{
  "manifest_version": "1.0.0",
  "template": {
    "id": "79bb2c8f-6beb-44e2-9332-19d39057a6ef",
    "slug": "probo",
    "name": "Probo",
    "description": "Hands-off compliance: get SOC 2, ISO & HIPAA certified with ease.",
    "url": "https://railway.com/deploy/probo",
    "upstream": {
      "image": "ghcr.io/getprobo/probo:latest"
    }
  },
  "services": [
    {
      "name": "Chrome",
      "source": {
        "image": "chromedp/headless-shell:140.0.7259.2"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "Postgres",
      "source": {
        "image": "ghcr.io/railwayapp-templates/postgres-ssl:17"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/postgresql/data",
      "tcp_ports": [
        5432
      ],
      "http": false
    },
    {
      "name": "Probo",
      "source": {
        "image": "ghcr.io/getprobo/probo:latest"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "PGDATA",
      "service": "Postgres",
      "description": "Location where the database will be initialized",
      "secret": false,
      "strategy": "default",
      "default": "/var/lib/postgresql/data/pgdata"
    },
    {
      "key": "PGHOST",
      "service": "Postgres",
      "description": "Railway Private Domain Name.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "PGPORT",
      "service": "Postgres",
      "description": "Port to connect to Postgres.",
      "secret": false,
      "strategy": "default",
      "default": "5432"
    },
    {
      "key": "PGUSER",
      "service": "Postgres",
      "description": "Required variable for Data panel",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGDATABASE",
      "service": "Postgres",
      "description": "Required variable for the data panel.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGPASSWORD",
      "service": "Postgres",
      "description": "Required variable for Data panel",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "POSTGRES_DB",
      "service": "Postgres",
      "description": "Default database created when image is started.",
      "secret": false,
      "strategy": "default",
      "default": "railway"
    },
    {
      "key": "DATABASE_URL",
      "service": "Postgres",
      "description": "URL to connect to Postgres database.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "POSTGRES_USER",
      "service": "Postgres",
      "description": "User to connect to Postgres DB",
      "secret": false,
      "strategy": "default",
      "default": "postgres"
    },
    {
      "key": "SSL_CERT_DAYS",
      "service": "Postgres",
      "description": "SSL certificate expiry in days.",
      "secret": false,
      "strategy": "default",
      "default": "820"
    },
    {
      "key": "POSTGRES_PASSWORD",
      "service": "Postgres",
      "description": "Password to connect to DB",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "DATABASE_PUBLIC_URL",
      "service": "Postgres",
      "description": "Public URL to connect to Postgres database, used by the Data panel.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS",
      "service": "Postgres",
      "description": "Allow Postgres to cleanly shut down",
      "secret": false,
      "strategy": "default",
      "default": "60"
    },
    {
      "key": "PG_ADDR",
      "service": "Probo",
      "description": "Host and port address of your PostgreSQL database that Probo uses",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "API_ADDR",
      "service": "Probo",
      "description": "The address and port on which Probo’s API server binds (where it listens for HTTP requests)",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0:8080"
    },
    {
      "key": "AWS_BUCKET",
      "service": "Probo",
      "description": "Name of the AWS (or S3-compatible) bucket used for file/storage needs (e.g. attachments, artifacts)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "AWS_REGION",
      "service": "Probo",
      "description": "Region setting for AWS — indicates which region the bucket/other AWS services are located",
      "secret": false,
      "strategy": "default",
      "default": "auto"
    },
    {
      "key": "PG_DATABASE",
      "service": "Probo",
      "description": "The name of the PostgreSQL database that Probo should connect to",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PG_PASSWORD",
      "service": "Probo",
      "description": "The password for the PostgreSQL user",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PG_USERNAME",
      "service": "Probo",
      "description": "The username for the PostgreSQL connection",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "AWS_ENDPOINT",
      "service": "Probo",
      "description": "Custom endpoint for AWS or S3-compatible storage (if not standard AWS)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PG_POOL_SIZE",
      "service": "Probo",
      "description": "Size of the database connection pool — how many DB connections Probo can hold open concurrently",
      "secret": false,
      "strategy": "default",
      "default": "100"
    },
    {
      "key": "CHROME_DP_ADDR",
      "service": "Probo",
      "description": "Address/port for a Chrome headless/debugging service — possibly used if Probo needs to render or snapshot something via headless Chrome",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "PROBOD_BASE_URL",
