{ "manifest_version": "1.0.0", "template": { "id": "2943ecaf-4b51-48b5-be61-af941af77ede", "slug": "opencti-7-threat-intelligence-platform", "name": "OpenCTI 7 Threat Intelligence Platform", "description": "Collect, link and share cyber threat intel. Full stack with workers.", "url": "https://railway.com/deploy/opencti-7-threat-intelligence-platform", "upstream": { "image": "opencti/platform:7.261008.0" } }, "services": [ { "name": "OpenCTI Worker", "source": { "image": "opencti/worker:7.261008.0" }, "needs_volume": false, "http": false }, { "name": "connector-analysis", "source": { "image": "opencti/connector-import-document:7.261008.0" }, "needs_volume": false, "http": false }, { "name": "connector-import-external-reference", "source": { "image": "opencti/connector-import-external-reference:7.261008.0" }, "needs_volume": false, "http": false }, { "name": "connector-export-file-csv", "source": { "image": "opencti/connector-export-file-csv:7.261008.0" }, "needs_volume": false, "http": false }, { "name": "connector-import-file-yara", "source": { "image": "opencti/connector-import-file-yara:7.261008.0" }, "needs_volume": false, "http": false }, { "name": "connector-mitre", "source": { "image": "opencti/connector-mitre:7.261008.0" }, "needs_volume": false, "http": false }, { "name": "Redis", "source": { "image": "redis:8.2" }, "needs_volume": true, "volume_mount_path": "/data", "http": false }, { "name": "RabbitMQ", "source": { "image": "rabbitmq:4.3.6-management" }, "needs_volume": true, "volume_mount_path": "/var/lib/rabbitmq", "http": false }, { "name": "connector-import-document", "source": { "image": "opencti/connector-import-document:7.261008.0" }, "needs_volume": false, "http": false }, { "name": "OpenCTI", "source": { "image": "opencti/platform:7.261008.0" }, "needs_volume": false, "http": true }, { "name": "connector-export-file-txt", "source": { "image": "opencti/connector-export-file-txt:7.261008.0" }, "needs_volume": false, "http": false }, { "name": "connector-export-file-stix", "source": { "image": "opencti/connector-export-file-stix:7.261008.0" }, "needs_volume": false, "http": false }, { "name": "Elasticsearch", "source": { "repo": "https://github.com/baranberkay96/opencti-railway" }, "needs_volume": true, "volume_mount_path": "/usr/share/elasticsearch/data", "http": false }, { "name": "connector-opencti", "source": { "image": "opencti/connector-opencti:7.261008.0" }, "needs_volume": false, "http": false }, { "name": "connector-import-file-stix", "source": { "image": "opencti/connector-import-file-stix:7.261008.0" }, "needs_volume": false, "http": false } ], "required_inputs": [ { "key": "OPENCTI_URL", "service": "OpenCTI Worker", "description": "OpenCTI API on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "OPENCTI_TOKEN", "service": "OpenCTI Worker", "description": "Admin API token.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "WORKER_LOG_LEVEL", "service": "OpenCTI Worker", "description": "Worker log level.", "secret": false, "strategy": "default", "default": "info" }, { "key": "OPENCTI_URL", "service": "connector-analysis", "description": "OpenCTI API on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "CONNECTOR_ID", "service": "connector-analysis", "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCTI_TOKEN", "service": "connector-analysis", "description": "Admin API token.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CONNECTOR_AUTO", "service": "connector-analysis", "description": "Analyse automatically.", "secret": false, "strategy": "default", "default": "true" }, { "key": "CONNECTOR_NAME", "service": "connector-analysis", "description": "Name shown in Data > Ingestion > Connectors.", "secret": false, "strategy": "default", "default": "ImportDocumentAnalysis" }, { "key": "CONNECTOR_TYPE", "service": "connector-analysis", "description": "Content analysis connector (same image as ImportDocument).", "secret": false, "strategy": "default", "default": "INTERNAL_ANALYSIS" }, { "key": "CONNECTOR_SCOPE", "service": "connector-analysis", "description": "Analyses PDF, text and HTML content.", "secret": false, "strategy": "default", "default": "application/pdf,text/plain,text/html" }, { "key": "CONNECTOR_ONLY_CONTEXTUAL", "service": "connector-analysis", "description": "Also extract data not already linked to the container.", "secret": false, "strategy": "default", "default": "false" }, { "key": "CONNECTOR_VALIDATE_BEFORE_IMPORT", "service": "connector-analysis", "description": "Analysis results are shown in the UI, no workbench.", "secret": false, "strategy": "default", "default": "false" }, { "key": "OPENCTI_URL", "service": "connector-import-external-reference", "description": "OpenCTI API on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "CONNECTOR_ID", "service": "connector-import-external-reference", "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCTI_TOKEN", "service": "connector-import-external-reference", "description": "Admin API token.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CONNECTOR_NAME", "service": "connector-import-external-reference", "description": "Name shown in Data > Ingestion > Connectors (fetches external reference URLs as files).", "secret": false, "strategy": "default", "default": "ImportExternalReference" }, { "key": "OPENCTI_URL", "service": "connector-export-file-csv", "description": "OpenCTI API on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "CONNECTOR_ID", "service": "connector-export-file-csv", "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCTI_TOKEN", "service": "connector-export-file-csv", "description": "Admin API token.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CONNECTOR_NAME", "service": "connector-export-file-csv", "description": "Name shown in Data > Ingestion > Connectors.", "secret": false, "strategy": "default", "default": "ExportFileCsv" }, { "key": "CONNECTOR_TYPE", "service": "connector-export-file-csv", "description": "Export connector.", "secret": false, "strategy": "default", "default": "INTERNAL_EXPORT_FILE" }, { "key": "CONNECTOR_SCOPE", "service": "connector-export-file-csv", "description": "Exports CSV files.", "secret": false, "strategy": "default", "default": "text/csv" }, { "key": "OPENCTI_URL", "service": "connector-import-file-yara", "description": "OpenCTI API on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "CONNECTOR_ID", "service": "connector-import-file-yara", "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCTI_TOKEN", "service": "connector-import-file-yara", "description": "Admin API token.