{ "manifest_version": "1.0.0", "template": { "id": "d69bf95e-bf43-4eef-a9dc-09c11ddc16f7", "slug": "outline-production", "name": "Outline | Open-Source Team Wiki & Knowledge Base", "description": "Team wiki with real-time editing. Sign in with a passkey, no SSO needed", "url": "https://railway.com/deploy/outline-production", "upstream": { "image": "outlinewiki/outline:1.10.1" } }, "services": [ { "name": "Redis", "source": { "image": "redis:8.10.2-alpine" }, "needs_volume": true, "volume_mount_path": "/data", "http": false }, { "name": "Outline", "source": { "image": "outlinewiki/outline:1.10.1" }, "needs_volume": true, "volume_mount_path": "/var/lib/outline/data", "http": true }, { "name": "Postgres", "source": { "image": "postgres:17.11-alpine" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false } ], "required_inputs": [ { "key": "REDIS_PASSWORD", "service": "Redis", "description": "Auto-generated Redis password", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "URL", "service": "Outline", "description": "Public URL of Outline (links, emails, sign-in callbacks, passkeys) - set it to your custom domain after adding one", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "PORT", "service": "Outline", "description": "Port Outline listens on - leave as is", "secret": false, "strategy": "default", "default": "3000" }, { "key": "PGSSLMODE", "service": "Outline", "description": "Postgres is reached over Railway's private network, which is already encrypted", "secret": false, "strategy": "default", "default": "disable" }, { "key": "REDIS_URL", "service": "Outline", "description": "Redis on the private network (family=0 lets it connect over IPv6)", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "SMTP_PORT", "service": "Outline", "description": "SMTP port", "secret": false, "strategy": "default", "default": "465" }, { "key": "SECRET_KEY", "service": "Outline", "description": "Signs sessions and encrypts stored integration secrets (64 hex chars). BACK IT UP - changing it logs everyone out", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "SMTP_SECURE", "service": "Outline", "description": "true for implicit TLS (port 465), false for STARTTLS (587)", "secret": false, "strategy": "default", "default": "true" }, { "key": "DATABASE_URL", "service": "Outline", "description": "Postgres on the private network", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "FILE_STORAGE", "service": "Outline", "description": "Uploads and attachments are stored on the volume", "secret": false, "strategy": "default", "default": "local" }, { "key": "UTILS_SECRET", "service": "Outline", "description": "Protects Outline's internal cron/utility endpoints", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "RAILWAY_RUN_UID", "service": "Outline", "description": "Run as root so Outline can write to the root-owned Railway volume", "secret": false, "strategy": "default", "default": "0" }, { "key": "WEB_CONCURRENCY", "service": "Outline", "description": "Number of web processes. Outline otherwise starts one per CPU; raise it only with more RAM", "secret": false, "strategy": "default", "default": "1" }, { "key": "OIDC_DISPLAY_NAME", "service": "Outline", "description": "Label on the sign-in button", "secret": false, "strategy": "default", "default": "OpenID Connect" }, { "key": "FILE_STORAGE_LOCAL_ROOT_DIR", "service": "Outline", "description": "Where the volume is mounted - leave as is", "secret": false, "strategy": "default", "default": "/var/lib/outline/data" }, { "key": "RAILWAY_HEALTHCHECK_TIMEOUT_SEC", "service": "Outline", "description": "First boot runs the database migrations before the health check can pass", "secret": false, "strategy": "default", "default": "600" }, { "key": "PGDATA", "service": "Postgres", "description": "Data subdirectory - keeps Postgres happy on Railway volumes", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "POSTGRES_DB", "service": "Postgres", "description": "Database name", "secret": false, "strategy": "default", "default": "outline" }, { "key": "POSTGRES_USER", "service": "Postgres", "description": "Database user", "secret": false, "strategy": "default", "default": "outline" }, { "key": "POSTGRES_PASSWORD", "service": "Postgres", "description": "Auto-generated database password", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "Postgres", "description": "Time for Postgres to shut down cleanly on redeploy", "secret": false, "strategy": "default", "default": "60" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "outline-production" } }, "cli": "railway deploy --template outline-production", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "d69bf95e-bf43-4eef-a9dc-09c11ddc16f7", "serializedConfig": { "services": { "011aed56-7c7a-4cc2-95c4-195db9cbf48e": { "icon": "https://devicons.railway.app/i/redis.svg", "name": "Redis", "build": {}, "deploy": { "startCommand": "/bin/sh -c \"chown -R redis:redis /data && exec docker-entrypoint.sh redis-server --requirepass $REDIS_PASSWORD --appendonly yes\"", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "redis:8.10.2-alpine" }, "variables": { "REDIS_PASSWORD": { "isOptional": false, "description": "Auto-generated Redis password", "defaultValue": "{{REDIS_PASSWORD}}" } }, "networking": { "serviceDomains": {} }, "volumeMounts": { "5307e0e4-ef90-4b49-b26f-0d489a0fef45": { "mountPath": "/data" } } }, "351b1918-e84f-4d4f-868e-d1a7d9095965": { "icon": "https://raw.githubusercontent.com/nomideusz/outline-railway/main/icon.svg", "name": "Outline", "build": {}, "deploy": { "startCommand": null, "healthcheckPath": "/_health", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "outlinewiki/outline:1.10.1" }, "variables": { "URL": { "isOptional": false, "description": "Public