{
  "manifest_version": "1.0.0",
  "template": {
    "id": "0398c301-4d37-4789-b2ca-923dde2b5032",
    "slug": "personal-management-system",
    "name": "Personal Management System",
    "description": "Private web app for your notes, contacts, passwords and finances",
    "url": "https://railway.com/deploy/personal-management-system",
    "upstream": {
      "image": "axllent/mailpit:latest"
    }
  },
  "services": [
    {
      "name": "scheduler",
      "source": {
        "repo": "https://github.com/gridalpha/personal-management-system-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "mailpit",
      "source": {
        "image": "axllent/mailpit:latest"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": true
    },
    {
      "name": "frontend",
      "source": {
        "repo": "https://github.com/gridalpha/personal-management-system-railway"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "backend",
      "source": {
        "repo": "https://github.com/gridalpha/personal-management-system-railway"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": true
    },
    {
      "name": "mariadb",
      "source": {
        "image": "mariadb:11.5.2"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/mysql",
      "http": false
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "scheduler",
      "description": "Port of the health endpoint",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "APP_ENV",
      "service": "scheduler",
      "description": "Symfony environment",
      "secret": false,
      "strategy": "default",
      "default": "prod"
    },
    {
      "key": "APP_DEMO",
      "service": "scheduler",
      "description": "Strict bool string",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "PMS_ROLE",
      "service": "scheduler",
      "description": "Selects the job loop instead of the web server",
      "secret": false,
      "strategy": "default",
      "default": "scheduler"
    },
    {
      "key": "APP_DEBUG",
      "service": "scheduler",
      "description": "Must be 0, not false",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "APP_SECRET",
      "service": "scheduler",
      "description": "Same signing secret as the API",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MAILER_DSN",
      "service": "scheduler",
      "description": "Outgoing mail endpoint",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "UPLOAD_DIR",
      "service": "scheduler",
      "description": "Upload root, relative to the web root",
      "secret": false,
      "strategy": "default",
      "default": "upload"
    },
    {
      "key": "DATABASE_URL",
      "service": "scheduler",
      "description": "MariaDB connection string",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "APP_MAINTENANCE",
      "service": "scheduler",
      "description": "Strict bool string",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "PUBLIC_ROOT_DIR",
      "service": "scheduler",
      "description": "Web root directory name",
      "secret": false,
      "strategy": "default",
      "default": "public"
    },
    {
      "key": "FILES_UPLOAD_DIR",
      "service": "scheduler",
      "description": "Files module storage",
      "secret": false,
      "strategy": "default",
      "default": "upload/files"
    },
    {
      "key": "IMAGES_UPLOAD_DIR",
      "service": "scheduler",
      "description": "Images module storage",
      "secret": false,
      "strategy": "default",
      "default": "upload/images"
    },
    {
      "key": "VIDEOS_UPLOAD_DIR",
      "service": "scheduler",
      "description": "Video module storage",
      "secret": false,
      "strategy": "default",
      "default": "upload/videos"
    },
    {
      "key": "MINIATURES_UPLOAD_DIR",
      "service": "scheduler",
      "description": "Generated thumbnails",
      "secret": false,
      "strategy": "default",
      "default": "upload/miniatures"
    },
    {
      "key": "RAILWAY_DOCKERFILE_PATH",
      "service": "scheduler",
      "description": "Dockerfile for this role",
      "secret": false,
      "strategy": "default",
      "default": "backend/Dockerfile"
    },
    {
      "key": "APP_IPS_ACCESS_RESTRICTION",
      "service": "scheduler",
      "description": "JSON IP allow-list, empty means no restriction",
      "secret": false,
      "strategy": "default",
      "default": "[]"
    },
    {
      "key": "PMS_SCHEDULER_INTERVAL_SECONDS",
      "service": "scheduler",
      "description": "Seconds between recurring-payment runs",
      "secret": false,
      "strategy": "default",
      "default": "3600"
    },
    {
      "key": "APP_DEFAULT_NPL_RECEIVER_EMAILS",
      "service": "scheduler",
      "description": "JSON list of notifier recipients",
      "secret": false,
      "strategy": "default",
      "default": "[\\\"admin@example.com\\\"]"
    },
    {
      "key": "RAILWAY_HEALTHCHECK_TIMEOUT_SEC",
      "service": "scheduler",
      "description": "First boot waits for MariaDB",
      "secret": false,
      "strategy": "default",
      "default": "600"
    },
    {
      "key": "APP_EMERGENCY_EMAILS_RECEIVER_EMAIL",
      "service": "scheduler",
      "description": "Recipient for error mail",