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CONNECTOR_AUTO", "service": "connector-import-file-yara", "description": "Import only on demand.", "secret": false, "strategy": "default", "default": "false" }, { "key": "CONNECTOR_NAME", "service": "connector-import-file-yara", "description": "Name shown in Data > Ingestion > Connectors.", "secret": false, "strategy": "default", "default": "ImportFileYARA" }, { "key": "CONNECTOR_SCOPE", "service": "connector-import-file-yara", "description": "Imports YARA rule files.", "secret": false, "strategy": "default", "default": "text/yara+plain" }, { "key": "YARA_IMPORT_FILE_SPLIT_RULES", "service": "connector-import-file-yara", "description": "One indicator per YARA rule.", "secret": false, "strategy": "default", "default": "true" }, { "key": "CONNECTOR_VALIDATE_BEFORE_IMPORT", "service": "connector-import-file-yara", "description": "Create a workbench for review before import.", "secret": false, "strategy": "default", "default": "true" }, { "key": "OPENCTI_URL", "service": "connector-mitre", "description": "OpenCTI API on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "CONNECTOR_ID", "service": "connector-mitre", "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCTI_TOKEN", "service": "connector-mitre", "description": "Admin API token.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT", "service": "connector-mitre", "description": "Run under its own service account (as upstream compose).", "secret": false, "strategy": "default", "default": "true" }, { "key": "CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT_CONFIDENCE_LEVEL", "service": "connector-mitre", "description": "Confidence level of imported MITRE ATT&CK data.", "secret": false, "strategy": "default", "default": "75" }, { "key": "REDISHOST", "service": "Redis", "description": "Private network hostname of the Redis service, only resolvable from services in the same environment.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "REDISPORT", "service": "Redis", "description": "Port that Redis listens on.", "secret": false, "strategy": "default", "default": "6379" }, { "key": "REDISUSER", "service": "Redis", "description": "Username for authenticating with Redis.", "secret": false, "strategy": "default", "default": "default" }, { "key": "REDIS_URL", "service": "Redis", "description": "Connection string for connecting to Redis using the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDISPASSWORD", "service": "Redis", "description": "Alias of REDIS_PASSWORD for clients that expect the unseparated name.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS_PASSWORD", "service": "Redis", "description": "Randomly generated password for authenticating with Redis.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "RABBITMQ_NODENAME", "service": "RabbitMQ", "description": "Fixed node name so the data on the volume survives redeploys (as upstream compose).", "secret": false, "strategy": "default", "default": "rabbit01@localhost" }, { "key": "RABBITMQ_DEFAULT_PASS", "service": "RabbitMQ", "description": "Broker password (generated).", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "RABBITMQ_DEFAULT_USER", "service": "RabbitMQ", "description": "Broker user created on first boot.", "secret": false, "strategy": "default", "default": "opencti" }, { "key": "RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS", "service": "RabbitMQ", "description": "Upstream rabbitmq.conf settings (512 MB messages, 24 h consumer timeout) as Erlang arguments, and 2 schedulers instead of one per host CPU.", "secret": false, "strategy": "default", "default": "+S 2:2 +SDio 2 -rabbit max_message_size 536870912 -rabbit consumer_timeout 86400000" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "RabbitMQ", "description": "Allow a clean shutdown on redeploy.", "secret": false, "strategy": "default", "default": "60" }, { "key": "OPENCTI_URL", "service": "connector-import-document", "description": "OpenCTI API on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "CONNECTOR_ID", "service": "connector-import-document", "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCTI_TOKEN", "service": "connector-import-document", "description": "Admin API token.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CONNECTOR_AUTO", "service": "connector-import-document", "description": "Process uploaded files automatically.", "secret": false, "strategy": "default", "default": "true" }, { "key": "CONNECTOR_NAME", "service": "connector-import-document", "description": "Name shown in Data > Ingestion > Connectors.", "secret": false, "strategy": "default", "default": "ImportDocument" }, { "key": "CONNECTOR_TYPE", "service": "connector-import-document", "description": "File import connector.", "secret": false, "strategy": "default", "default": "INTERNAL_IMPORT_FILE" }, { "key": "CONNECTOR_SCOPE", "service": "connector-import-document", "description": "Extracts entities and observables from PDF, text and HTML reports.", "secret": false, "strategy": "default", "default": "application/pdf,text/plain,text/html" }, { "key": "CONNECTOR_ONLY_CONTEXTUAL", "service": "connector-import-document", "description": "Also extract data not already linked to the container.", "secret": false, "strategy": "default", "default": "false" }, { "key": "CONNECTOR_VALIDATE_BEFORE_IMPORT", "service": "connector-import-document", "description": "Create a workbench for review before import.", "secret": false, "strategy": "default", "default": "true" }, { "key": "IMPORT_DOCUMENT_CREATE_INDICATOR", "service": "connector-import-document", "description": "Create indicators from extracted observables.", "secret": false, "strategy": "default", "default": "true" }, { "key": "PORT", "service": "OpenCTI", "description": "Port the platform listens on; Railway routes the public domain and its healthcheck here.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "APP__PORT", "service": "OpenCTI", "description": "OpenCTI HTTP port (same as PORT).", "secret": false, "strategy": "default", "default": "8080" }, { "key": "MINIO__PORT", "service": "OpenCTI", "description": "S3 port.", "secret": false, "strategy": "default", "default": "443" }, { "key": "REDIS__PORT", "service": "OpenCTI", "description": "Redis port.