      "service": "Probo",
      "description": "Base URL for Probo — used to generate links (e.g. in emails, callbacks)",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "AWS_ACCESS_KEY_ID",
      "service": "Probo",
      "description": "AWS access key ID used to authenticate against AWS (or S3-compatible) storage",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "AUTH_COOKIE_SECRET",
      "service": "Probo",
      "description": "Secret key used to sign authentication cookies for Probo’s web interface (session security)",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "AUTH_PASSWORD_PEPPER",
      "service": "Probo",
      "description": "A “pepper” value for password hashing — extra secret mixed with user passwords to strengthen security",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "AWS_SECRET_ACCESS_KEY",
      "service": "Probo",
      "description": "AWS secret access key paired with access key ID — used to authorize storage operations",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PROBOD_ENCRYPTION_KEY",
      "service": "Probo",
      "description": "Encryption key used internally by Probo (e.g. to encrypt sensitive stored data)",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "TRUST_AUTH_TOKEN_SECRET",
      "service": "Probo",
      "description": "Secret used to sign/validate auth tokens (e.g. for API authentication or trustworthy sessions)",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "API_CORS_ALLOWED_ORIGINS",
      "service": "Probo",
      "description": "List (or single) origin(s) allowed by CORS — which front-end domains are allowed to call Probo’s API",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "probo"
      }
    },
    "cli": "railway deploy --template probo",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "79bb2c8f-6beb-44e2-9332-19d39057a6ef",
            "serializedConfig": {
              "buckets": {
                "4f3dc0b8-18b3-4a95-9906-ebc9330cf131": {
                  "name": "Bucket"
                }
              },
              "services": {
                "497b0ab7-5cc1-4c40-8849-1713fb36131d": {
                  "icon": "https://avatars.githubusercontent.com/u/1778935?s=200&v=4",
                  "name": "Chrome",
                  "deploy": {
                    "startCommand": "/headless-shell/run.sh --headless --disable-gpu --disable-dev-shm-usage --hide-scrollbars --mute-audio --no-default-browser-check --no-first-run --disable-background-networking --disable-background-timer-throttling --disable-extensions",
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "chromedp/headless-shell:140.0.7259.2"
                  },
                  "variables": {}
                },
                "987bdc54-ba85-4ce9-b39e-541609d99335": {
                  "icon": "https://devicons.railway.app/i/postgresql.svg",
                  "name": "Postgres",
                  "build": {},
                  "deploy": {
                    "requiredMountPath": "/var/lib/postgresql/data"
                  },
                  "source": {
                    "image": "ghcr.io/railwayapp-templates/postgres-ssl:17"
                  },
                  "variables": {
                    "PGDATA": {
                      "isOptional": false,
                      "description": "Location where the database will be initialized",
                      "defaultValue": "/var/lib/postgresql/data/pgdata"
                    },
                    "PGHOST": {
                      "isOptional": false,
                      "description": "Railway Private Domain Name.",
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "PGPORT": {
                      "isOptional": false,
                      "description": "Port to connect to Postgres.",
                      "defaultValue": "5432"
                    },
                    "PGUSER": {
                      "isOptional": false,
                      "description": "Required variable for Data panel",
                      "defaultValue": "${{ POSTGRES_USER }}"
                    },
                    "PGDATABASE": {
                      "isOptional": false,
                      "description": "Required variable for the data panel.",
                      "defaultValue": "${{POSTGRES_DB}}"
                    },
                    "PGPASSWORD": {
                      "isOptional": false,
                      "description": "Required variable for Data panel",
                      "defaultValue": "${{POSTGRES_PASSWORD}}"
                    },
                    "POSTGRES_DB": {
                      "isOptional": false,
                      "description": "Default database created when image is started.",
                      "defaultValue": "railway"
                    },
                    "DATABASE_URL": {
                      "isOptional": false,
                      "description": "URL to connect to Postgres database.",
                      "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{PGDATABASE}}"
                    },
                    "POSTGRES_USER": {
                      "isOptional": false,