      "secret": false,
      "strategy": "default",
      "default": "admin@example.com"
    },
    {
      "key": "TZ",
      "service": "mailpit",
      "description": "Timestamp timezone",
      "secret": false,
      "strategy": "default",
      "default": "UTC"
    },
    {
      "key": "PORT",
      "service": "mailpit",
      "description": "Web inbox port, also the health-check port",
      "secret": false,
      "strategy": "default",
      "default": "8025"
    },
    {
      "key": "MP_UI_AUTH",
      "service": "mailpit",
      "description": "Basic auth guarding the inbox",
      "secret": false,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "MP_DATABASE",
      "service": "mailpit",
      "description": "Message store on the volume",
      "secret": false,
      "strategy": "default",
      "default": "/data/mailpit.db"
    },
    {
      "key": "MP_MAX_MESSAGES",
      "service": "mailpit",
      "description": "Rolling message cap",
      "secret": false,
      "strategy": "default",
      "default": "5000"
    },
    {
      "key": "MP_UI_BIND_ADDR",
      "service": "mailpit",
      "description": "Dual-stack bind for the inbox",
      "secret": false,
      "strategy": "default",
      "default": "[::]:8025"
    },
    {
      "key": "MP_SMTP_BIND_ADDR",
      "service": "mailpit",
      "description": "Dual-stack bind for SMTP",
      "secret": false,
      "strategy": "default",
      "default": "[::]:1025"
    },
    {
      "key": "PORT",
      "service": "frontend",
      "description": "HTTP port nginx listens on",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "PMS_BACKEND_URL",
      "service": "frontend",
      "description": "API origin baked into the SPA",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "PMS_BACKEND_PRIVATE_URL",
      "service": "frontend",
      "description": "Where the JWT public key is fetched",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "RAILWAY_DOCKERFILE_PATH",
      "service": "frontend",
      "description": "Dockerfile for this role",
      "secret": false,
      "strategy": "default",
      "default": "frontend/Dockerfile"
    },
    {
      "key": "PORT",
      "service": "backend",
      "description": "HTTP port nginx listens on",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "APP_ENV",
      "service": "backend",
      "description": "Symfony environment",
      "secret": false,
      "strategy": "default",
      "default": "prod"
    },
    {
      "key": "APP_DEMO",
      "service": "backend",
      "description": "Strict bool string, only true or false",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "APP_DEBUG",
      "service": "backend",
      "description": "Must be 0, not false: any non-empty string is truthy here",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "APP_SECRET",
      "service": "backend",
      "description": "JWT passphrase and encryption-key seed, never change",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "MAILER_DSN",
      "service": "backend",
      "description": "Outgoing mail endpoint",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "UPLOAD_DIR",
      "service": "backend",
      "description": "Upload root, relative to the web root",
      "secret": false,
      "strategy": "default",
      "default": "upload"
    },
    {
      "key": "DATABASE_URL",
      "service": "backend",
      "description": "MariaDB connection string",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "APP_MAINTENANCE",
      "service": "backend",
      "description": "Strict bool string, only true or false",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "PMS_ADMIN_EMAIL",
      "service": "backend",
      "description": "Email of the account seeded at first boot",
      "secret": false,
      "strategy": "default",
      "default": "admin@example.com"
    },
    {
      "key": "PUBLIC_ROOT_DIR",
      "service": "backend",
      "description": "Web root directory name",
      "secret": false,
      "strategy": "default",
      "default": "public"
    },
    {
      "key": "TRUSTED_PROXIES",
      "service": "backend",
      "description": "Trust every hop, take the leftmost XFF entry",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0/0,::/0"
    },
    {
      "key": "FILES_UPLOAD_DIR",
      "service": "backend",
      "description": "Files module storage",
      "secret": false,
      "strategy": "default",
      "default": "upload/files"
    },
    {
      "key": "IMAGES_UPLOAD_DIR",
      "service": "backend",
      "description": "Images module storage",
      "secret": false,
      "strategy": "default",
      "default": "upload/images"
    },
    {
      "key": "VIDEOS_UPLOAD_DIR",
      "service": "backend",
      "description": "Video module storage",
      "secret": false,
      "strategy": "default",
      "default": "upload/videos"
    },
    {
      "key": "PMS_ADMIN_PASSWORD",
      "service": "backend",
      "description": "Password of that account",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "PMS_ADMIN_USERNAME",
      "service": "backend",
      "description": "Username of that account",
      "secret": false,
      "strategy": "default",