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "NODE_OPTIONS", "service": "OpenCTI", "description": "Node.js heap limit for the platform (MB). Raise it with the service's memory for large datasets.", "secret": false, "strategy": "default", "default": "--max-old-space-size=4096" }, { "key": "APP__BASE_URL", "service": "OpenCTI", "description": "Public URL of OpenCTI (links, SSO callbacks). Update it after adding a custom domain.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "MINIO__USE_SSL", "service": "OpenCTI", "description": "Use HTTPS for S3.", "secret": false, "strategy": "default", "default": "true" }, { "key": "RABBITMQ__PORT", "service": "OpenCTI", "description": "AMQP port.", "secret": false, "strategy": "default", "default": "5672" }, { "key": "MINIO__ENDPOINT", "service": "OpenCTI", "description": "S3 endpoint of the Railway Bucket (the start command strips the https:// prefix, as OpenCTI expects a host name).", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS__HOSTNAME", "service": "OpenCTI", "description": "Redis host (private network).", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS__PASSWORD", "service": "OpenCTI", "description": "Redis password.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "APP__ADMIN__EMAIL", "service": "OpenCTI", "description": "Login e-mail of the built-in admin account, created on first start. Change it here before the first deploy if you like.", "secret": false, "strategy": "default", "default": "admin@opencti.io" }, { "key": "APP__ADMIN__TOKEN", "service": "OpenCTI", "description": "API token (UUIDv4) of the admin account; workers and connectors authenticate with it (generated).", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "MINIO__ACCESS_KEY", "service": "OpenCTI", "description": "Bucket access key.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "MINIO__SECRET_KEY", "service": "OpenCTI", "description": "Bucket secret key.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ELASTICSEARCH__URL", "service": "OpenCTI", "description": "Elasticsearch URL (private network).", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "MINIO__BUCKET_NAME", "service": "OpenCTI", "description": "Bucket for uploaded files, exports and imports.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RABBITMQ__HOSTNAME", "service": "OpenCTI", "description": "RabbitMQ host (private network); also handed to workers and connectors.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "RABBITMQ__PASSWORD", "service": "OpenCTI", "description": "RabbitMQ password.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RABBITMQ__USERNAME", "service": "OpenCTI", "description": "RabbitMQ user.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "APP__ENCRYPTION_KEY", "service": "OpenCTI", "description": "Master key for secrets OpenCTI stores encrypted (at least 32 bytes as base64; generated). Never change it after the first start.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "APP__ADMIN__PASSWORD", "service": "OpenCTI", "description": "Password of the built-in admin account (generated).", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "MINIO__BUCKET_REGION", "service": "OpenCTI", "description": "Bucket region.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REDIS__HOST_IP_FAMILY", "service": "OpenCTI", "description": "Resolve Redis over IPv6, which every Railway private network supports (OpenCTI default is IPv4 only).", "secret": false, "strategy": "default", "default": "6" }, { "key": "APP__HEALTH_ACCESS_KEY", "service": "OpenCTI", "description": "Lets Railway's healthcheck call /health without a key; only a status is returned, never details.", "secret": true, "strategy": "default", "default": "public" }, { "key": "ELASTICSEARCH__PASSWORD", "service": "OpenCTI", "description": "Elasticsearch password.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ELASTICSEARCH__USERNAME", "service": "OpenCTI", "description": "Elasticsearch user.", "secret": false, "strategy": "default", "default": "elastic" }, { "key": "RABBITMQ__MANAGEMENT_SSL", "service": "OpenCTI", "description": "Plain HTTP to the management API on the private network.", "secret": false, "strategy": "default", "default": "false" }, { "key": "APP__APP_LOGS__LOGS_FILES", "service": "OpenCTI", "description": "Log to the console only (Railway collects it); no log files on the ephemeral disk.", "secret": false, "strategy": "default", "default": "false" }, { "key": "RABBITMQ__PORT_MANAGEMENT", "service": "OpenCTI", "description": "RabbitMQ management API port (queue statistics).", "secret": false, "strategy": "default", "default": "15672" }, { "key": "PROVIDERS__LOCAL__STRATEGY", "service": "OpenCTI", "description": "Local e-mail/password login.", "secret": false, "strategy": "default", "default": "LocalStrategy" }, { "key": "APP__AUDIT_LOGS__LOGS_FILES", "service": "OpenCTI", "description": "Audit log to the console only.", "secret": false, "strategy": "default", "default": "false" }, { "key": "ELASTICSEARCH__NUMBER_OF_REPLICAS", "service": "OpenCTI", "description": "Index replicas (single Elasticsearch node).", "secret": false, "strategy": "default", "default": "0" }, { "key": "MINIO__DISABLE_CHECKSUM_VALIDATION", "service": "OpenCTI", "description": "Send S3 checksums only when required (broadest compatibility with S3-compatible storage).", "secret": false, "strategy": "default", "default": "true" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "OpenCTI", "description": "Let running requests finish on redeploy.", "secret": false, "strategy": "default", "default": "30" }, { "key": "OPENCTI_URL", "service": "connector-export-file-txt", "description": "OpenCTI API on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "CONNECTOR_ID", "service": "connector-export-file-txt", "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCTI_TOKEN", "service": "connector-export-file-txt", "description": "Admin API token.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CONNECTOR_NAME", "service": "connector-export-file-txt", "description": "Name shown in Data > Ingestion > Connectors.", "secret": false, "strategy": "default", "default": "ExportFileTxt" }, { "key": "CONNECTOR_TYPE", "service": "connector-export-file-txt", "description": "Export connector.", "secret": false, "strategy": "default", "default": "INTERNAL_EXPORT_FILE" }, { "key": "CONNECTOR_SCOPE", "service": "connector-export-file-txt", "description": "Exports plain-text lists (e.g. observables).", "secret": false, "strategy": "default", "default": "text/plain" }, { "key": "OPENCTI_URL", "service": "connector-export-file-stix", "description": "OpenCTI API on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "CONNECTOR_ID", "service": "connector-export-file-stix", "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCTI_TOKEN", "service": "connector-export-file-stix", "description": "Admin API token.