{
  "manifest_version": "1.0.0",
  "template": {
    "id": "db9a4b96-3544-44cc-b7f3-9e3707a283e9",
    "slug": "sentry-errors-only-mode",
    "name": "Sentry (Errors Only Mode)",
    "description": "Deploy and Host Sentry (Errors Only Mode) with Railway",
    "url": "https://railway.com/deploy/sentry-errors-only-mode",
    "upstream": {
      "repo_url": "https://github.com/jratienza65/sentry-railway"
    }
  },
  "services": [
    {
      "name": "web",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "symbolicator",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "snuba-subscription-consumer-eap-items",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "kafka",
      "source": {
        "image": "confluentinc/cp-kafka:7.6.6"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/kafka/data",
      "http": false
    },
    {
      "name": "clickhouse",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/clickhouse",
      "http": false
    },
    {
      "name": "snuba-outcomes-billing-consumer",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "snuba-outcomes-consumer",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "attachments-consumer",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "post-process-forwarder-errors",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "relay",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": true,
      "volume_mount_path": "/work/.relay",
      "http": false
    },
    {
      "name": "snuba-api",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "taskscheduler",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "snuba-errors-consumer",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "postgres",
      "source": {
        "image": "postgres:14.23-bookworm"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/postgresql/data",
      "http": false
    },
    {
      "name": "memcached",
      "source": {
        "image": "memcached:1.6.45-alpine"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "nginx",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": true
    },
    {
      "name": "taskworker",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "events-consumer",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "taskbroker",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": true,
      "volume_mount_path": "/opt/sqlite",
      "http": false
    },
    {
      "name": "redis",
      "source": {
        "image": "redis:6.2.20-alpine"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": false
    },
    {
      "name": "snuba-replacer",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "snuba-subscription-consumer-events",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "snuba-group-attributes-consumer",
      "source": {
        "repo": "https://github.com/jratienza65/sentry-railway"
      },
      "needs_volume": false,
      "http": false
    }
  ],
  "required_inputs": [
    {
      "key": "SNUBA",
      "service": "web",
      "description": "Snuba API URL (references the snuba-api service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "VROOM",
      "service": "web",
      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
      "secret": false,
      "strategy": "default",
      "default": "http://vroom.railway.internal:8085"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "web",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "COMPOSE_PROFILES",
      "service": "web",
      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
      "secret": false,
      "strategy": "default",
      "default": "errors-only"
    },
    {
      "key": "SENTRY_REDIS_HOST",
      "service": "web",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_URL_PREFIX",
      "service": "web",
      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "SENTRY_ADMIN_EMAIL",
      "service": "web",
      "description": "Login email for the initial Sentry admin user. The default works as a username (email delivery is disabled unless SMTP is configured) — change it here before deploying, or later in Sentry itself. The generated password is in this service's SENTRY_ADMIN_PASSWORD variable.",
      "secret": false,
      "strategy": "default",
      "default": "admin@example.com"
    },
    {
      "key": "SENTRY_POSTGRES_HOST",
      "service": "web",
      "description": "Postgres host (references the postgres service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_ADMIN_PASSWORD",
      "service": "web",
      "description": "Password for the initial Sentry admin user — generated at deploy time.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "SENTRY_MEMCACHED_ADDR",
      "service": "web",
      "description": "Memcached address (references the memcached service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_REDIS_PASSWORD",
      "service": "web",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYMBOLICATOR_URL",
      "service": "web",
