{
  "manifest_version": "1.0.0",
  "template": {
    "id": "ef8ab53b-be3b-4844-817e-aa38e994da8f",
    "slug": "penpot",
    "name": "Penpot",
    "description": "Penpot open-source figma like design tool for design and code collaboration",
    "url": "https://railway.com/deploy/penpot",
    "upstream": {
      "image": "minio/minio:latest"
    }
  },
  "services": [
    {
      "name": "exporter",
      "source": {
        "image": "penpotapp/exporter"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "minio",
      "source": {
        "image": "minio/minio:latest"
      },
      "needs_volume": true,
      "volume_mount_path": "/mnt/data",
      "http": true
    },
    {
      "name": "postgres",
      "source": {
        "image": "ghcr.io/railwayapp-templates/postgres-ssl:17"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/postgresql/data",
      "tcp_ports": [
        5432
      ],
      "http": false
    },
    {
      "name": "valkey",
      "source": {
        "image": "valkey/valkey:8.1"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "frontend",
      "source": {
        "image": "penpotapp/frontend:latest"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "backend",
      "source": {
        "image": "penpotapp/backend:latest"
      },
      "needs_volume": false,
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "MINIO_ROOT_USER",
      "service": "minio",
      "description": "Provide a value for MINIO_ROOT_USER.",
      "secret": false,
      "strategy": "default",
      "default": "admin"
    },
    {
      "key": "MINIO_ROOT_PASSWORD",
      "service": "minio",
      "description": "Provide a value for MINIO_ROOT_PASSWORD.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "MINIO_CONSOLE_ADDRESS",
      "service": "minio",
      "description": "Provide a value for MINIO_CONSOLE_ADDRESS.",
      "secret": false,
      "strategy": "default",
      "default": ":1453"
    },
    {
      "key": "PGDATA",
      "service": "postgres",
      "description": "Location where the database will be initialized",
      "secret": false,
      "strategy": "default",
      "default": "/var/lib/postgresql/data/pgdata"
    },
    {
      "key": "PGHOST",
      "service": "postgres",
      "description": "Railway Private Domain Name.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "PGPORT",
      "service": "postgres",
      "description": "Port to connect to Postgres.",
      "secret": false,
      "strategy": "default",
      "default": "5432"
    },
    {
      "key": "PGUSER",
      "service": "postgres",
      "description": "Required variable for Data panel",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGDATABASE",
      "service": "postgres",
      "description": "Required variable for the data panel.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGPASSWORD",
      "service": "postgres",
      "description": "Required variable for Data panel",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "POSTGRES_DB",
      "service": "postgres",
      "description": "Default database created when image is started.",
      "secret": false,
      "strategy": "default",
      "default": "railway"
    },
    {
      "key": "DATABASE_URL",
      "service": "postgres",
      "description": "URL to connect to Postgres database.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "POSTGRES_USER",
      "service": "postgres",
      "description": "User to connect to Postgres DB",
      "secret": false,
      "strategy": "default",
      "default": "postgres"
    },
    {
      "key": "SSL_CERT_DAYS",
      "service": "postgres",
      "description": "SSL certificate expiry in days.",
      "secret": false,
      "strategy": "default",
      "default": "820"
    },
    {
      "key": "POSTGRES_PASSWORD",
      "service": "postgres",
      "description": "Password to connect to DB",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "DATABASE_PUBLIC_URL",
      "service": "postgres",
      "description": "Public URL to connect to Postgres database, used by the Data panel.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS",
      "service": "postgres",
      "description": "Allow Postgres to cleanly shut down",
      "secret": false,
      "strategy": "default",
      "default": "60"
    },
    {
      "key": "VALKEY_EXTRA_FLAGS",
      "service": "valkey",
      "description": "Provide a value for VALKEY_EXTRA_FLAGS.",
      "secret": true,
      "strategy": "default",
      "default": "--maxmemory 128mb --maxmemory-policy volatile-lfu"
    },
    {
      "key": "PENPOT_FLAGS",
      "service": "frontend",
      "description": "Provide a value for PENPOT_FLAGS.",
      "secret": false,
      "strategy": "default",
      "default": "enable-prepl-server"
    },
    {
      "key": "RAILWAY_RUN_UID",
      "service": "frontend",
      "description": "Provide a value for RAILWAY_RUN_UID.",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "PENPOT_PUBLIC_URI",
      "service": "frontend",
      "description": "Provide a value for PENPOT_PUBLIC_URI.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "PENPOT_BACKEND_URI",
      "service": "frontend",
      "description": "Provide a value for PENPOT_BACKEND_URI.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "PENPOT_EXPORTER_URI",