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CONNECTOR_NAME", "service": "connector-export-file-stix", "description": "Name shown in Data > Ingestion > Connectors.", "secret": false, "strategy": "default", "default": "ExportFileStix2" }, { "key": "CONNECTOR_TYPE", "service": "connector-export-file-stix", "description": "Export connector.", "secret": false, "strategy": "default", "default": "INTERNAL_EXPORT_FILE" }, { "key": "CONNECTOR_SCOPE", "service": "connector-export-file-stix", "description": "Exports STIX 2.1 bundles.", "secret": false, "strategy": "default", "default": "application/json" }, { "key": "ES_JAVA_OPTS", "service": "Elasticsearch", "description": "JVM heap (upstream sample: 4G). Keep about half of the RAM you give Elasticsearch.", "secret": false, "strategy": "default", "default": "-Xms2g -Xmx2g" }, { "key": "network.host", "service": "Elasticsearch", "description": "Bind address (Java listens dual-stack). 0.0.0.0, not '::': the image writes these settings to YAML unquoted and '::' breaks the parse.", "secret": false, "strategy": "default", "default": "0.0.0.0" }, { "key": "discovery.type", "service": "Elasticsearch", "description": "Single-node cluster (also skips production bootstrap checks).", "secret": false, "strategy": "default", "default": "single-node" }, { "key": "ELASTIC_PASSWORD", "service": "Elasticsearch", "description": "Password of the elastic user (generated).", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "xpack.ml.enabled", "service": "Elasticsearch", "description": "Machine learning off (as upstream compose).", "secret": false, "strategy": "default", "default": "false" }, { "key": "bootstrap.memory_lock", "service": "Elasticsearch", "description": "memlock ulimits cannot be raised on Railway.", "secret": false, "strategy": "default", "default": "false" }, { "key": "node.store.allow_mmap", "service": "Elasticsearch", "description": "Do not depend on the host's vm.max_map_count, which containers cannot change.", "secret": false, "strategy": "default", "default": "false" }, { "key": "xpack.security.enabled", "service": "Elasticsearch", "description": "Require the elastic user's password (upstream compose disables it).", "secret": false, "strategy": "default", "default": "true" }, { "key": "thread_pool.search.queue_size", "service": "Elasticsearch", "description": "Larger search queue (as upstream compose).", "secret": false, "strategy": "default", "default": "5000" }, { "key": "ingest.geoip.downloader.enabled", "service": "Elasticsearch", "description": "Skip GeoIP database downloads.", "secret": false, "strategy": "default", "default": "false" }, { "key": "xpack.security.http.ssl.enabled", "service": "Elasticsearch", "description": "Plain HTTP inside the private network.", "secret": false, "strategy": "default", "default": "false" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "Elasticsearch", "description": "Allow a clean shutdown on redeploy.", "secret": false, "strategy": "default", "default": "60" }, { "key": "xpack.security.transport.ssl.enabled", "service": "Elasticsearch", "description": "No transport TLS for a single node.", "secret": false, "strategy": "default", "default": "false" }, { "key": "OPENCTI_URL", "service": "connector-opencti", "description": "OpenCTI API on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "CONNECTOR_ID", "service": "connector-opencti", "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCTI_TOKEN", "service": "connector-opencti", "description": "Admin API token.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CONNECTOR_NAME", "service": "connector-opencti", "description": "Imports OpenCTI's reference datasets.", "secret": false, "strategy": "default", "default": "OpenCTI Datasets" }, { "key": "CONNECTOR_SCOPE", "service": "connector-opencti", "description": "Markings, sectors/organizations and countries/regions.", "secret": false, "strategy": "default", "default": "marking-definition,identity,location" }, { "key": "CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT", "service": "connector-opencti", "description": "Run under its own service account (as upstream compose).", "secret": false, "strategy": "default", "default": "true" }, { "key": "CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT_CONFIDENCE_LEVEL", "service": "connector-opencti", "description": "Confidence level of the service account.", "secret": false, "strategy": "default", "default": "100" }, { "key": "OPENCTI_URL", "service": "connector-import-file-stix", "description": "OpenCTI API on the private network.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "CONNECTOR_ID", "service": "connector-import-file-stix", "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCTI_TOKEN", "service": "connector-import-file-stix", "description": "Admin API token.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CONNECTOR_AUTO", "service": "connector-import-file-stix", "description": "Process uploaded files automatically.", "secret": false, "strategy": "default", "default": "true" }, { "key": "CONNECTOR_NAME", "service": "connector-import-file-stix", "description": "Name shown in Data > Ingestion > Connectors.", "secret": false, "strategy": "default", "default": "ImportFileStix" }, { "key": "CONNECTOR_TYPE", "service": "connector-import-file-stix", "description": "File import connector.", "secret": false, "strategy": "default", "default": "INTERNAL_IMPORT_FILE" }, { "key": "CONNECTOR_SCOPE", "service": "connector-import-file-stix", "description": "Imports STIX 2.1 JSON and STIX 1 XML files.", "secret": false, "strategy": "default", "default": "application/json,text/xml" }, { "key": "CONNECTOR_VALIDATE_BEFORE_IMPORT", "service": "connector-import-file-stix", "description": "Create a workbench for review before import.", "secret": false, "strategy": "default", "default": "true" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "opencti-7-threat-intelligence-platform" } }, "cli": "railway deploy --template