      "description": "Symbolicator URL (references the symbolicator service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_POSTGRES_PASSWORD",
      "service": "web",
      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYSTEM_SECRET_KEY",
      "service": "web",
      "description": "Sentry's signing secret — generated at deploy time; all sentry services reference this value. Rotating it invalidates sessions.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "SENTRY_BOOTSTRAP_ON_START",
      "service": "web",
      "description": "Runs the idempotent bootstrap before serving: waits for backing services, verifies object storage, runs sentry upgrade (migrations + Kafka topics), ensures the admin user.",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "SENTRY_PROFILES_S3_BUCKET",
      "service": "web",
      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_PREFIX",
      "service": "web",
      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "profiles"
    },
    {
      "key": "SENTRY_PROFILES_S3_REGION",
      "service": "web",
      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_BUCKET",
      "service": "web",
      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_PREFIX",
      "service": "web",
      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "filestore"
    },
    {
      "key": "SENTRY_FILESTORE_S3_REGION",
      "service": "web",
      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_BUCKET",
      "service": "web",
      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_PREFIX",
      "service": "web",
      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "nodestore"
    },
    {
      "key": "SENTRY_NODESTORE_S3_REGION",
      "service": "web",
      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "LAUNCHPAD_RPC_SHARED_SECRET",
      "service": "web",
      "description": "Shared secret for the launchpad RPC (feature-complete profile) — generated at deploy time.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "web",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "SENTRY_PROFILES_S3_ENDPOINT",
      "service": "web",
      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ENDPOINT",
      "service": "web",
      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ENDPOINT",
      "service": "web",
      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ACCESS_KEY",
      "service": "web",
      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_SECRET_KEY",
      "service": "web",
      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ACCESS_KEY",
      "service": "web",
      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_SECRET_KEY",
      "service": "web",
      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_KAFKA_BOOTSTRAP_SERVERS",
      "service": "web",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ACCESS_KEY",
      "service": "web",
      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_SECRET_KEY",
      "service": "web",
      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ADDRESSING_STYLE",
      "service": "web",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ADDRESSING_STYLE",
      "service": "web",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ADDRESSING_STYLE",
      "service": "web",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "symbolicator",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SYMBOLICATOR_STATSD_ADDR",
      "service": "symbolicator",
      "description": "StatsD sink for symbolicator metrics — loopback no-op by default.",
      "secret": false,
      "strategy": "default",
      "default": "127.0.0.1:8125"
    },
    {
      "key": "REDIS_HOST",
      "service": "snuba-subscription-consumer-eap-items",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDIS_PORT",
      "service": "snuba-subscription-consumer-eap-items",
      "description": "Redis port.",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "snuba-subscription-consumer-eap-items",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "snuba-subscription-consumer-eap-items",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SNUBA_SETTINGS",
      "service": "snuba-subscription-consumer-eap-items",
      "description": "Snuba settings profile — self_hosted matches upstream.",
      "secret": false,
      "strategy": "default",
      "default": "self_hosted"
    },
    {
      "key": "CLICKHOUSE_HOST",
      "service": "snuba-subscription-consumer-eap-items",
      "description": "ClickHouse host (references the clickhouse service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "CLICKHOUSE_PORT",
      "service": "snuba-subscription-consumer-eap-items",
      "description": "ClickHouse native protocol port.",
      "secret": false,
      "strategy": "default",
      "default": "9000"
    },
    {
      "key": "DEFAULT_BROKERS",
