared.ANTHROPIC_API_KEY}}" }, "AWS_ACCESS_KEY_ID": { "isOptional": false, "description": "AWS access key for S3 storage", "defaultValue": "${{preserved-carrier.ACCESS_KEY_ID}}" }, "TAILSCALE_AUTHKEY": { "isOptional": false, "description": "Tailscale auth key (reusable + ephemeral recommended)", "defaultValue": "{{TAILSCALE_AUTHKEY}}" }, "AWS_DEFAULT_REGION": { "isOptional": false, "description": "AWS region for S3 storage", "defaultValue": "${{preserved-carrier.REGION}}" }, "AWS_S3_BUCKET_NAME": { "isOptional": false, "description": "S3 bucket name for file storage", "defaultValue": "${{preserved-carrier.BUCKET}}" }, "CLAWDBOT_STATE_DIR": { "isOptional": false, "description": "Deprecated: use OPENCLAW_STATE_DIR instead", "defaultValue": "${{shared.CLAWDBOT_STATE_DIR}}" }, "CLOUDFLARE_API_KEY": { "isOptional": false, "description": "Cloudflare API key for DNS/tunnel integration", "defaultValue": "{{CLOUDFLARE_API_KEY}}" }, "OPENCLAW_STATE_DIR": { "isOptional": false, "description": "State directory path (default: /data/.openclaw)", "defaultValue": "{{OPENCLAW_STATE_DIR}}" }, "TAILSCALE_HOSTNAME": { "isOptional": false, "description": "Tailnet hostname (default: openclaw-railway)", "defaultValue": "{{TAILSCALE_HOSTNAME}}" }, "AWS_SECRET_ACCESS_KEY": { "isOptional": false, "description": "AWS secret key for S3 storage", "defaultValue": "${{preserved-carrier.SECRET_ACCESS_KEY}}" }, "CLAWDBOT_GATEWAY_TOKEN": { "isOptional": false, "description": "Deprecated: use OPENCLAW_GATEWAY_TOKEN instead", "defaultValue": "${{shared.CLAWDBOT_GATEWAY_TOKEN}}" }, "CLAWDBOT_WORKSPACE_DIR": { "isOptional": false, "description": "Deprecated: use OPENCLAW_GATEWAY_TOKEN instead", "defaultValue": "${{shared.CLAWDBOT_WORKSPACE_DIR}}" }, "OPENCLAW_GATEWAY_TOKEN": { "isOptional": false, "description": "Gateway auth token (auto-generated if not set)", "defaultValue": "{{OPENCLAW_GATEWAY_TOKEN}}" }, "OPENCLAW_WORKSPACE_DIR": { "isOptional": false, "description": "Workspace directory path (default: /data/workspace)", "defaultValue": "{{OPENCLAW_WORKSPACE_DIR}}" }, "Openclaw_exec_security": { "isOptional": false, "description": "Execution security policy for tool sandboxing", "defaultValue": "${{shared.Openclaw_exec_security}}" }, "CLAUDE_CODE_OAUTH_TOKEN": { "isOptional": false, "description": "Claude Code OAuth token for Anthropic auth", "defaultValue": "{{CLAUDE_CODE_OAUTH_TOKEN}}" } }, "networking": { "serviceDomains": { "": {} } }, "volumeMounts": { "2e0db282-e06d-4958-a351-8e0f0869aa3a": { "mountPath": "/data", "backupSchedules": [ "DAILY", "WEEKLY", "MONTHLY" ] } } }, "31cbde07-9468-4fff-8e9f-fb35c80e50bb": { "icon": "https://img.icons8.com/color/48/postgreesql.png", "name": "Postgres", "deploy": { "startCommand": "/bin/sh -c \"unset PGPORT; docker-entrypoint.sh postgres --port=5432\"", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:16" }, "variables": { "PGDATA": { "isOptional": false, "description": "PostgreSQL data directory path", "defaultValue": "{{PGDATA}}" }, "PGHOST": { "isOptional": false, "description": "PostgreSQL host address", "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "PGPORT": { "isOptional": false, "description": "PostgreSQL listen port", "defaultValue": "{{PGPORT}}" }, "PGUSER": { "isOptional": false, "description": "PostgreSQL superuser name", "defaultValue": "${{POSTGRES_USER}}" }, "PGDATABASE": { "isOptional": false, "description": "Default database name", "defaultValue": "${{POSTGRES_DB}}" }, "PGPASSWORD": { "isOptional": false, "description": "PostgreSQL