      "service": "frontend",
      "description": "Provide a value for PENPOT_EXPORTER_URI.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "PENPOT_FLAGS",
      "service": "backend",
      "description": "Provide a value for PENPOT_FLAGS.",
      "secret": false,
      "strategy": "default",
      "default": "disable-email-verification enable-prepl-server"
    },
    {
      "key": "RAILWAY_RUN_UID",
      "service": "backend",
      "description": "Provide a value for RAILWAY_RUN_UID.",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "PENPOT_REDIS_URI",
      "service": "backend",
      "description": "Provide a value for PENPOT_REDIS_URI.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "AWS_ACCESS_KEY_ID",
      "service": "backend",
      "description": "Provide a value for AWS_ACCESS_KEY_ID.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PENPOT_PUBLIC_URI",
      "service": "backend",
      "description": "Provide a value for PENPOT_PUBLIC_URI.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "PENPOT_SECRET_KEY",
      "service": "backend",
      "description": "Provide a value for PENPOT_SECRET_KEY.",
      "secret": true,
      "strategy": "default",
      "default": "o6muwesk8r6gc3b65bew8hbps7xzh4rt"
    },
    {
      "key": "PENPOT_DATABASE_URI",
      "service": "backend",
      "description": "Provide a value for PENPOT_DATABASE_URI.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "AWS_SECRET_ACCESS_KEY",
      "service": "backend",
      "description": "Provide a value for AWS_SECRET_ACCESS_KEY.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PENPOT_DATABASE_PASSWORD",
      "service": "backend",
      "description": "Provide a value for PENPOT_DATABASE_PASSWORD.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PENPOT_DATABASE_USERNAME",
      "service": "backend",
      "description": "Provide a value for PENPOT_DATABASE_USERNAME.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PENPOT_TELEMETRY_ENABLED",
      "service": "backend",
      "description": "Provide a value for PENPOT_TELEMETRY_ENABLED.",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "PENPOT_TELEMETRY_REFERER",
      "service": "backend",
      "description": "Provide a value for PENPOT_TELEMETRY_REFERER.",
      "secret": false,
      "strategy": "default",
      "default": "railway"
    },
    {
      "key": "PENPOT_ASSETS_STORAGE_BACKEND",
      "service": "backend",
      "description": "Provide a value for PENPOT_ASSETS_STORAGE_BACKEND.",
      "secret": false,
      "strategy": "default",
      "default": "assets-s3"
    },
    {
      "key": "PENPOT_STORAGE_ASSETS_S3_BUCKET",
      "service": "backend",
      "description": "Provide a value for PENPOT_STORAGE_ASSETS_S3_BUCKET.",
      "secret": false,
      "strategy": "default",
      "default": "penpot-assets"
    },
    {
      "key": "PENPOT_STORAGE_ASSETS_S3_REGION",
      "service": "backend",
      "description": "Provide a value for PENPOT_STORAGE_ASSETS_S3_REGION.",
      "secret": false,
      "strategy": "default",
      "default": "us-east-1"
    },
    {
      "key": "PENPOT_STORAGE_ASSETS_S3_ENDPOINT",
      "service": "backend",
      "description": "Provide a value for PENPOT_STORAGE_ASSETS_S3_ENDPOINT.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "penpot"
      }
    },
    "cli": "railway deploy --template penpot",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "ef8ab53b-be3b-4844-817e-aa38e994da8f",
            "serializedConfig": {
              "services": {
                "219ce456-ee39-42c0-9c0c-d2920d66f2ea": {
                  "icon": "https://i.ibb.co/Y74Mtyk5/30179644-s-200-v-4.png",
                  "name": "exporter",
                  "source": {
                    "image": "penpotapp/exporter"
                  }
                },
                "3ceb4674-4283-4e68-a8a1-d8527da101eb": {
                  "icon": "https://devicons.railway.app/minio",
                  "name": "minio",
                  "deploy": {
                    "startCommand": "minio server /mnt/data"
                  },
                  "source": {
                    "image": "minio/minio:latest"
                  },
                  "variables": {
                    "MINIO_ROOT_USER": {
                      "defaultValue": "admin"
                    },
                    "MINIO_ROOT_PASSWORD": {
                      "defaultValue": "{{MINIO_ROOT_PASSWORD}}"
                    },
                    "MINIO_CONSOLE_ADDRESS": {
                      "defaultValue": ":1453"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:1453": {
                        "port": 1453
                      }
                    }
                  },
                  "volumeMounts": {
                    "3ceb4674-4283-4e68-a8a1-d8527da101eb": {
                      "mountPath": "/mnt/data"
                    }
                  }
                },
                "529152a1-8631-4cf0-9809-c6d191b1b7af": {
                  "icon": "https://devicons.railway.app/i/postgresql.svg",
                  "name": "postgres",
                  "build": {},
                  "deploy": {
