{
  "manifest_version": "1.0.0",
  "template": {
    "id": "1e3db49f-d37a-4742-9be3-79a339253636",
    "slug": "proxyt",
    "name": "proxyt",
    "description": "Proxy the Tailscale control plane",
    "url": "https://railway.com/deploy/proxyt",
    "upstream": {
      "repo_url": "https://github.com/jaxxstorm/proxyt"
    }
  },
  "services": [
    {
      "name": "proxyt",
      "source": {
        "repo": "https://github.com/jaxxstorm/proxyt"
      },
      "needs_volume": false,
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "PROXYT_PORT",
      "service": "proxyt",
      "description": "The port proxy will listen on. Defaults to the railway standard port of 8080",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "PROXYT_DOMAIN",
      "service": "proxyt",
      "description": "The domain proxy is listening on. Can usually be left alone, and by default is set to the domain Railway has issued to your app",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "PROXYT_HTTP_ONLY",
      "service": "proxyt",
      "description": "If behind a TLS reverse proxy, you only need the HTTP endpoint. This is the default in railway",
      "secret": false,
      "strategy": "default",
      "default": "true"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "proxyt"
      }
    },
    "cli": "railway deploy --template proxyt",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "1e3db49f-d37a-4742-9be3-79a339253636",
            "serializedConfig": {
              "services": {
                "7fe0170e-ef1c-4f51-93d6-f193e663b7ec": {
                  "name": "proxyt",
                  "deploy": {
                    "healthcheckPath": "/health"
                  },
                  "source": {
                    "repo": "jaxxstorm/proxyt",
                    "branch": null,
                    "rootDirectory": null
                  },
                  "variables": {
                    "PROXYT_BIND": {
                      "isOptional": true,
                      "description": "The address proxyt will bind to, it should almost always be left at the default of `0.0.0.0`",
                      "defaultValue": ""
                    },
                    "PROXYT_PORT": {
                      "isOptional": false,
                      "description": "The port proxy will listen on. Defaults to the railway standard port of 8080",
                      "defaultValue": "8080"
                    },
                    "PROXYT_DEBUG": {
                      "isOptional": true,
                      "description": "Enable debug logging. Valid values are `true` or `false`",
                      "defaultValue": ""
                    },
                    "PROXYT_EMAIL": {
                      "isOptional": true,
                      "description": "If you using `tcp` forwarding and allow proxy to issues its won certificate via lets encrypt, this email is the one used for the lets encrypt API. It is not needed by default",
                      "defaultValue": ""
                    },
                    "PROXYT_ISSUE": {
                      "isOptional": true,
                      "description": "Determine whether proxyt will issue a lets encrypt certificate for HTTPs. It is not needed if you're running inside Railway usually unless tcp mode is used",
                      "defaultValue": ""
                    },
                    "PROXYT_DOMAIN": {
                      "isOptional": false,
                      "description": "The domain proxy is listening on. Can usually be left alone, and by default is set to the domain Railway has issued to your app",
                      "defaultValue": "${{ RAILWAY_PUBLIC_DOMAIN }}"
                    },
                    "PROXYT_CERT_DIR": {
                      "isOptional": true,
                      "description": "The local directory on disk that is used to store the cert. Can almost always be left empty",
                      "defaultValue": ""
                    },
                    "PROXYT_HTTP_ONLY": {
                      "isOptional": true,
                      "description": "If behind a TLS reverse proxy, you only need the HTTP endpoint. This is the default in railway",
                      "defaultValue": "true"
                    },
                    "PROXYT_HTTPS_PORT": {
                      "isOptional": true,
                      "description": "If you choose to handle HTTPS yourself, this is the port proxy will listen on for https connections",
                      "defaultValue": ""
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "proxyt",
      "method": "GET",
      "path": "/health",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 1,
    "needs_volume": false
  },
  "generated_at": "2026-09-20T16:14:49.616Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-09-18T19:20:08.809Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_78bc3bc3818d4d8786ba",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "healthcheck",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 146,
    "typical_build_seconds": 30,
    "typical_start_seconds": 10,
    "slowest_service": "proxyt"
  }
}