{
  "manifest_version": "1.0.0",
  "template": {
    "id": "eba94f00-4d13-41fc-a862-52773a774875",
    "slug": "passbolt-ce",
    "name": "Passbolt CE",
    "description": "Deploy and Host Passbolt CE (Open Source Team Password Manager) on Railway",
    "url": "https://railway.com/deploy/passbolt-ce",
    "upstream": {
      "image": "passbolt/passbolt"
    }
  },
  "services": [
    {
      "name": "MySQL",
      "source": {
        "image": "mysql:9.4"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/mysql",
      "http": false
    },
    {
      "name": "Passbolt",
      "source": {
        "image": "passbolt/passbolt"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/passbolt-data",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "MYSQLHOST",
      "service": "MySQL",
      "description": "Provide a value for MYSQLHOST.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "MYSQLPORT",
      "service": "MySQL",
      "description": "Provide a value for MYSQLPORT.",
      "secret": false,
      "strategy": "default",
      "default": "3306"
    },
    {
      "key": "MYSQLUSER",
      "service": "MySQL",
      "description": "Provide a value for MYSQLUSER.",
      "secret": false,
      "strategy": "default",
      "default": "root"
    },
    {
      "key": "MYSQL_URL",
      "service": "MySQL",
      "description": "Provide a value for MYSQL_URL.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "MYSQLDATABASE",
      "service": "MySQL",
      "description": "Provide a value for MYSQLDATABASE.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MYSQLPASSWORD",
      "service": "MySQL",
      "description": "Provide a value for MYSQLPASSWORD.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MYSQL_DATABASE",
      "service": "MySQL",
      "description": "Provide a value for MYSQL_DATABASE.",
      "secret": false,
      "strategy": "default",
      "default": "railway"
    },
    {
      "key": "MYSQL_PUBLIC_URL",
      "service": "MySQL",
      "description": "Provide a value for MYSQL_PUBLIC_URL.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MYSQL_ROOT_PASSWORD",
      "service": "MySQL",
      "description": "Provide a value for MYSQL_ROOT_PASSWORD.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "APP_FULL_BASE_URL",
      "service": "Passbolt",
      "description": "Provide a value for APP_FULL_BASE_URL.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "PASSBOLT_KEY_NAME",
      "service": "Passbolt",
      "description": "Provide a value for PASSBOLT_KEY_NAME.",
      "secret": true,
      "strategy": "default",
      "default": "Passbolt Server"
    },
    {
      "key": "PASSBOLT_KEY_EMAIL",
      "service": "Passbolt",
      "description": "owner@company.com",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "DATASOURCES_DEFAULT_HOST",
      "service": "Passbolt",
      "description": "Provide a value for DATASOURCES_DEFAULT_HOST.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DATASOURCES_DEFAULT_PORT",
      "service": "Passbolt",
      "description": "Provide a value for DATASOURCES_DEFAULT_PORT.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DATASOURCES_DEFAULT_DATABASE",
      "service": "Passbolt",
      "description": "Provide a value for DATASOURCES_DEFAULT_DATABASE.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DATASOURCES_DEFAULT_PASSWORD",
      "service": "Passbolt",
      "description": "Provide a value for DATASOURCES_DEFAULT_PASSWORD.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DATASOURCES_DEFAULT_USERNAME",
      "service": "Passbolt",
      "description": "Provide a value for DATASOURCES_DEFAULT_USERNAME.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "passbolt-ce"
      }
    },
    "cli": "railway deploy --template passbolt-ce",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "eba94f00-4d13-41fc-a862-52773a774875",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "04b3ba7b-490b-4a9a-99b5-ce38181fe9f4": {
                  "icon": "https://devicons.railway.app/i/mysql.svg",
                  "name": "MySQL",
                  "deploy": {
                    "startCommand": "docker-entrypoint.sh mysqld --innodb-use-native-aio=0 --disable-log-bin --performance_schema=0 --innodb-buffer-pool-size=1G",
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "mysql:9.4"
                  },
                  "variables": {
                    "MYSQLHOST": {
                      "isOptional": false,
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "MYSQLPORT": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "3306"
                    },
                    "MYSQLUSER": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "root"
                    },
                    "MYSQL_URL": {
                      "isOptional": false,
                      "defaultValue": "mysql://${{MYSQLUSER}}:${{MYSQL_ROOT_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:3306/${{MYSQL_DATABASE}}"
                    },
                    "MYSQLDATABASE": {
                      "isOptional": false,
                      "defaultValue": "${{MYSQL_DATABASE}}"
                    },
                    "MYSQLPASSWORD": {
                      "isOptional": false,
                      "defaultValue": "${{MYSQL_ROOT_PASSWORD}}"
                    },
                    "MYSQL_DATABASE": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "railway"
                    },
                    "MYSQL_PUBLIC_URL": {
                      "isOptional": false,