      "service": "snuba-subscription-consumer-eap-items",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "UWSGI_MAX_REQUESTS",
      "service": "snuba-subscription-consumer-eap-items",
      "description": "Recycle uwsgi workers after this many requests (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "10000"
    },
    {
      "key": "UWSGI_DISABLE_LOGGING",
      "service": "snuba-subscription-consumer-eap-items",
      "description": "Silence per-request uwsgi logs (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "snuba-subscription-consumer-eap-items",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "CLUSTER_ID",
      "service": "kafka",
      "description": "Fixed KRaft cluster id from upstream self-hosted — do not change after first boot.",
      "secret": false,
      "strategy": "default",
      "default": "MkU3OEVBNTcwNTJENDM2Qk"
    },
    {
      "key": "KAFKA_NODE_ID",
      "service": "kafka",
      "description": "Fixed broker node id (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "1001"
    },
    {
      "key": "KAFKA_LOG_DIRS",
      "service": "kafka",
      "description": "Kafka data directory — a subdirectory of the volume, because the volume mount root contains lost+found (which kafka rejects).",
      "secret": false,
      "strategy": "default",
      "default": "/var/lib/kafka/data/kraft-logs"
    },
    {
      "key": "KAFKA_LISTENERS",
      "service": "kafka",
      "description": "Bind addresses: loopback broker+controller, plus EXTERNAL on [::]:9092 for the private network (IPv6).",
      "secret": false,
      "strategy": "default",
      "default": "PLAINTEXT://127.0.0.1:29092,EXTERNAL://[::]:9092,CONTROLLER://127.0.0.1:29093"
    },
    {
      "key": "RAILWAY_RUN_UID",
      "service": "kafka",
      "description": "Run as root (0) so the service can write to its root-owned Railway volume.",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "KAFKA_LOG4J_LOGGERS",
      "service": "kafka",
      "description": "Per-component log levels (upstream default: WARN).",
      "secret": false,
      "strategy": "default",
      "default": "kafka.cluster=WARN,kafka.controller=WARN,kafka.coordinator=WARN,kafka.log=WARN,kafka.server=WARN,state.change.logger=WARN"
    },
    {
      "key": "KAFKA_PROCESS_ROLES",
      "service": "kafka",
      "description": "KRaft mode: this single node acts as both broker and controller (upstream self-hosted default).",
      "secret": false,
      "strategy": "default",
      "default": "broker,controller"
    },
    {
      "key": "KAFKA_MAX_REQUEST_SIZE",
      "service": "kafka",
      "description": "Max request size (50 MB, matches KAFKA_MESSAGE_MAX_BYTES).",
      "secret": false,
      "strategy": "default",
      "default": "50000000"
    },
    {
      "key": "KAFKA_MESSAGE_MAX_BYTES",
      "service": "kafka",
      "description": "Max message size (50 MB, upstream default — large events/attachments).",
      "secret": false,
      "strategy": "default",
      "default": "50000000"
    },
    {
      "key": "KAFKA_LOG4J_ROOT_LOGLEVEL",
      "service": "kafka",
      "description": "Root log level (upstream default: WARN).",
      "secret": false,
      "strategy": "default",
      "default": "WARN"
    },
    {
      "key": "KAFKA_LOG_RETENTION_HOURS",
      "service": "kafka",
      "description": "Kafka topic retention. Lower to shrink the kafka volume; events already consumed are not needed again.",
      "secret": false,
      "strategy": "default",
      "default": "24"
    },
    {
      "key": "KAFKA_ADVERTISED_LISTENERS",
      "service": "kafka",
      "description": "Addresses advertised to clients — EXTERNAL uses this service's Railway private domain.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "KAFKA_TOOLS_LOG4J_LOGLEVEL",
      "service": "kafka",
      "description": "CLI tools log level (upstream default: WARN).",
      "secret": false,
      "strategy": "default",
      "default": "WARN"
    },
    {
      "key": "KAFKA_CONTROLLER_QUORUM_VOTERS",
      "service": "kafka",
      "description": "Single-node KRaft controller quorum (loopback).",
      "secret": false,
      "strategy": "default",
      "default": "1001@127.0.0.1:29093"
    },
    {
      "key": "KAFKA_CONTROLLER_LISTENER_NAMES",
      "service": "kafka",
      "description": "Listener name used for the KRaft controller.",
      "secret": false,
      "strategy": "default",
      "default": "CONTROLLER"
    },
    {
      "key": "CONFLUENT_SUPPORT_METRICS_ENABLE",
      "service": "kafka",
      "description": "Disables Confluent phone-home metrics.",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "KAFKA_INTER_BROKER_LISTENER_NAME",
      "service": "kafka",
      "description": "Listener used for inter-broker traffic (single node).",
      "secret": false,
      "strategy": "default",
      "default": "PLAINTEXT"
    },
    {
      "key": "KAFKA_OFFSETS_TOPIC_NUM_PARTITIONS",
      "service": "kafka",
