{ "manifest_version": "1.0.0", "template": { "id": "49501123-1e11-4e94-878f-d1fbea1c2dba", "slug": "deploy-openseo-site-audit-tool", "name": "OpenSEO Site Audit", "description": "Open-source SEO site audits on your own server", "url": "https://railway.com/deploy/deploy-openseo-site-audit-tool", "upstream": { "image": "caddy:2.11.7-alpine@sha256:d8542f48d34a9cf4e4c11a478865229840e87e4c96ea3f439101f31a5d35f75f" } }, "services": [ { "name": "OpenSEO", "source": { "image": "ghcr.io/every-app/open-seo:v0.1.13@sha256:314ac3e08ee92a6b946d203d05421396918f66786678a030fbc62a64b877b8e8" }, "needs_volume": true, "volume_mount_path": "/app/.wrangler", "http": false }, { "name": "Gateway", "source": { "image": "caddy:2.11.7-alpine@sha256:d8542f48d34a9cf4e4c11a478865229840e87e4c96ea3f439101f31a5d35f75f" }, "needs_volume": false, "http": true } ], "required_inputs": [ { "key": "PORT", "service": "OpenSEO", "description": "Port OpenSEO listens on inside the private network.", "secret": false, "strategy": "default", "default": "3001" }, { "key": "AUTH_MODE", "service": "OpenSEO", "description": "Self-host auth mode. local_noauth is safe here because this service has no public domain; the Gateway enforces the login.", "secret": false, "strategy": "default", "default": "local_noauth" }, { "key": "ALLOWED_HOST", "service": "OpenSEO", "description": "Host allow-list for the app server; .railway.app covers your Railway domain and Railway's healthcheck.", "secret": false, "strategy": "default", "default": ".railway.app" }, { "key": "BETTER_AUTH_SECRET", "service": "OpenSEO", "description": "Generated secret that encrypts stored Google OAuth tokens (Search Console/Analytics).", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "VITE_SHOW_DEVTOOLS", "service": "OpenSEO", "description": "Keeps the developer toolbar hidden in production.", "secret": false, "strategy": "default", "default": "false" }, { "key": "CLOUDFLARE_INCLUDE_PROCESS_ENV", "service": "OpenSEO", "description": "Passes Railway variables into the Cloudflare Workers runtime that OpenSEO runs on.", "secret": false, "strategy": "default", "default": "true" }, { "key": "PORT", "service": "Gateway", "description": "Port the Caddy login gateway listens on; the public domain targets it.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "CADDYFILE_B64", "service": "Gateway", "description": "Caddy config as one base64 line, decoded at boot: open health endpoints, password-protected everything else, startup page.", "secret": false, "strategy": "default", "default": "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" }, { "key": "OPENSEO_PASSWORD", "service": "Gateway", "description": "Generated login password for OpenSEO. Copy it from this tab to sign in.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "OPENSEO_UPSTREAM", "service": "Gateway", "description": "Private address of the OpenSEO service that the gateway forwards to.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "OPENSEO_USERNAME", "service": "Gateway", "description": "Username for the OpenSEO login prompt.", "secret": false, "strategy": "default", "default": "admin" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "deploy-openseo-site-audit-tool" } }, "cli": "railway deploy --template deploy-openseo-site-audit-tool", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "49501123-1e11-4e94-878f-d1fbea1c2dba", "serializedConfig": { "services": { "c40d991f-f352-4945-a97e-8d307a7c5caf": { "icon": null, "name": "OpenSEO", "deploy": { "startCommand": null, "healthcheckPath": "/api/health", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "ghcr.io/every-app/open-seo:v0.1.13@sha256:314ac3e08ee92a6b946d203d05421396918f66786678a030fbc62a64b877b8e8" }, "variables": { "PORT": { "isOptional": false, "description": "Port OpenSEO listens on inside the private network.", "defaultValue": "3001" }, "AUTH_MODE": { "isOptional": false, "description": "Self-host auth mode. local_noauth is safe here because this service has no public domain; the Gateway enforces the login.", "defaultValue": "local_noauth" }, "ALLOWED_HOST": { "isOptional": false, "description": "Host allow-list for the app server; .railway.app covers your Railway domain and Railway's healthcheck.", "defaultValue": ".railway.app" }, "BETTER_AUTH_SECRET": { "isOptional": false, "description": "Generated secret that encrypts stored Google OAuth tokens (Search Console/Analytics).", "defaultValue": "{{BETTER_AUTH_SECRET}}" }, "DATAFORSEO_API_KEY": { "isOptional": true, "description": "Optional. Base64 of your DataForSEO login:API password; add it to enable keyword and SERP data.", "defaultValue": "" }, "VITE_SHOW_DEVTOOLS": { "isOptional": false, "description": "Keeps the developer toolbar hidden in production.", "defaultValue": "false" }, "CLOUDFLARE_INCLUDE_PROCESS_ENV": { "isOptional": false, "description": "Passes Railway variables into the Cloudflare Workers runtime that OpenSEO runs on.", "defaultValue": "true" } }, "volumeMounts": { "c40d991f-f352-4945-a97e-8d307a7c5caf": { "mountPath": "/app/.wrangler" } } }, "e6b61556-28fc-42a0-89e6-2b6ad1161590": { "icon": null, "name": "Gateway", "deploy": { "startCommand": "sh -c 'export OPENSEO_PASSWORD_HASH=\"$(caddy hash-password --plaintext \"$OPENSEO_PASSWORD\")\" && printf %s \"$CADDYFILE_B64\" | base64 -d > /etc/caddy/Caddyfile && exec caddy run --config /etc/caddy/Caddyfile --adapter caddyfile'", "healthcheckPath": "/healthz", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "caddy:2.11.7-alpine@sha256:d8542f48d34a9cf4e4c11a478865229840e87e4c96ea3f439101f31a5d35f75f" }, "variables": { "PORT": { "isOptional": false, "description": "Port the Caddy login gateway listens on; the public domain targets it.", "defaultValue": "8080" }, "CADDYFILE_B64": { "isOptional": false, "description": "Caddy config as one base64 line, decoded at boot: open health endpoints, password-protected everything else, startup page.", "defaultValue": "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" }, "OPENSEO_PASSWORD": { "isOptional": false, "description": "Generated login password for OpenSEO. Copy it from this tab to sign in.", "defaultValue": "{{OPENSEO_PASSWORD}}" }, "OPENSEO_UPSTREAM": { "isOptional": false, "description": "Private address of the OpenSEO service that the gateway forwards to.", "defaultValue": "${{OpenSEO.RAILWAY_PRIVATE_DOMAIN}}:${{OpenSEO.PORT}}" }, "OPENSEO_USERNAME": { "isOptional": false, "description": "Username for the OpenSEO login prompt.", "defaultValue": "admin" } }, "networking": { "serviceDomains": { ":8080": { "port": 8080 } } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "Gateway", "method": "GET", "path": "/healthz", "expect_status": 200 } }, "resources": { "expected_services": 2, "needs_volume": true }, "generated_at": "2026-10-21T10:14:45.258Z", "generator_version": "0.1.0", "status": "degraded", "validated_at": "2026-10-21T07:12:37.297Z", "success_rate_30d": 0, "validation": { "last_run_id": "run_a6a95010842d4af28b57", "checks": [ { "name": "workflow_completed", "passed": true }, { "name": "all_services_deployed", "passed": false, "detail": "no deployments appeared" } ] } }