superuser password", "defaultValue": "${{POSTGRES_PASSWORD}}" }, "POSTGRES_DB": { "isOptional": false, "description": "Database to create on first start", "defaultValue": "{{POSTGRES_DB}}" }, "DATABASE_URL": { "isOptional": false, "description": "Full PostgreSQL connection string", "defaultValue": "postgresql://${{POSTGRES_USER}}:${{POSTGRES_PASSWORD}}@${{PGHOST}}:${{PGPORT}}/${{\"{PSTGRES_DB\"}}" }, "POSTGRES_USER": { "isOptional": false, "description": "User to create on first start", "defaultValue": "{{POSTGRES_USER}}" }, "SSL_CERT_DAYS": { "isOptional": false, "description": "SSL certificate validity in days", "defaultValue": "{{SSL_CERT_DAYS}}" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Password for the created user", "defaultValue": "{{POSTGRES_PASSWORD}}" }, "DATABASE_PUBLIC_URL": { "isOptional": false, "description": "Public PostgreSQL connection string", "defaultValue": "postgresql://${{POSTGRES_USER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_TCP_PROXY_DOMAIN}}:${{RAILWAY_TCP_PROXY_PORT}}/${{POSTGRES_DB}}" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": false, "description": "Graceful shutdown drain period in seconds", "defaultValue": "{{RAILWAY_DEPLOYMENT_DRAINING_SECONDS}}" } }, "volumeMounts": { "31cbde07-9468-4fff-8e9f-fb35c80e50bb": { "mountPath": "/var/lib/postgresql/data" } }, "haTemplateCode": "postgres-ha", "haConversionConfig": { "edge": { "label": "Reverse Proxy", "options": [ 2, 3, 4, 5 ], "nodeLabel": "HAProxy", "description": "Routes traffic to the primary", "defaultValue": 3 }, "replica": { "label": "Replicas", "options": [ 2, 3, 4, 5, 6, 7 ], "nodeLabel": "Postgres", "description": "Streaming replicas for automatic failover", "defaultValue": 2 }, "internal": { "label": "Coordinator Nodes", "options": [ 3, 5, 7, 9 ], "nodeLabel": "etcd", "defaultValue": 3 }, "description": "This will convert your Postgres database to an HA cluster with Patroni failover and etcd consensus." } }, "7c0fd410-149d-40a7-bcc6-3afc5794e8f3": { "icon": "https://img.icons8.com/color/48/redis--v1.png", "name": "Redis", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "railwayapp/redis" }, "variables": { "REDISHOST": { "isOptional": false, "description": "Redis server hostname", "defaultValue": "\"${{RAILWAY_PRIVATE_DOMAIN" }, "REDISPORT": { "isOptional": false, "description": "Redis server port", "defaultValue": "{{REDISPORT}}" }, "REDISUSER": { "isOptional": false, "description": "Redis username", "defaultValue": "{{REDISUSER}}" }, "REDIS_URL": { "isOptional": false, "description": "Full Redis connection string", "defaultValue": "redis://${{REDISUSER}}:${{REDIS_PASSWORD}}@${{REDISHOST}}:${{REDISPORT}}" }, "REDISPASSWORD": { "isOptional": false, "description": "Redis password", "defaultValue": "${{REDIS_PASSWORD}}" }, "REDIS_PASSWORD": { "isOptional": false, "description": "Redis password (alternate var name)", "defaultValue": "{{REDIS_PASSWORD}}" }, "RAILWAY_RUN_UID": { "isOptional": false, "description": "UID for Railway process execution", "defaultValue": "{{RAILWAY_RUN_UID}}" }, "REDIS_PUBLIC_URL": { "isOptional": false, "description": "Public Redis connection string", "defaultValue": "redis://${{REDISUSER}}:${{REDIS_PASSWORD}}@${{RAILWAY_TCP_PROXY_DOMAIN}}:${{RAILWAY_TCP_PROXY_PORT}}" } }, "volumeMounts": { "7c0fd410-149d-40a7-bcc6-3afc5794e8f3": { "mountPath": "/bitnami" } } }, "fa1573a7-5585-4ab3-b7b3-1c27ae9c67d4": { "icon": "https://devicons.railway.app/i/n8n.svg", "name": "Worker", "deploy": { "startCommand": "n8n