opencti-7-threat-intelligence-platform", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "2943ecaf-4b51-48b5-be61-af941af77ede", "serializedConfig": { "buckets": { "14465b2c-194d-5d3b-865a-bbe1a957a87e": { "name": "Bucket" } }, "services": { "000f42e7-b9db-5d8d-b979-1df03b0e0c0c": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "OpenCTI Worker", "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "image": "opencti/worker:7.261008.0" }, "variables": { "OPENCTI_URL": { "isOptional": true, "description": "OpenCTI API on the private network.", "defaultValue": "http://${{OpenCTI.RAILWAY_PRIVATE_DOMAIN}}:${{OpenCTI.APP__PORT}}" }, "OPENCTI_TOKEN": { "isOptional": true, "description": "Admin API token.", "defaultValue": "${{OpenCTI.APP__ADMIN__TOKEN}}" }, "WORKER_LOG_LEVEL": { "isOptional": true, "description": "Worker log level.", "defaultValue": "info" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "101bb0ca-8006-5958-9493-3b2057fe4645": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "connector-analysis", "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "image": "opencti/connector-import-document:7.261008.0" }, "variables": { "OPENCTI_URL": { "isOptional": true, "description": "OpenCTI API on the private network.", "defaultValue": "http://${{OpenCTI.RAILWAY_PRIVATE_DOMAIN}}:${{OpenCTI.APP__PORT}}" }, "CONNECTOR_ID": { "isOptional": true, "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "defaultValue": "{{CONNECTOR_ID}}" }, "OPENCTI_TOKEN": { "isOptional": true, "description": "Admin API token.", "defaultValue": "${{OpenCTI.APP__ADMIN__TOKEN}}" }, "CONNECTOR_AUTO": { "isOptional": true, "description": "Analyse automatically.", "defaultValue": "true" }, "CONNECTOR_NAME": { "isOptional": true, "description": "Name shown in Data > Ingestion > Connectors.", "defaultValue": "ImportDocumentAnalysis" }, "CONNECTOR_TYPE": { "isOptional": true, "description": "Content analysis connector (same image as ImportDocument).", "defaultValue": "INTERNAL_ANALYSIS" }, "CONNECTOR_SCOPE": { "isOptional": true, "description": "Analyses PDF, text and HTML content.", "defaultValue": "application/pdf,text/plain,text/html" }, "CONNECTOR_ONLY_CONTEXTUAL": { "isOptional": true, "description": "Also extract data not already linked to the container.", "defaultValue": "false" }, "CONNECTOR_VALIDATE_BEFORE_IMPORT": { "isOptional": true, "description": "Analysis results are shown in the UI, no workbench.", "defaultValue": "false" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "2fa95522-fae9-5188-9dbc-20ed62afb2a8": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "connector-import-external-reference", "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "image": "opencti/connector-import-external-reference:7.261008.0" }, "variables": { "OPENCTI_URL": { "isOptional": true, "description": "OpenCTI API on the private network.", "defaultValue": "http://${{OpenCTI.RAILWAY_PRIVATE_DOMAIN}}:${{OpenCTI.APP__PORT}}" }, "CONNECTOR_ID": { "isOptional": true, "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "defaultValue": "{{CONNECTOR_ID}}" }, "OPENCTI_TOKEN": { "isOptional": true, "description": "Admin API token.", "defaultValue": "${{OpenCTI.APP__ADMIN__TOKEN}}" }, "CONNECTOR_NAME": { "isOptional": true, "description": "Name shown in Data > Ingestion > Connectors (fetches external reference URLs as files).", "defaultValue": "ImportExternalReference" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "49d8cb31-19d4-5bd7-a944-9932bf44c868": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "connector-export-file-csv", "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "image": "opencti/connector-export-file-csv:7.261008.0" }, "variables": { "OPENCTI_URL": { "isOptional": true, "description": "OpenCTI API on the private network.", "defaultValue": "http://${{OpenCTI.RAILWAY_PRIVATE_DOMAIN}}:${{OpenCTI.APP__PORT}}" }, "CONNECTOR_ID": { "isOptional": true, "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "defaultValue": "{{CONNECTOR_ID}}" }, "OPENCTI_TOKEN": { "isOptional": true, "description": "Admin API token.", "defaultValue": "${{OpenCTI.APP__ADMIN__TOKEN}}" }, "CONNECTOR_NAME": { "isOptional": true, "description": "Name shown in Data > Ingestion > Connectors.", "defaultValue": "ExportFileCsv" }, "CONNECTOR_TYPE": { "isOptional": true, "description": "Export connector.", "defaultValue": "INTERNAL_EXPORT_FILE" }, "CONNECTOR_SCOPE": { "isOptional": true, "description": "Exports CSV files.", "defaultValue": "text/csv" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "56a037be-d492-53c2-8e1a-4f64ac6f79e6": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "connector-import-file-yara", "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "image": "opencti/connector-import-file-yara:7.261008.0" }, "variables": { "OPENCTI_URL": { "isOptional": true, "description": "OpenCTI API on the private network.", "defaultValue": "http://${{OpenCTI.RAILWAY_PRIVATE_DOMAIN}}:${{OpenCTI.APP__PORT}}" }, "CONNECTOR_ID": { "isOptional": true, "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "defaultValue": "{{CONNECTOR_ID}}" }, "OPENCTI_TOKEN": { "isOptional": true, "description": "Admin API token.", "defaultValue": "${{OpenCTI.APP__ADMIN__TOKEN}}" }, "CONNECTOR_AUTO": { "isOptional": true, "description": "Import only on demand.", "defaultValue": "false" }, "CONNECTOR_NAME": { "isOptional": true, "description": "Name shown in Data > Ingestion > Connectors.", "defaultValue": "ImportFileYARA" }, "CONNECTOR_SCOPE": { "isOptional": true, "description": "Imports YARA rule files.", "defaultValue": "text/yara+plain" }, "YARA_IMPORT_FILE_SPLIT_RULES": { "isOptional": true, "description": "One indicator per YARA rule.", "defaultValue": "true" }, "CONNECTOR_VALIDATE_BEFORE_IMPORT": { "isOptional": true, "description": "Create a workbench for review before import.", "defaultValue": "true" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "56f5d87a-95d2-5b06-a0e1-42578d3f62ad": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "connector-mitre", "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "image": "opencti/connector-mitre:7.261008.0" }, "variables": { "OPENCTI_URL": { "isOptional": true, "description": "OpenCTI API on the private network.", "defaultValue": "http://${{OpenCTI.RAILWAY_PRIVATE_DOMAIN}}:${{OpenCTI.APP__PORT}}" }, "CONNECTOR_ID": { "isOptional": true, "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "defaultValue": "{{CONNECTOR_ID}}" }, "OPENCTI_TOKEN": { "isOptional": true, "description": "Admin