                      "description": "User to connect to Postgres DB",
                      "defaultValue": "postgres"
                    },
                    "SSL_CERT_DAYS": {
                      "isOptional": true,
                      "description": "SSL certificate expiry in days.",
                      "defaultValue": "820"
                    },
                    "POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Password to connect to DB",
                      "defaultValue": "{{POSTGRES_PASSWORD}}"
                    },
                    "DATABASE_PUBLIC_URL": {
                      "description": "Public URL to connect to Postgres database, used by the Data panel.",
                      "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_TCP_PROXY_DOMAIN}}:${{RAILWAY_TCP_PROXY_PORT}}/${{PGDATABASE}}"
                    },
                    "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": {
                      "isOptional": false,
                      "description": "Allow Postgres to cleanly shut down",
                      "defaultValue": "60"
                    }
                  },
                  "networking": {
                    "tcpProxies": {
                      "5432": {}
                    },
                    "serviceDomains": {}
                  },
                  "volumeMounts": {
                    "987bdc54-ba85-4ce9-b39e-541609d99335": {
                      "mountPath": "/var/lib/postgresql/data"
                    }
                  },
                  "haTemplateCode": "postgres-ha",
                  "haConversionConfig": {
                    "edge": {
                      "label": "Reverse Proxy",
                      "options": [
                        2,
                        3,
                        4,
                        5
                      ],
                      "nodeLabel": "HAProxy",
                      "description": "Routes traffic to the primary",
                      "defaultValue": 3
                    },
                    "replica": {
                      "label": "Replicas",
                      "options": [
                        2,
                        3,
                        4,
                        5,
                        6,
                        7
                      ],
                      "nodeLabel": "Postgres",
                      "description": "Streaming replicas for automatic failover",
                      "defaultValue": 2
                    },
                    "internal": {
                      "label": "Coordinator Nodes",
                      "options": [
                        3,
                        5,
                        7,
                        9
                      ],
                      "nodeLabel": "etcd",
                      "defaultValue": 3
                    },
                    "description": "This will convert your Postgres database to an HA cluster with Patroni failover and etcd consensus."
                  }
                },
                "d8439d0b-c414-4016-abf3-c2ca197e9dcf": {
                  "icon": "https://avatars.githubusercontent.com/u/187622421?s=200&v=4",
                  "name": "Probo",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "ghcr.io/getprobo/probo:latest"
                  },
                  "variables": {
                    "PG_ADDR": {
                      "isOptional": false,
                      "description": "Host and port address of your PostgreSQL database that Probo uses",
                      "defaultValue": "${{Postgres.PGHOST}}:${{Postgres.PGPORT}}"
                    },
                    "API_ADDR": {
                      "isOptional": false,
                      "description": "The address and port on which Probo’s API server binds (where it listens for HTTP requests)",
                      "defaultValue": "0.0.0.0:8080"
                    },
                    "SMTP_ADDR": {
                      "isOptional": true,
                      "description": "Hostname (and port) of the SMTP server for sending email",
                      "defaultValue": ""
                    },
                    "SMTP_USER": {
                      "isOptional": true,
                      "description": "Username to authenticate to the SMTP server",
                      "defaultValue": ""
                    },
                    "AWS_BUCKET": {
                      "isOptional": false,
                      "description": "Name of the AWS (or S3-compatible) bucket used for file/storage needs (e.g. attachments, artifacts)",
                      "defaultValue": "${{Bucket.BUCKET}}"
                    },
                    "AWS_REGION": {
                      "isOptional": false,
                      "description": "Region setting for AWS — indicates which region the bucket/other AWS services are located",
                      "defaultValue": "auto"
                    },
                    "PG_DATABASE": {
                      "isOptional": false,
                      "description": "The name of the PostgreSQL database that Probo should connect to",
                      "defaultValue": "${{Postgres.PGDATABASE}}"