      "default": "admin"
    },
    {
      "key": "MINIATURES_UPLOAD_DIR",
      "service": "backend",
      "description": "Generated thumbnails",
      "secret": false,
      "strategy": "default",
      "default": "upload/miniatures"
    },
    {
      "key": "PMS_ADMIN_LOCK_PASSWORD",
      "service": "backend",
      "description": "Second password for the in-app lock screen",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "RAILWAY_DOCKERFILE_PATH",
      "service": "backend",
      "description": "Dockerfile for this role",
      "secret": false,
      "strategy": "default",
      "default": "backend/Dockerfile"
    },
    {
      "key": "APP_IPS_ACCESS_RESTRICTION",
      "service": "backend",
      "description": "JSON IP allow-list, empty means no restriction",
      "secret": false,
      "strategy": "default",
      "default": "[]"
    },
    {
      "key": "APP_DEFAULT_NPL_RECEIVER_EMAILS",
      "service": "backend",
      "description": "JSON list of notifier recipients",
      "secret": false,
      "strategy": "default",
      "default": "[\\\"admin@example.com\\\"]"
    },
    {
      "key": "RAILWAY_HEALTHCHECK_TIMEOUT_SEC",
      "service": "backend",
      "description": "First boot waits for MariaDB, then migrates",
      "secret": false,
      "strategy": "default",
      "default": "600"
    },
    {
      "key": "APP_EMERGENCY_EMAILS_RECEIVER_EMAIL",
      "service": "backend",
      "description": "Recipient for error mail",
      "secret": false,
      "strategy": "default",
      "default": "admin@example.com"
    },
    {
      "key": "MARIADB_USER",
      "service": "mariadb",
      "description": "Scoped account the app connects as",
      "secret": false,
      "strategy": "default",
      "default": "pms"
    },
    {
      "key": "MARIADB_DATABASE",
      "service": "mariadb",
      "description": "Database created while initializing an empty volume",
      "secret": false,
      "strategy": "default",
      "default": "pms"
    },
    {
      "key": "MARIADB_PASSWORD",
      "service": "mariadb",
      "description": "Password for that scoped account",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "MARIADB_AUTO_UPGRADE",
      "service": "mariadb",
      "description": "Run mariadb-upgrade after an image bump",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "MARIADB_ROOT_PASSWORD",
      "service": "mariadb",
      "description": "Superuser password, read by the entrypoint",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "personal-management-system"
      }
    },
    "cli": "railway deploy --template personal-management-system",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "0398c301-4d37-4789-b2ca-923dde2b5032",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "01735533-af46-48d6-b819-b5815f01b33f": {
                  "icon": "https://cdn.jsdelivr.net/gh/Volmarg/personal-management-system-front@main/public/logo-white.svg",
                  "name": "scheduler",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/healthz",
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/gridalpha/personal-management-system-railway",
                    "rootDirectory": null
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "Port of the health endpoint",
                      "defaultValue": "8080"
                    },
                    "APP_ENV": {
                      "isOptional": false,
                      "description": "Symfony environment",
                      "defaultValue": "prod"
                    },
                    "APP_DEMO": {
                      "isOptional": false,
                      "description": "Strict bool string",
                      "defaultValue": "false"
                    },
                    "PMS_ROLE": {
                      "isOptional": false,
                      "description": "Selects the job loop instead of the web server",
                      "defaultValue": "scheduler"
                    },
                    "APP_DEBUG": {
                      "isOptional": false,
                      "description": "Must be 0, not false",
                      "defaultValue": "0"
                    },
                    "APP_SECRET": {
                      "isOptional": false,
                      "description": "Same signing secret as the API",
                      "defaultValue": "${{backend.APP_SECRET}}"
                    },
                    "MAILER_DSN": {
                      "isOptional": false,
                      "description": "Outgoing mail endpoint",
                      "defaultValue": "smtp://${{mailpit.RAILWAY_PRIVATE_DOMAIN}}:1025?verify_peer=0"
                    },
                    "UPLOAD_DIR": {
                      "isOptional": false,
                      "description": "Upload root, relative to the web root",
                      "defaultValue": "upload"
                    },
                    "DATABASE_URL": {
                      "isOptional": false,
                      "description": "MariaDB connection string",
                      "defaultValue": "mysql://${{mariadb.MARIADB_USER}}:${{mariadb.MARIADB_PASSWORD}}@${{mariadb.RAILWAY_PRIVATE_DOMAIN}}:3306/${{mariadb.MARIADB_DATABASE}}"