API token.", "defaultValue": "${{OpenCTI.APP__ADMIN__TOKEN}}" }, "CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT": { "isOptional": true, "description": "Run under its own service account (as upstream compose).", "defaultValue": "true" }, "CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT_CONFIDENCE_LEVEL": { "isOptional": true, "description": "Confidence level of imported MITRE ATT&CK data.", "defaultValue": "75" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "59f2a022-4a03-5fbe-9821-194a908638ee": { "icon": "https://cdn.sanity.io/images/sy1jschh/production/0ce0bfdcfbdbf69662b1116671f97c2dd788b655-157x157.svg", "name": "Redis", "deploy": { "startCommand": "/bin/sh -c \"rm -rf $RAILWAY_VOLUME_MOUNT_PATH/lost+found/ && exec docker-entrypoint.sh redis-server --requirepass $REDIS_PASSWORD --save 60 1 --dir $RAILWAY_VOLUME_MOUNT_PATH\"", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "redis:8.2" }, "variables": { "REDISHOST": { "isOptional": true, "description": "Private network hostname of the Redis service, only resolvable from services in the same environment.", "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "REDISPORT": { "isOptional": true, "description": "Port that Redis listens on.", "defaultValue": "6379" }, "REDISUSER": { "isOptional": true, "description": "Username for authenticating with Redis.", "defaultValue": "default" }, "REDIS_URL": { "isOptional": true, "description": "Connection string for connecting to Redis using the private network.", "defaultValue": "redis://${{ REDISUSER }}:${{ REDIS_PASSWORD }}@${{ REDISHOST }}:${{ REDISPORT }}" }, "REDISPASSWORD": { "isOptional": true, "description": "Alias of REDIS_PASSWORD for clients that expect the unseparated name.", "defaultValue": "${{REDIS_PASSWORD}}" }, "REDIS_PASSWORD": { "isOptional": true, "description": "Randomly generated password for authenticating with Redis.", "defaultValue": "{{REDIS_PASSWORD}}" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} }, "volumeMounts": { "923852a6-a66b-53fe-a48c-538a947cd257": { "mountPath": "/data" } } }, "6b7fb74a-13c0-5448-824f-8bc223eddf3e": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/rabbitmq.svg", "name": "RabbitMQ", "deploy": { "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "rabbitmq:4.3.6-management" }, "variables": { "RABBITMQ_NODENAME": { "isOptional": true, "description": "Fixed node name so the data on the volume survives redeploys (as upstream compose).", "defaultValue": "rabbit01@localhost" }, "RABBITMQ_DEFAULT_PASS": { "isOptional": true, "description": "Broker password (generated).", "defaultValue": "{{RABBITMQ_DEFAULT_PASS}}" }, "RABBITMQ_DEFAULT_USER": { "isOptional": true, "description": "Broker user created on first boot.", "defaultValue": "opencti" }, "RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS": { "isOptional": true, "description": "Upstream rabbitmq.conf settings (512 MB messages, 24 h consumer timeout) as Erlang arguments, and 2 schedulers instead of one per host CPU.", "defaultValue": "+S 2:2 +SDio 2 -rabbit max_message_size 536870912 -rabbit consumer_timeout 86400000" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": true, "description": "Allow a clean shutdown on redeploy.", "defaultValue": "60" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} }, "volumeMounts": { "227857de-2ec5-5776-bf54-6427c0055163": { "mountPath": "/var/lib/rabbitmq" } } }, "75633d71-a8fa-56a0-9625-41fe5903f777": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "connector-import-document", "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "image": "opencti/connector-import-document:7.261008.0" }, "variables": { "OPENCTI_URL": { "isOptional": true, "description": "OpenCTI API on the private network.", "defaultValue": "http://${{OpenCTI.RAILWAY_PRIVATE_DOMAIN}}:${{OpenCTI.APP__PORT}}" }, "CONNECTOR_ID": { "isOptional": true, "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "defaultValue": "{{CONNECTOR_ID}}" }, "OPENCTI_TOKEN": { "isOptional": true, "description": "Admin API token.", "defaultValue": "${{OpenCTI.APP__ADMIN__TOKEN}}" }, "CONNECTOR_AUTO": { "isOptional": true, "description": "Process uploaded files automatically.", "defaultValue": "true" }, "CONNECTOR_NAME": { "isOptional": true, "description": "Name shown in Data > Ingestion > Connectors.", "defaultValue": "ImportDocument" }, "CONNECTOR_TYPE": { "isOptional": true, "description": "File import connector.", "defaultValue": "INTERNAL_IMPORT_FILE" }, "CONNECTOR_SCOPE": { "isOptional": true, "description": "Extracts entities and observables from PDF, text and HTML reports.", "defaultValue": "application/pdf,text/plain,text/html" }, "CONNECTOR_ONLY_CONTEXTUAL": { "isOptional": true, "description": "Also extract data not already linked to the container.", "defaultValue": "false" }, "CONNECTOR_VALIDATE_BEFORE_IMPORT": { "isOptional": true, "description": "Create a workbench for review before import.", "defaultValue": "true" }, "IMPORT_DOCUMENT_CREATE_INDICATOR": { "isOptional": true, "description": "Create indicators from extracted observables.", "defaultValue": "true" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "a3da3482-46bf-544a-8f08-7f3b5850a962": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "OpenCTI", "deploy": { "startCommand": "/bin/sh -c 'e=\"${MINIO__ENDPOINT#*://}\"; export MINIO__ENDPOINT=\"${e%%/*}\"; exec node build/back.mjs'", "healthcheckPath": "/health", "restartPolicyType": "ALWAYS", "healthcheckTimeout": 1200 }, "source": { "image": "opencti/platform:7.261008.0" }, "variables": { "PORT": { "isOptional": true, "description": "Port the platform listens on; Railway routes the public domain and its healthcheck here.", "defaultValue": "8080" }, "APP__PORT": { "isOptional": true, "description": "OpenCTI HTTP port (same as PORT).", "defaultValue": "8080" }, "MINIO__PORT": { "isOptional": true, "description": "S3 port.", "defaultValue": "443" }, "REDIS__PORT": { "isOptional": true, "description": "Redis port.", "defaultValue": "${{Redis.REDISPORT}}" }, "NODE_OPTIONS": { "isOptional": true, "description": "Node.js heap limit for the platform (MB). Raise it with the service's memory for large datasets.", "defaultValue": "--max-old-space-size=4096" }, "APP__BASE_URL": { "isOptional": true, "description": "Public URL of OpenCTI (links, SSO callbacks). Update it after