URL of Outline (links, emails, sign-in callbacks, passkeys) - set it to your custom domain after adding one", "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}" }, "PORT": { "isOptional": false, "description": "Port Outline listens on - leave as is", "defaultValue": "3000" }, "PGSSLMODE": { "isOptional": false, "description": "Postgres is reached over Railway's private network, which is already encrypted", "defaultValue": "disable" }, "REDIS_URL": { "isOptional": false, "description": "Redis on the private network (family=0 lets it connect over IPv6)", "defaultValue": "redis://default:${{Redis.REDIS_PASSWORD}}@${{Redis.RAILWAY_PRIVATE_DOMAIN}}:6379?family=0" }, "SMTP_HOST": { "isOptional": true, "description": "Optional SMTP server: enables email sign-in links, invitations and notifications (Railway allows outbound SMTP on Pro only)", "defaultValue": "" }, "SMTP_PORT": { "isOptional": true, "description": "SMTP port", "defaultValue": "465" }, "SECRET_KEY": { "isOptional": false, "description": "Signs sessions and encrypts stored integration secrets (64 hex chars). BACK IT UP - changing it logs everyone out", "defaultValue": "{{SECRET_KEY}}" }, "SMTP_SECURE": { "isOptional": true, "description": "true for implicit TLS (port 465), false for STARTTLS (587)", "defaultValue": "true" }, "DATABASE_URL": { "isOptional": false, "description": "Postgres on the private network", "defaultValue": "postgres://${{Postgres.POSTGRES_USER}}:${{Postgres.POSTGRES_PASSWORD}}@${{Postgres.RAILWAY_PRIVATE_DOMAIN}}:5432/${{Postgres.POSTGRES_DB}}" }, "FILE_STORAGE": { "isOptional": false, "description": "Uploads and attachments are stored on the volume", "defaultValue": "local" }, "UTILS_SECRET": { "isOptional": false, "description": "Protects Outline's internal cron/utility endpoints", "defaultValue": "{{UTILS_SECRET}}" }, "SMTP_PASSWORD": { "isOptional": true, "description": "SMTP password", "defaultValue": "" }, "SMTP_USERNAME": { "isOptional": true, "description": "SMTP username", "defaultValue": "" }, "OIDC_CLIENT_ID": { "isOptional": true, "description": "Optional single sign-on with any OpenID Connect provider (Authentik, Keycloak, Authelia, Zitadel, Okta...): client ID", "defaultValue": "" }, "OIDC_ISSUER_URL": { "isOptional": true, "description": "OpenID Connect issuer URL; endpoints are discovered from /.well-known/openid-configuration. Redirect URI: /auth/oidc.callback", "defaultValue": "" }, "RAILWAY_RUN_UID": { "isOptional": false, "description": "Run as root so Outline can write to the root-owned Railway volume", "defaultValue": "0" }, "SMTP_FROM_EMAIL": { "isOptional": true, "description": "Sender, e.g. Outline ", "defaultValue": "" }, "WEB_CONCURRENCY": { "isOptional": false, "description": "Number of web processes. Outline otherwise starts one per CPU; raise it only with more RAM", "defaultValue": "1" }, "GOOGLE_CLIENT_ID": { "isOptional": true, "description": "Optional Google sign-in: OAuth client ID. Redirect URI: /auth/google.callback", "defaultValue": "" }, "OIDC_DISPLAY_NAME": { "isOptional": true, "description": "Label on the sign-in button", "defaultValue": "OpenID Connect" }, "OIDC_CLIENT_SECRET": { "isOptional": true, "description": "OpenID Connect client secret", "defaultValue": "" }, "GOOGLE_CLIENT_SECRET": { "isOptional": true, "description": "Google OAuth client secret", "defaultValue": "" }, "FILE_STORAGE_LOCAL_ROOT_DIR": { "isOptional": false, "description": "Where the volume is mounted - leave as is", "defaultValue": "/var/lib/outline/data" }, "RAILWAY_HEALTHCHECK_TIMEOUT_SEC": { "isOptional": false, "description": "First boot runs the database migrations before the health check can pass", "defaultValue": "600" } }, "networking": { "serviceDomains": { "": {} } }, "volumeMounts": { "0a8c976f-dd0c-4edd-9c4c-f4904d915d1c": { "mountPath": "/var/lib/outline/data" } } }, "c4c1abe8-d714-4189-9081-cbf9805313e2": { "icon": "https://devicons.railway.app/i/postgresql.svg", "name": "Postgres", "build": {}, "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "postgres:17.11-alpine" }, "variables": { "PGDATA": { "isOptional": false, "description": "Data subdirectory - keeps Postgres happy on Railway volumes", "defaultValue": "/var/lib/postgresql/data/pgdata" }, "POSTGRES_DB": { "isOptional": false, "description": "Database name", "defaultValue": "outline" }, "POSTGRES_USER": { "isOptional": false, "description": "Database user", "defaultValue": "outline" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Auto-generated database password", "defaultValue": "{{POSTGRES_PASSWORD}}" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": false, "description": "Time for Postgres to shut down cleanly on redeploy", "defaultValue": "60" } }, "networking": { "serviceDomains": {} }, "volumeMounts": { "4a042edd-8d4e-4d05-9cd8-10bebe42ee7b": { "mountPath": "/var/lib/postgresql/data" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "Outline", "method": "GET", "path": "/_health", "expect_status": 200 } }, "resources": { "expected_services": 3, "needs_volume": true }, "generated_at": "2026-10-12T04:14:37.344Z", "generator_version": "0.1.0", "status": "degraded", "validated_at": "2026-10-12T01:25:07.304Z", "success_rate_30d": 0, "validation": { "last_run_id": "run_66858517c496482cac5e", "checks": [ { "name": "workflow_completed", "passed": true }, { "name": "all_services_deployed", "passed": false, "detail": "DEPLOYING,SUCCESS,SUCCESS" } ] } }