{
  "manifest_version": "1.0.0",
  "template": {
    "id": "e4b77b80-8329-43ba-aedb-bd27142c3bcf",
    "slug": "railway-secrets",
    "name": "Railway Secret",
    "description": "A self-hosted service to manage and rotate Railway environment variables.",
    "url": "https://railway.com/deploy/railway-secrets",
    "upstream": {
      "image": "ghcr.io/0xdps/railway-secret:latest"
    }
  },
  "services": [
    {
      "name": "railway-secret",
      "source": {
        "image": "ghcr.io/0xdps/railway-secret:latest"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "ADMIN_KEY",
      "service": "railway-secret",
      "description": "Password required to log into the web dashboard.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "MASTER_KEY",
      "service": "railway-secret",
      "description": "Key used to encrypt secret history stored in the local SQLite database (AES-256-GCM).",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "RAILWAY_TOKEN",
      "service": "railway-secret",
      "description": "Your Railway API token, used to authenticate all GraphQL requests.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "SESSION_SECRET",
      "service": "railway-secret",
      "description": "Secret used to encrypt and HMAC-sign the session cookie (AES-256-GCM).",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "railway-secrets"
      }
    },
    "cli": "railway deploy --template railway-secrets",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "e4b77b80-8329-43ba-aedb-bd27142c3bcf",
            "serializedConfig": {
              "services": {
                "16f7e38b-0058-42be-af53-8983d9953376": {
                  "icon": "https://raw.githubusercontent.com/0xdps/railway-secret/refs/heads/trunk/public/favicon.svg",
                  "name": "railway-secret",
                  "deploy": {
                    "healthcheckPath": "/health"
                  },
                  "source": {
                    "image": "ghcr.io/0xdps/railway-secret:latest",
                    "autoUpdates": {
                      "type": "patch",
                      "schedule": [
                        {
                          "day": 0,
                          "endHour": 6,
                          "startHour": 2
                        },
                        {
                          "day": 1,
                          "endHour": 6,
                          "startHour": 2
                        },
                        {
                          "day": 2,
                          "endHour": 6,
                          "startHour": 2
                        },
                        {
                          "day": 3,
                          "endHour": 6,
                          "startHour": 2
                        },
                        {
                          "day": 4,
                          "endHour": 6,
                          "startHour": 2
                        },
                        {
                          "day": 5,
                          "endHour": 6,
                          "startHour": 2
                        },
                        {
                          "day": 6,
                          "endHour": 6,
                          "startHour": 2
                        }
                      ]
                    }
                  },
                  "variables": {
                    "ADMIN_KEY": {
                      "description": "Password required to log into the web dashboard.",
                      "defaultValue": "{{ADMIN_KEY}}"
                    },
                    "MASTER_KEY": {
                      "description": "Key used to encrypt secret history stored in the local SQLite database (AES-256-GCM).",
                      "defaultValue": "{{MASTER_KEY}}"
                    },
                    "RAILWAY_TOKEN": {
                      "description": "Your Railway API token, used to authenticate all GraphQL requests.",
                      "defaultValue": "{{RAILWAY_TOKEN}}"
                    },
                    "SESSION_SECRET": {
                      "description": "Secret used to encrypt and HMAC-sign the session cookie (AES-256-GCM).",
                      "defaultValue": "{{SESSION_SECRET}}"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:8080": {
                        "port": 8080
                      }
                    }
                  },
                  "volumeMounts": {
                    "16f7e38b-0058-42be-af53-8983d9953376": {
                      "mountPath": "/data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "railway-secret",
      "method": "GET",
      "path": "/health",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-09-20T04:14:40.089Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-09-18T09:53:38.869Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_66fff0c3810b452caffe",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "healthcheck",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 19,
    "typical_build_seconds": 0,
    "typical_start_seconds": 2,
    "slowest_service": "railway-secret"
  }
}