adding a custom domain.", "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}" }, "MINIO__USE_SSL": { "isOptional": true, "description": "Use HTTPS for S3.", "defaultValue": "true" }, "RABBITMQ__PORT": { "isOptional": true, "description": "AMQP port.", "defaultValue": "5672" }, "MINIO__ENDPOINT": { "isOptional": true, "description": "S3 endpoint of the Railway Bucket (the start command strips the https:// prefix, as OpenCTI expects a host name).", "defaultValue": "${{Bucket.ENDPOINT}}" }, "REDIS__HOSTNAME": { "isOptional": true, "description": "Redis host (private network).", "defaultValue": "${{Redis.REDISHOST}}" }, "REDIS__PASSWORD": { "isOptional": true, "description": "Redis password.", "defaultValue": "${{Redis.REDIS_PASSWORD}}" }, "APP__ADMIN__EMAIL": { "isOptional": true, "description": "Login e-mail of the built-in admin account, created on first start. Change it here before the first deploy if you like.", "defaultValue": "admin@opencti.io" }, "APP__ADMIN__TOKEN": { "isOptional": true, "description": "API token (UUIDv4) of the admin account; workers and connectors authenticate with it (generated).", "defaultValue": "{{APP__ADMIN__TOKEN}}" }, "MINIO__ACCESS_KEY": { "isOptional": true, "description": "Bucket access key.", "defaultValue": "${{Bucket.ACCESS_KEY_ID}}" }, "MINIO__SECRET_KEY": { "isOptional": true, "description": "Bucket secret key.", "defaultValue": "${{Bucket.SECRET_ACCESS_KEY}}" }, "ELASTICSEARCH__URL": { "isOptional": true, "description": "Elasticsearch URL (private network).", "defaultValue": "http://${{Elasticsearch.RAILWAY_PRIVATE_DOMAIN}}:9200" }, "MINIO__BUCKET_NAME": { "isOptional": true, "description": "Bucket for uploaded files, exports and imports.", "defaultValue": "${{Bucket.BUCKET}}" }, "RABBITMQ__HOSTNAME": { "isOptional": true, "description": "RabbitMQ host (private network); also handed to workers and connectors.", "defaultValue": "${{RabbitMQ.RAILWAY_PRIVATE_DOMAIN}}" }, "RABBITMQ__PASSWORD": { "isOptional": true, "description": "RabbitMQ password.", "defaultValue": "${{RabbitMQ.RABBITMQ_DEFAULT_PASS}}" }, "RABBITMQ__USERNAME": { "isOptional": true, "description": "RabbitMQ user.", "defaultValue": "${{RabbitMQ.RABBITMQ_DEFAULT_USER}}" }, "APP__ENCRYPTION_KEY": { "isOptional": true, "description": "Master key for secrets OpenCTI stores encrypted (at least 32 bytes as base64; generated). Never change it after the first start.", "defaultValue": "{{APP__ENCRYPTION_KEY}}" }, "APP__ADMIN__PASSWORD": { "isOptional": true, "description": "Password of the built-in admin account (generated).", "defaultValue": "{{APP__ADMIN__PASSWORD}}" }, "MINIO__BUCKET_REGION": { "isOptional": true, "description": "Bucket region.", "defaultValue": "${{Bucket.REGION}}" }, "REDIS__HOST_IP_FAMILY": { "isOptional": true, "description": "Resolve Redis over IPv6, which every Railway private network supports (OpenCTI default is IPv4 only).", "defaultValue": "6" }, "APP__HEALTH_ACCESS_KEY": { "isOptional": true, "description": "Lets Railway's healthcheck call /health without a key; only a status is returned, never details.", "defaultValue": "public" }, "ELASTICSEARCH__PASSWORD": { "isOptional": true, "description": "Elasticsearch password.", "defaultValue": "${{Elasticsearch.ELASTIC_PASSWORD}}" }, "ELASTICSEARCH__USERNAME": { "isOptional": true, "description": "Elasticsearch user.", "defaultValue": "elastic" }, "RABBITMQ__MANAGEMENT_SSL": { "isOptional": true, "description": "Plain HTTP to the management API on the private network.", "defaultValue": "false" }, "APP__APP_LOGS__LOGS_FILES": { "isOptional": true, "description": "Log to the console only (Railway collects it); no log files on the ephemeral disk.", "defaultValue": "false" }, "RABBITMQ__PORT_MANAGEMENT": { "isOptional": true, "description": "RabbitMQ management API port (queue statistics).", "defaultValue": "15672" }, "PROVIDERS__LOCAL__STRATEGY": { "isOptional": true, "description": "Local e-mail/password login.", "defaultValue": "LocalStrategy" }, "APP__AUDIT_LOGS__LOGS_FILES": { "isOptional": true, "description": "Audit log to the console only.", "defaultValue": "false" }, "ELASTICSEARCH__NUMBER_OF_REPLICAS": { "isOptional": true, "description": "Index replicas (single Elasticsearch node).", "defaultValue": "0" }, "MINIO__DISABLE_CHECKSUM_VALIDATION": { "isOptional": true, "description": "Send S3 checksums only when required (broadest compatibility with S3-compatible storage).", "defaultValue": "true" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": true, "description": "Let running requests finish on redeploy.", "defaultValue": "30" } }, "networking": { "tcpProxies": {}, "serviceDomains": { ":8080": { "port": 8080 } } } }, "b24fd31d-b661-5342-b777-2b25a52cab98": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "connector-export-file-txt", "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "image": "opencti/connector-export-file-txt:7.261008.0" }, "variables": { "OPENCTI_URL": { "isOptional": true, "description": "OpenCTI API on the private network.", "defaultValue": "http://${{OpenCTI.RAILWAY_PRIVATE_DOMAIN}}:${{OpenCTI.APP__PORT}}" }, "CONNECTOR_ID": { "isOptional": true, "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "defaultValue": "{{CONNECTOR_ID}}" }, "OPENCTI_TOKEN": { "isOptional": true, "description": "Admin API token.", "defaultValue": "${{OpenCTI.APP__ADMIN__TOKEN}}" }, "CONNECTOR_NAME": { "isOptional": true, "description": "Name shown in Data > Ingestion > Connectors.", "defaultValue": "ExportFileTxt" }, "CONNECTOR_TYPE": { "isOptional": true, "description": "Export connector.", "defaultValue": "INTERNAL_EXPORT_FILE" }, "CONNECTOR_SCOPE": { "isOptional": true, "description": "Exports plain-text lists (e.g. observables).", "defaultValue": "text/plain" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "d2221996-63a3-5c18-8ba9-45e7594f0e08": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "connector-export-file-stix", "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "image": "opencti/connector-export-file-stix:7.261008.0" }, "variables": { "OPENCTI_URL": { "isOptional": true, "description": "OpenCTI API on the private network.", "defaultValue": "http://${{OpenCTI.RAILWAY_PRIVATE_DOMAIN}}:${{OpenCTI.APP__PORT}}" }, "CONNECTOR_ID": { "isOptional": true, "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "defaultValue": "{{CONNECTOR_ID}}" }, "OPENCTI_TOKEN": { "isOptional": true, "description": "Admin API