                      "defaultValue": "mysql://${{MYSQLUSER}}:${{MYSQL_ROOT_PASSWORD}}@${{RAILWAY_TCP_PROXY_DOMAIN}}:${{RAILWAY_TCP_PROXY_PORT}}/${{MYSQL_DATABASE}}"
                    },
                    "MYSQL_ROOT_PASSWORD": {
                      "isOptional": false,
                      "defaultValue": "{{MYSQL_ROOT_PASSWORD}}"
                    }
                  },
                  "volumeMounts": {
                    "04b3ba7b-490b-4a9a-99b5-ce38181fe9f4": {
                      "mountPath": "/var/lib/mysql"
                    }
                  },
                  "haTemplateCode": "mysql-ha",
                  "haConversionConfig": {
                    "edge": {
                      "label": "Reverse Proxies",
                      "options": [
                        1,
                        2
                      ],
                      "nodeLabel": "HAProxy",
                      "description": "HAProxy instances routing writes to the primary",
                      "defaultValue": 2
                    },
                    "replica": {
                      "label": "MySQL Replicas",
                      "options": [
                        2,
                        4,
                        6,
                        8
                      ],
                      "nodeLabel": "MySQL",
                      "description": "Requires odd count for quorum",
                      "defaultValue": 2
                    },
                    "internal": null,
                    "description": "This will convert your MySQL instance to an HA cluster with Group Replication failover and HAProxy routing to the primary.",
                    "supportedImageMajorVersions": [
                      8,
                      9
                    ]
                  }
                },
                "2e5e2638-c09b-4d34-8e5f-9c3bee77b6a0": {
                  "icon": "https://avatars.githubusercontent.com/u/4386228?s=48&v=4",
                  "name": "Passbolt",
                  "deploy": {
                    "startCommand": "/bin/bash -c \"mkdir -p /var/lib/passbolt-data/gpg /var/lib/passbolt-data/jwt && chown -R www-data:www-data /var/lib/passbolt-data /var/lib/passbolt/tmp && rm -rf /etc/passbolt/gpg /etc/passbolt/jwt && ln -sf /var/lib/passbolt-data/gpg /etc/passbolt/gpg && ln -sf /var/lib/passbolt-data/jwt /etc/passbolt/jwt && chown -R root:www-data /var/lib/passbolt-data/jwt && chmod 750 /var/lib/passbolt-data/jwt && chmod 640 /var/lib/passbolt-data/jwt/* 2>/dev/null; /docker-entrypoint.sh\"",
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "passbolt/passbolt"
                  },
                  "variables": {
                    "APP_FULL_BASE_URL": {
                      "isOptional": false,
                      "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "PASSBOLT_KEY_NAME": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "Passbolt Server"
                    },
                    "EMAIL_DEFAULT_FROM": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "PASSBOLT_KEY_EMAIL": {
                      "isOptional": false,
                      "description": "owner@company.com",
                      "defaultValue": "{{PASSBOLT_KEY_EMAIL}}"
                    },
                    "EMAIL_DEFAULT_FROM_NAME": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "DATASOURCES_DEFAULT_HOST": {
                      "isOptional": false,
                      "defaultValue": "${{MySQL.MYSQLHOST}}"
                    },
                    "DATASOURCES_DEFAULT_PORT": {
                      "isOptional": false,
                      "defaultValue": "${{MySQL.MYSQLPORT}}"
                    },
                    "EMAIL_TRANSPORT_DEFAULT_TLS": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "DATASOURCES_DEFAULT_DATABASE": {
                      "isOptional": false,
                      "defaultValue": "${{MySQL.MYSQL_DATABASE}}"
                    },
                    "DATASOURCES_DEFAULT_PASSWORD": {
                      "isOptional": false,
                      "defaultValue": "${{MySQL.MYSQLPASSWORD}}"
                    },
                    "DATASOURCES_DEFAULT_USERNAME": {
                      "isOptional": false,
                      "defaultValue": "${{MySQL.MYSQLUSER}}"
                    },
                    "EMAIL_TRANSPORT_DEFAULT_HOST": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "EMAIL_TRANSPORT_DEFAULT_PORT": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "EMAIL_TRANSPORT_DEFAULT_PASSWORD": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "EMAIL_TRANSPORT_DEFAULT_USERNAME": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "PASSBOLT_GPG_SERVER_KEY_FINGERPRINT": {
                      "isOptional": true,
                      "description": "SSH to the server and run:  gpg --homedir $GNUPGHOME --list-keys --with-colons ${PASSBOLT_KEY_EMAIL:-passbolt@yourdomain.com} | grep fpr | head -1 | cut -f10 -d:",
                      "defaultValue": ""
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  },
                  "volumeMounts": {
                    "2e5e2638-c09b-4d34-8e5f-9c3bee77b6a0": {
                      "mountPath": "/var/lib/passbolt-data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 2,
    "needs_volume": true
  },
  "generated_at": "2026-09-20T16:14:49.616Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-09-18T14:17:30.219Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_0ea3f8e52c2447f7ad37",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 51,
    "typical_build_seconds": 0,
    "typical_start_seconds": 10,
    "slowest_service": "Passbolt"
  }
}