                    "requiredMountPath": "/var/lib/postgresql/data"
                  },
                  "source": {
                    "image": "ghcr.io/railwayapp-templates/postgres-ssl:17"
                  },
                  "variables": {
                    "PGDATA": {
                      "isOptional": false,
                      "description": "Location where the database will be initialized",
                      "defaultValue": "/var/lib/postgresql/data/pgdata"
                    },
                    "PGHOST": {
                      "isOptional": false,
                      "description": "Railway Private Domain Name.",
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "PGPORT": {
                      "isOptional": false,
                      "description": "Port to connect to Postgres.",
                      "defaultValue": "5432"
                    },
                    "PGUSER": {
                      "isOptional": false,
                      "description": "Required variable for Data panel",
                      "defaultValue": "${{ POSTGRES_USER }}"
                    },
                    "PGDATABASE": {
                      "isOptional": false,
                      "description": "Required variable for the data panel.",
                      "defaultValue": "${{POSTGRES_DB}}"
                    },
                    "PGPASSWORD": {
                      "isOptional": false,
                      "description": "Required variable for Data panel",
                      "defaultValue": "${{POSTGRES_PASSWORD}}"
                    },
                    "POSTGRES_DB": {
                      "isOptional": false,
                      "description": "Default database created when image is started.",
                      "defaultValue": "railway"
                    },
                    "DATABASE_URL": {
                      "isOptional": false,
                      "description": "URL to connect to Postgres database.",
                      "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{PGDATABASE}}"
                    },
                    "POSTGRES_USER": {
                      "isOptional": false,
                      "description": "User to connect to Postgres DB",
                      "defaultValue": "postgres"
                    },
                    "SSL_CERT_DAYS": {
                      "isOptional": true,
                      "description": "SSL certificate expiry in days.",
                      "defaultValue": "820"
                    },
                    "POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Password to connect to DB",
                      "defaultValue": "{{POSTGRES_PASSWORD}}"
                    },
                    "DATABASE_PUBLIC_URL": {
                      "description": "Public URL to connect to Postgres database, used by the Data panel.",
                      "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_TCP_PROXY_DOMAIN}}:${{RAILWAY_TCP_PROXY_PORT}}/${{PGDATABASE}}"
                    },
                    "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": {
                      "isOptional": false,
                      "description": "Allow Postgres to cleanly shut down",
                      "defaultValue": "60"
                    }
                  },
                  "networking": {
                    "tcpProxies": {
                      "5432": {}
                    },
                    "serviceDomains": {}
                  },
                  "volumeMounts": {
                    "529152a1-8631-4cf0-9809-c6d191b1b7af": {
                      "mountPath": "/var/lib/postgresql/data"
                    }
                  },
                  "haTemplateCode": "postgres-ha",
                  "haConversionConfig": {
                    "edge": {
                      "label": "Reverse Proxy",
                      "options": [
                        2,
                        3,
                        4,
                        5
                      ],
                      "nodeLabel": "HAProxy",
                      "description": "Routes traffic to the primary",
                      "defaultValue": 3
                    },
                    "replica": {
                      "label": "Replicas",
                      "options": [
                        2,
                        3,
                        4,
                        5,
                        6,
                        7
                      ],
                      "nodeLabel": "Postgres",
                      "description": "Streaming replicas for automatic failover",
                      "defaultValue": 2
                    },
                    "internal": {
                      "label": "Coordinator Nodes",
                      "options": [
                        3,
                        5,
                        7,
                        9
                      ],
                      "nodeLabel": "etcd",
                      "defaultValue": 3
                    },
                    "description": "This will convert your Postgres database to an HA cluster with Patroni failover and etcd consensus."