                    },
                    "PG_PASSWORD": {
                      "isOptional": false,
                      "description": "The password for the PostgreSQL user",
                      "defaultValue": "${{Postgres.PGPASSWORD}}"
                    },
                    "PG_USERNAME": {
                      "isOptional": false,
                      "description": "The username for the PostgreSQL connection",
                      "defaultValue": "${{Postgres.POSTGRES_USER}}"
                    },
                    "AWS_ENDPOINT": {
                      "isOptional": false,
                      "description": "Custom endpoint for AWS or S3-compatible storage (if not standard AWS)",
                      "defaultValue": "${{Bucket.ENDPOINT}}"
                    },
                    "PG_POOL_SIZE": {
                      "isOptional": false,
                      "description": "Size of the database connection pool — how many DB connections Probo can hold open concurrently",
                      "defaultValue": "100"
                    },
                    "SMTP_PASSWORD": {
                      "isOptional": true,
                      "description": "Password to authenticate to the SMTP server",
                      "defaultValue": ""
                    },
                    "CHROME_DP_ADDR": {
                      "isOptional": false,
                      "description": "Address/port for a Chrome headless/debugging service — possibly used if Probo needs to render or snapshot something via headless Chrome",
                      "defaultValue": "${{Chrome.RAILWAY_PRIVATE_DOMAIN}}:9229"
                    },
                    "PROBOD_BASE_URL": {
                      "isOptional": false,
                      "description": "Base URL for Probo — used to generate links (e.g. in emails, callbacks)",
                      "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "AWS_ACCESS_KEY_ID": {
                      "isOptional": false,
                      "description": "AWS access key ID used to authenticate against AWS (or S3-compatible) storage",
                      "defaultValue": "${{Bucket.ACCESS_KEY_ID}}"
                    },
                    "SMTP_TLS_REQUIRED": {
                      "isOptional": true,
                      "description": "Whether TLS is required/used when connecting to SMTP (i.e. encrypted connection)",
                      "defaultValue": ""
                    },
                    "AUTH_COOKIE_SECRET": {
                      "isOptional": false,
                      "description": "Secret key used to sign authentication cookies for Probo’s web interface (session security)",
                      "defaultValue": "{{AUTH_COOKIE_SECRET}}"
                    },
                    "MAILER_SENDER_EMAIL": {
                      "isOptional": true,
                      "description": "The “from” email address used when Probo sends emails (e.g. notifications, invites)",
                      "defaultValue": ""
                    },
                    "AUTH_PASSWORD_PEPPER": {
                      "isOptional": false,
                      "description": "A “pepper” value for password hashing — extra secret mixed with user passwords to strengthen security",
                      "defaultValue": "{{AUTH_PASSWORD_PEPPER}}"
                    },
                    "AWS_SECRET_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "AWS secret access key paired with access key ID — used to authorize storage operations",
                      "defaultValue": "${{Bucket.SECRET_ACCESS_KEY}}"
                    },
                    "PROBOD_ENCRYPTION_KEY": {
                      "isOptional": false,
                      "description": "Encryption key used internally by Probo (e.g. to encrypt sensitive stored data)",
                      "defaultValue": "{{PROBOD_ENCRYPTION_KEY}}"
                    },
                    "TRUST_AUTH_TOKEN_SECRET": {
                      "isOptional": false,
                      "description": "Secret used to sign/validate auth tokens (e.g. for API authentication or trustworthy sessions)",
                      "defaultValue": "{{TRUST_AUTH_TOKEN_SECRET}}"
                    },
                    "API_CORS_ALLOWED_ORIGINS": {
                      "isOptional": false,
                      "description": "List (or single) origin(s) allowed by CORS — which front-end domains are allowed to call Probo’s API",
                      "defaultValue": "${{RAILWAY_PUBLIC_DOMAIN}}"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  },
                  "volumeMounts": {
                    "d8439d0b-c414-4016-abf3-c2ca197e9dcf": {
                      "mountPath": "/data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 3,
    "needs_volume": true
  },
  "generated_at": "2026-09-12T22:14:39.841Z",
  "generator_version": "0.1.0",
  "status": "degraded",
  "validated_at": "2026-09-11T22:35:38.256Z",
  "success_rate_30d": 0,
  "validation": {
    "last_run_id": "run_9da7ed6c80c74a1f9f35",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": false,
        "detail": "Your workspace has been restricted. Please contact support to resolve this."
      }
    ]
  }
}