                    },
                    "APP_MAINTENANCE": {
                      "isOptional": false,
                      "description": "Strict bool string",
                      "defaultValue": "false"
                    },
                    "PUBLIC_ROOT_DIR": {
                      "isOptional": false,
                      "description": "Web root directory name",
                      "defaultValue": "public"
                    },
                    "FILES_UPLOAD_DIR": {
                      "isOptional": false,
                      "description": "Files module storage",
                      "defaultValue": "upload/files"
                    },
                    "IMAGES_UPLOAD_DIR": {
                      "isOptional": false,
                      "description": "Images module storage",
                      "defaultValue": "upload/images"
                    },
                    "VIDEOS_UPLOAD_DIR": {
                      "isOptional": false,
                      "description": "Video module storage",
                      "defaultValue": "upload/videos"
                    },
                    "MINIATURES_UPLOAD_DIR": {
                      "isOptional": false,
                      "description": "Generated thumbnails",
                      "defaultValue": "upload/miniatures"
                    },
                    "RAILWAY_DOCKERFILE_PATH": {
                      "isOptional": false,
                      "description": "Dockerfile for this role",
                      "defaultValue": "backend/Dockerfile"
                    },
                    "APP_IPS_ACCESS_RESTRICTION": {
                      "isOptional": true,
                      "description": "JSON IP allow-list, empty means no restriction",
                      "defaultValue": "[]"
                    },
                    "PMS_SCHEDULER_INTERVAL_SECONDS": {
                      "isOptional": false,
                      "description": "Seconds between recurring-payment runs",
                      "defaultValue": "3600"
                    },
                    "APP_DEFAULT_NPL_RECEIVER_EMAILS": {
                      "isOptional": true,
                      "description": "JSON list of notifier recipients",
                      "defaultValue": "[\\\"admin@example.com\\\"]"
                    },
                    "RAILWAY_HEALTHCHECK_TIMEOUT_SEC": {
                      "isOptional": false,
                      "description": "First boot waits for MariaDB",
                      "defaultValue": "600"
                    },
                    "APP_EMERGENCY_EMAILS_RECEIVER_EMAIL": {
                      "isOptional": true,
                      "description": "Recipient for error mail",
                      "defaultValue": "admin@example.com"
                    }
                  }
                },
                "8c966d3d-57c3-42dd-9888-00d90a7ea07f": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/mailpit.svg",
                  "name": "mailpit",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/livez",
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "axllent/mailpit:latest"
                  },
                  "variables": {
                    "TZ": {
                      "isOptional": false,
                      "description": "Timestamp timezone",
                      "defaultValue": "UTC"
                    },
                    "PORT": {
                      "isOptional": false,
                      "description": "Web inbox port, also the health-check port",
                      "defaultValue": "8025"
                    },
                    "MP_UI_AUTH": {
                      "isOptional": false,
                      "description": "Basic auth guarding the inbox",
                      "defaultValue": "{{MP_UI_AUTH}}"
                    },
                    "MP_DATABASE": {
                      "isOptional": false,
                      "description": "Message store on the volume",
                      "defaultValue": "/data/mailpit.db"
                    },
                    "MP_MAX_MESSAGES": {
                      "isOptional": false,
                      "description": "Rolling message cap",
                      "defaultValue": "5000"
                    },
                    "MP_UI_BIND_ADDR": {
                      "isOptional": false,
                      "description": "Dual-stack bind for the inbox",
                      "defaultValue": "[::]:8025"
                    },
                    "MP_SMTP_BIND_ADDR": {
                      "isOptional": false,
                      "description": "Dual-stack bind for SMTP",
                      "defaultValue": "[::]:1025"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:8025": {
                        "port": 8025
                      }
                    }
                  },
                  "volumeMounts": {
                    "8c966d3d-57c3-42dd-9888-00d90a7ea07f": {
                      "mountPath": "/data"
                    }
                  }
                },
                "b1ad3cc0-00fa-4e8b-bc33-21caf6c9e1f0": {