token.", "defaultValue": "${{OpenCTI.APP__ADMIN__TOKEN}}" }, "CONNECTOR_NAME": { "isOptional": true, "description": "Name shown in Data > Ingestion > Connectors.", "defaultValue": "ExportFileStix2" }, "CONNECTOR_TYPE": { "isOptional": true, "description": "Export connector.", "defaultValue": "INTERNAL_EXPORT_FILE" }, "CONNECTOR_SCOPE": { "isOptional": true, "description": "Exports STIX 2.1 bundles.", "defaultValue": "application/json" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "d7db7757-ddcc-5ba0-a91f-27c0dbaa6b18": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/elasticsearch.svg", "name": "Elasticsearch", "build": { "builder": "DOCKERFILE" }, "deploy": { "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "repo": "baranberkay96/opencti-railway", "branch": "main", "rootDirectory": "/services/elasticsearch" }, "variables": { "ES_JAVA_OPTS": { "isOptional": true, "description": "JVM heap (upstream sample: 4G). Keep about half of the RAM you give Elasticsearch.", "defaultValue": "-Xms2g -Xmx2g" }, "network.host": { "isOptional": true, "description": "Bind address (Java listens dual-stack). 0.0.0.0, not '::': the image writes these settings to YAML unquoted and '::' breaks the parse.", "defaultValue": "0.0.0.0" }, "discovery.type": { "isOptional": true, "description": "Single-node cluster (also skips production bootstrap checks).", "defaultValue": "single-node" }, "ELASTIC_PASSWORD": { "isOptional": true, "description": "Password of the elastic user (generated).", "defaultValue": "{{ELASTIC_PASSWORD}}" }, "xpack.ml.enabled": { "isOptional": true, "description": "Machine learning off (as upstream compose).", "defaultValue": "false" }, "bootstrap.memory_lock": { "isOptional": true, "description": "memlock ulimits cannot be raised on Railway.", "defaultValue": "false" }, "node.store.allow_mmap": { "isOptional": true, "description": "Do not depend on the host's vm.max_map_count, which containers cannot change.", "defaultValue": "false" }, "xpack.security.enabled": { "isOptional": true, "description": "Require the elastic user's password (upstream compose disables it).", "defaultValue": "true" }, "thread_pool.search.queue_size": { "isOptional": true, "description": "Larger search queue (as upstream compose).", "defaultValue": "5000" }, "ingest.geoip.downloader.enabled": { "isOptional": true, "description": "Skip GeoIP database downloads.", "defaultValue": "false" }, "xpack.security.http.ssl.enabled": { "isOptional": true, "description": "Plain HTTP inside the private network.", "defaultValue": "false" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": true, "description": "Allow a clean shutdown on redeploy.", "defaultValue": "60" }, "xpack.security.transport.ssl.enabled": { "isOptional": true, "description": "No transport TLS for a single node.", "defaultValue": "false" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} }, "volumeMounts": { "a04b6fc5-cb80-599f-9b90-ad4e4e5002ee": { "mountPath": "/usr/share/elasticsearch/data" } } }, "de394a29-aee6-5aed-9a05-659e6f327403": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "connector-opencti", "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "image": "opencti/connector-opencti:7.261008.0" }, "variables": { "OPENCTI_URL": { "isOptional": true, "description": "OpenCTI API on the private network.", "defaultValue": "http://${{OpenCTI.RAILWAY_PRIVATE_DOMAIN}}:${{OpenCTI.APP__PORT}}" }, "CONNECTOR_ID": { "isOptional": true, "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "defaultValue": "{{CONNECTOR_ID}}" }, "OPENCTI_TOKEN": { "isOptional": true, "description": "Admin API token.", "defaultValue": "${{OpenCTI.APP__ADMIN__TOKEN}}" }, "CONNECTOR_NAME": { "isOptional": true, "description": "Imports OpenCTI's reference datasets.", "defaultValue": "OpenCTI Datasets" }, "CONNECTOR_SCOPE": { "isOptional": true, "description": "Markings, sectors/organizations and countries/regions.", "defaultValue": "marking-definition,identity,location" }, "CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT": { "isOptional": true, "description": "Run under its own service account (as upstream compose).", "defaultValue": "true" }, "CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT_CONFIDENCE_LEVEL": { "isOptional": true, "description": "Confidence level of the service account.", "defaultValue": "100" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } }, "f1111873-ccaa-5bc1-ade6-bf8db1c7211b": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/opencti.png", "name": "connector-import-file-stix", "deploy": { "restartPolicyType": "ALWAYS" }, "source": { "image": "opencti/connector-import-file-stix:7.261008.0" }, "variables": { "OPENCTI_URL": { "isOptional": true, "description": "OpenCTI API on the private network.", "defaultValue": "http://${{OpenCTI.RAILWAY_PRIVATE_DOMAIN}}:${{OpenCTI.APP__PORT}}" }, "CONNECTOR_ID": { "isOptional": true, "description": "Unique connector ID (UUIDv4, generated). Keep it stable.", "defaultValue": "{{CONNECTOR_ID}}" }, "OPENCTI_TOKEN": { "isOptional": true, "description": "Admin API token.", "defaultValue": "${{OpenCTI.APP__ADMIN__TOKEN}}" }, "CONNECTOR_AUTO": { "isOptional": true, "description": "Process uploaded files automatically.", "defaultValue": "true" }, "CONNECTOR_NAME": { "isOptional": true, "description": "Name shown in Data > Ingestion > Connectors.", "defaultValue": "ImportFileStix" }, "CONNECTOR_TYPE": { "isOptional": true, "description": "File import connector.", "defaultValue": "INTERNAL_IMPORT_FILE" }, "CONNECTOR_SCOPE": { "isOptional": true, "description": "Imports STIX 2.1 JSON and STIX 1 XML files.", "defaultValue": "application/json,text/xml" }, "CONNECTOR_VALIDATE_BEFORE_IMPORT": { "isOptional": true, "description": "Create a workbench for review before import.", "defaultValue": "true" } }, "networking": { "tcpProxies": {}, "serviceDomains": {} } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "OpenCTI", "method": "GET", "path": "/health", "expect_status": 200 } }, "resources": { "expected_services": 15, "needs_volume": true }, "generated_at": "2026-10-11T22:14:38.939Z", "generator_version": "0.1.0", "status": "degraded", "validated_at": "2026-10-11T19:10:36.608Z", "success_rate_30d": 0, "validation": { "last_run_id": "run_d7671d3925234a26975d", "checks": [ { "name": "workflow_completed", "passed": false, "detail": "Your workspace has been restricted. Please contact support to resolve this." } ] } }