                  }
                },
                "78474468-e2ff-413c-a71d-0cd9c786c3f5": {
                  "icon": "https://valkey.io/img/valkey-horizontal.svg",
                  "name": "valkey",
                  "source": {
                    "image": "valkey/valkey:8.1"
                  },
                  "variables": {
                    "VALKEY_EXTRA_FLAGS": {
                      "defaultValue": "--maxmemory 128mb --maxmemory-policy volatile-lfu"
                    }
                  }
                },
                "f1f8bf78-133e-4211-8add-75a8a4c45ff2": {
                  "icon": "https://i.ibb.co/Y74Mtyk5/30179644-s-200-v-4.png",
                  "name": "frontend",
                  "source": {
                    "image": "penpotapp/frontend:latest"
                  },
                  "variables": {
                    "PENPOT_FLAGS": {
                      "defaultValue": "enable-prepl-server"
                    },
                    "RAILWAY_RUN_UID": {
                      "defaultValue": "0"
                    },
                    "PENPOT_PUBLIC_URI": {
                      "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "PENPOT_BACKEND_URI": {
                      "defaultValue": "http://${{backend.RAILWAY_PRIVATE_DOMAIN}}:6060"
                    },
                    "PENPOT_EXPORTER_URI": {
                      "defaultValue": "http://${{exporter.RAILWAY_PRIVATE_DOMAIN}}:6061"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:8080": {
                        "port": 8080
                      }
                    }
                  }
                },
                "fef5edf0-2228-4010-ba42-8c860aac8d3a": {
                  "icon": "https://i.ibb.co/Y74Mtyk5/30179644-s-200-v-4.png",
                  "name": "backend",
                  "source": {
                    "image": "penpotapp/backend:latest"
                  },
                  "variables": {
                    "PENPOT_FLAGS": {
                      "defaultValue": "disable-email-verification enable-prepl-server"
                    },
                    "PENPOT_SMTP_SSL": {
                      "isOptional": true,
                      "description": "true or false",
                      "defaultValue": ""
                    },
                    "PENPOT_SMTP_TLS": {
                      "isOptional": true,
                      "description": "true or false",
                      "defaultValue": ""
                    },
                    "RAILWAY_RUN_UID": {
                      "defaultValue": "0"
                    },
                    "PENPOT_REDIS_URI": {
                      "defaultValue": "redis://${{valkey.RAILWAY_PRIVATE_DOMAIN}}/0"
                    },
                    "PENPOT_SMTP_HOST": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "PENPOT_SMTP_PORT": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "AWS_ACCESS_KEY_ID": {
                      "defaultValue": "${{minio.MINIO_ROOT_USER}}"
                    },
                    "PENPOT_PUBLIC_URI": {
                      "defaultValue": "https://${{frontend.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "PENPOT_SECRET_KEY": {
                      "defaultValue": "o6muwesk8r6gc3b65bew8hbps7xzh4rt"
                    },
                    "PENPOT_DATABASE_URI": {
                      "defaultValue": "postgresql://${{postgres.RAILWAY_PRIVATE_DOMAIN}}/${{postgres.PGDATABASE}}"
                    },
                    "PENPOT_SMTP_PASSWORD": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "PENPOT_SMTP_USERNAME": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "AWS_SECRET_ACCESS_KEY": {
                      "defaultValue": "${{minio.MINIO_ROOT_PASSWORD}}"
                    },
                    "PENPOT_DATABASE_PASSWORD": {
                      "defaultValue": "${{postgres.PGPASSWORD}}"
                    },
                    "PENPOT_DATABASE_USERNAME": {
                      "defaultValue": "${{postgres.PGUSER}}"
                    },
                    "PENPOT_SMTP_DEFAULT_FROM": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "PENPOT_TELEMETRY_ENABLED": {
                      "defaultValue": "true"
                    },
                    "PENPOT_TELEMETRY_REFERER": {
                      "defaultValue": "railway"
                    },
                    "PENPOT_SMTP_DEFAULT_REPLY_TO": {
                      "isOptional": true,
                      "description": "",
                      "defaultValue": ""
                    },
                    "PENPOT_ASSETS_STORAGE_BACKEND": {
                      "defaultValue": "assets-s3"
                    },
                    "PENPOT_STORAGE_ASSETS_S3_BUCKET": {
                      "defaultValue": "penpot-assets"
                    },
                    "PENPOT_STORAGE_ASSETS_S3_REGION": {
                      "defaultValue": "us-east-1"
                    },
                    "PENPOT_STORAGE_ASSETS_S3_ENDPOINT": {
                      "defaultValue": "http://${{minio.RAILWAY_PRIVATE_DOMAIN}}:9000"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:6063": {
                        "port": 6063
                      }
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 6,
    "needs_volume": true
  },
  "generated_at": "2026-09-16T22:14:52.145Z",
  "generator_version": "0.1.0",
  "status": "degraded",
  "validated_at": "2026-09-16T08:23:38.031Z",
  "success_rate_30d": 0,
  "validation": {
    "last_run_id": "run_f5fa935feffc4ab28582",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": false,
        "detail": "FAILED,DEPLOYING,DEPLOYING,SUCCESS,QUEUED,SUCCESS"
      }
    ]
  }
}