                  "icon": "https://cdn.jsdelivr.net/gh/Volmarg/personal-management-system-front@main/public/logo-white.svg",
                  "name": "frontend",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/healthz",
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/gridalpha/personal-management-system-railway",
                    "rootDirectory": null
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "HTTP port nginx listens on",
                      "defaultValue": "8080"
                    },
                    "PMS_BACKEND_URL": {
                      "isOptional": false,
                      "description": "API origin baked into the SPA",
                      "defaultValue": "https://${{backend.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "PMS_BACKEND_PRIVATE_URL": {
                      "isOptional": false,
                      "description": "Where the JWT public key is fetched",
                      "defaultValue": "http://${{backend.RAILWAY_PRIVATE_DOMAIN}}:8080"
                    },
                    "RAILWAY_DOCKERFILE_PATH": {
                      "isOptional": false,
                      "description": "Dockerfile for this role",
                      "defaultValue": "frontend/Dockerfile"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:8080": {
                        "port": 8080
                      }
                    }
                  }
                },
                "b973b243-5bf8-40f1-bc37-137b7f2d3d26": {
                  "icon": "https://cdn.jsdelivr.net/gh/Volmarg/personal-management-system-front@main/public/logo-white.svg",
                  "name": "backend",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/healthz",
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/gridalpha/personal-management-system-railway",
                    "rootDirectory": null
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "HTTP port nginx listens on",
                      "defaultValue": "8080"
                    },
                    "APP_ENV": {
                      "isOptional": false,
                      "description": "Symfony environment",
                      "defaultValue": "prod"
                    },
                    "APP_DEMO": {
                      "isOptional": false,
                      "description": "Strict bool string, only true or false",
                      "defaultValue": "false"
                    },
                    "APP_DEBUG": {
                      "isOptional": false,
                      "description": "Must be 0, not false: any non-empty string is truthy here",
                      "defaultValue": "0"
                    },
                    "APP_SECRET": {
                      "isOptional": false,
                      "description": "JWT passphrase and encryption-key seed, never change",
                      "defaultValue": "{{APP_SECRET}}"
                    },
                    "MAILER_DSN": {
                      "isOptional": false,
                      "description": "Outgoing mail endpoint",
                      "defaultValue": "smtp://${{mailpit.RAILWAY_PRIVATE_DOMAIN}}:1025?verify_peer=0"
                    },
                    "UPLOAD_DIR": {
                      "isOptional": false,
                      "description": "Upload root, relative to the web root",
                      "defaultValue": "upload"
                    },
                    "DATABASE_URL": {
                      "isOptional": false,
                      "description": "MariaDB connection string",
                      "defaultValue": "mysql://${{mariadb.MARIADB_USER}}:${{mariadb.MARIADB_PASSWORD}}@${{mariadb.RAILWAY_PRIVATE_DOMAIN}}:3306/${{mariadb.MARIADB_DATABASE}}"
                    },
                    "APP_MAINTENANCE": {
                      "isOptional": false,
                      "description": "Strict bool string, only true or false",
                      "defaultValue": "false"
                    },
                    "PMS_ADMIN_EMAIL": {
                      "isOptional": false,
                      "description": "Email of the account seeded at first boot",
                      "defaultValue": "admin@example.com"
                    },
                    "PUBLIC_ROOT_DIR": {
                      "isOptional": false,
                      "description": "Web root directory name",
                      "defaultValue": "public"
                    },
                    "TRUSTED_PROXIES": {
                      "isOptional": false,
                      "description": "Trust every hop, take the leftmost XFF entry",
                      "defaultValue": "0.0.0.0/0,::/0"
                    },
                    "FILES_UPLOAD_DIR": {
                      "isOptional": false,
                      "description": "Files module storage",
                      "defaultValue": "upload/files"
                    },
                    "IMAGES_UPLOAD_DIR": {
                      "isOptional": false,
                      "description": "Images module storage",
                      "defaultValue": "upload/images"
                    },
                    "VIDEOS_UPLOAD_DIR": {