worker", "healthcheckPath": "", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "n8nio/n8n" }, "variables": { "PORT": { "isOptional": false, "description": "HTTP port for n8n worker", "defaultValue": "{{PORT}}" }, "DB_TYPE": { "isOptional": false, "description": "Database type (postgresdb)", "defaultValue": "{{DB_TYPE}}" }, "WEBHOOK_URL": { "isOptional": false, "description": "Public URL for n8n webhooks", "defaultValue": "https://${{Primary.RAILWAY_PUBLIC_DOMAIN}}" }, "NODE_OPTIONS": { "isOptional": false, "description": "Node.js runtime options", "defaultValue": "{{NODE_OPTIONS}}" }, "EXECUTIONS_MODE": { "isOptional": false, "description": "Execution mode: queue", "defaultValue": "{{EXECUTIONS_MODE}}" }, "DB_POSTGRESDB_HOST": { "isOptional": false, "description": "PostgreSQL host (use Railway reference)", "defaultValue": "${{Postgres.PGHOST}}" }, "DB_POSTGRESDB_PORT": { "isOptional": false, "description": "PostgreSQL port (use Railway reference)", "defaultValue": "${{Postgres.PGPORT}}" }, "DB_POSTGRESDB_USER": { "isOptional": false, "description": "PostgreSQL user (use Railway reference)", "defaultValue": "${{Postgres.POSTGRES_USER}}" }, "N8N_ENCRYPTION_KEY": { "isOptional": false, "description": "Encryption key (must match Primary)", "defaultValue": "${{Primary.N8N_ENCRYPTION_KEY}}" }, "N8N_LISTEN_ADDRESS": { "isOptional": false, "description": "Address worker listens on", "defaultValue": "{{N8N_LISTEN_ADDRESS}}" }, "N8N_RUNNERS_ENABLED": { "isOptional": false, "description": "Enable task runners", "defaultValue": "{{N8N_RUNNERS_ENABLED}}" }, "QUEUE_BULL_REDIS_HOST": { "isOptional": false, "description": "Redis host (use Railway reference)", "defaultValue": "${{Redis.REDISHOST}}" }, "QUEUE_BULL_REDIS_PORT": { "isOptional": false, "description": "Redis port (use Railway reference)", "defaultValue": "${{Redis.REDISPORT}}" }, "DB_POSTGRESDB_DATABASE": { "isOptional": false, "description": "PostgreSQL database (use Railway reference)", "defaultValue": "${{Postgres.POSTGRES_DB}}" }, "DB_POSTGRESDB_PASSWORD": { "isOptional": false, "description": "PostgreSQL password (use Railway reference) │", "defaultValue": "${{Postgres.POSTGRES_PASSWORD}}" }, "QUEUE_BULL_REDIS_PASSWORD": { "isOptional": false, "description": "Redis password (use Railway reference)", "defaultValue": "\"${{Redis.REDIS_PASSWORD" }, "QUEUE_BULL_REDIS_USERNAME": { "isOptional": false, "description": "Redis username", "defaultValue": "${{Redis.REDISUSER}}" }, "QUEUE_BULL_REDIS_DUALSTACK": { "isOptional": false, "description": "Enable Redis dual-stack networking", "defaultValue": "{{QUEUE_BULL_REDIS_DUALSTACK}}" }, "ENABLE_ALPINE_PRIVATE_NETWORKING": { "isOptional": false, "description": "Enable Railway private networking", "defaultValue": "{{ENABLE_ALPINE_PRIVATE_NETWORKING}}" }, "OFFLOAD_MANUAL_EXECUTIONS_TO_WORKERS": { "isOptional": false, "description": "Offload manual runs to workers", "defaultValue": "{{OFFLOAD_MANUAL_EXECUTIONS_TO_WORKERS}}" }, "N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS": { "isOptional": false, "description": "Enforce strict file permissions", "defaultValue": "{{N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS}}" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "Primary", "method": "GET", "path": "/healthz", "expect_status": 200 } }, "resources": { "expected_services": 5, "needs_volume": true }, "generated_at": "2026-09-20T04:14:40.089Z", "generator_version": "0.1.0" }