                      "isOptional": false,
                      "description": "Video module storage",
                      "defaultValue": "upload/videos"
                    },
                    "PMS_ADMIN_PASSWORD": {
                      "isOptional": false,
                      "description": "Password of that account",
                      "defaultValue": "{{PMS_ADMIN_PASSWORD}}"
                    },
                    "PMS_ADMIN_USERNAME": {
                      "isOptional": false,
                      "description": "Username of that account",
                      "defaultValue": "admin"
                    },
                    "MINIATURES_UPLOAD_DIR": {
                      "isOptional": false,
                      "description": "Generated thumbnails",
                      "defaultValue": "upload/miniatures"
                    },
                    "PMS_ADMIN_LOCK_PASSWORD": {
                      "isOptional": true,
                      "description": "Second password for the in-app lock screen",
                      "defaultValue": "{{PMS_ADMIN_LOCK_PASSWORD}}"
                    },
                    "RAILWAY_DOCKERFILE_PATH": {
                      "isOptional": false,
                      "description": "Dockerfile for this role",
                      "defaultValue": "backend/Dockerfile"
                    },
                    "APP_IPS_ACCESS_RESTRICTION": {
                      "isOptional": true,
                      "description": "JSON IP allow-list, empty means no restriction",
                      "defaultValue": "[]"
                    },
                    "APP_DEFAULT_NPL_RECEIVER_EMAILS": {
                      "isOptional": true,
                      "description": "JSON list of notifier recipients",
                      "defaultValue": "[\\\"admin@example.com\\\"]"
                    },
                    "RAILWAY_HEALTHCHECK_TIMEOUT_SEC": {
                      "isOptional": false,
                      "description": "First boot waits for MariaDB, then migrates",
                      "defaultValue": "600"
                    },
                    "APP_EMERGENCY_EMAILS_RECEIVER_EMAIL": {
                      "isOptional": true,
                      "description": "Recipient for error mail",
                      "defaultValue": "admin@example.com"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:8080": {
                        "port": 8080
                      }
                    }
                  },
                  "volumeMounts": {
                    "b973b243-5bf8-40f1-bc37-137b7f2d3d26": {
                      "mountPath": "/data"
                    }
                  }
                },
                "ea662076-837d-4d23-a2d4-5dd407d56171": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/mariadb.svg",
                  "name": "mariadb",
                  "deploy": {
                    "startCommand": "/bin/sh -c 'mkdir -p /var/lib/mysql/data && exec docker-entrypoint.sh mariadbd --datadir=/var/lib/mysql/data --bind-address=:: --innodb-buffer-pool-size=512M --max-connections=100'",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "mariadb:11.5.2"
                  },
                  "variables": {
                    "MARIADB_USER": {
                      "isOptional": false,
                      "description": "Scoped account the app connects as",
                      "defaultValue": "pms"
                    },
                    "MARIADB_DATABASE": {
                      "isOptional": false,
                      "description": "Database created while initializing an empty volume",
                      "defaultValue": "pms"
                    },
                    "MARIADB_PASSWORD": {
                      "isOptional": false,
                      "description": "Password for that scoped account",
                      "defaultValue": "{{MARIADB_PASSWORD}}"
                    },
                    "MARIADB_AUTO_UPGRADE": {
                      "isOptional": false,
                      "description": "Run mariadb-upgrade after an image bump",
                      "defaultValue": "1"
                    },
                    "MARIADB_ROOT_PASSWORD": {
                      "isOptional": false,
                      "description": "Superuser password, read by the entrypoint",
                      "defaultValue": "{{MARIADB_ROOT_PASSWORD}}"
                    }
                  },
                  "volumeMounts": {
                    "ea662076-837d-4d23-a2d4-5dd407d56171": {
                      "mountPath": "/var/lib/mysql"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "mailpit",
      "method": "GET",
      "path": "/livez",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 5,
    "needs_volume": true
  },
  "generated_at": "2026-09-17T16:15:03.821Z",
  "generator_version": "0.1.0",
  "status": "degraded",
  "validated_at": "2026-09-17T15:42:21.122Z",
  "success_rate_30d": 0,
  "validation": {
    "last_run_id": "run_4bd7ca57457a442a9e1d",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": false,
        "detail": "SUCCESS,SUCCESS,BUILDING,SUCCESS,SUCCESS"
      }
    ]
  }
}