      "description": "Partitions for the consumer-offsets topic (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "KAFKA_LISTENER_SECURITY_PROTOCOL_MAP",
      "service": "kafka",
      "description": "All listeners are PLAINTEXT — traffic stays on Railway's private network.",
      "secret": false,
      "strategy": "default",
      "default": "PLAINTEXT:PLAINTEXT,EXTERNAL:PLAINTEXT,CONTROLLER:PLAINTEXT"
    },
    {
      "key": "KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR",
      "service": "kafka",
      "description": "Replication factor 1 — single-broker deployment.",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "clickhouse",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "RAILWAY_RUN_UID",
      "service": "clickhouse",
      "description": "Run as root (0) so the service can write to its root-owned Railway volume.",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "MAX_MEMORY_USAGE_RATIO",
      "service": "clickhouse",
      "description": "Caps ClickHouse memory at this fraction of container memory (upstream default 0.3).",
      "secret": false,
      "strategy": "default",
      "default": "0.3"
    },
    {
      "key": "REDIS_HOST",
      "service": "snuba-outcomes-billing-consumer",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDIS_PORT",
      "service": "snuba-outcomes-billing-consumer",
      "description": "Redis port.",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "snuba-outcomes-billing-consumer",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "snuba-outcomes-billing-consumer",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SNUBA_SETTINGS",
      "service": "snuba-outcomes-billing-consumer",
      "description": "Snuba settings profile — self_hosted matches upstream.",
      "secret": false,
      "strategy": "default",
      "default": "self_hosted"
    },
    {
      "key": "CLICKHOUSE_HOST",
      "service": "snuba-outcomes-billing-consumer",
      "description": "ClickHouse host (references the clickhouse service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "CLICKHOUSE_PORT",
      "service": "snuba-outcomes-billing-consumer",
      "description": "ClickHouse native protocol port.",
      "secret": false,
      "strategy": "default",
      "default": "9000"
    },
    {
      "key": "DEFAULT_BROKERS",
      "service": "snuba-outcomes-billing-consumer",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "UWSGI_MAX_REQUESTS",
      "service": "snuba-outcomes-billing-consumer",
      "description": "Recycle uwsgi workers after this many requests (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "10000"
    },
    {
      "key": "UWSGI_DISABLE_LOGGING",
      "service": "snuba-outcomes-billing-consumer",
      "description": "Silence per-request uwsgi logs (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "snuba-outcomes-billing-consumer",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "REDIS_HOST",
      "service": "snuba-outcomes-consumer",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDIS_PORT",
      "service": "snuba-outcomes-consumer",
      "description": "Redis port.",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "snuba-outcomes-consumer",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "snuba-outcomes-consumer",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SNUBA_SETTINGS",
      "service": "snuba-outcomes-consumer",
      "description": "Snuba settings profile — self_hosted matches upstream.",
      "secret": false,
      "strategy": "default",
      "default": "self_hosted"
    },
    {
      "key": "CLICKHOUSE_HOST",
      "service": "snuba-outcomes-consumer",
      "description": "ClickHouse host (references the clickhouse service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "CLICKHOUSE_PORT",
      "service": "snuba-outcomes-consumer",
      "description": "ClickHouse native protocol port.",
      "secret": false,
      "strategy": "default",
      "default": "9000"
    },
    {
      "key": "DEFAULT_BROKERS",
      "service": "snuba-outcomes-consumer",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "UWSGI_MAX_REQUESTS",
      "service": "snuba-outcomes-consumer",
      "description": "Recycle uwsgi workers after this many requests (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "10000"
    },
    {
      "key": "UWSGI_DISABLE_LOGGING",
      "service": "snuba-outcomes-consumer",
      "description": "Silence per-request uwsgi logs (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "snuba-outcomes-consumer",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "SNUBA",
      "service": "attachments-consumer",
      "description": "Snuba API URL (references the snuba-api service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "VROOM",
      "service": "attachments-consumer",
      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
      "secret": false,
      "strategy": "default",
      "default": "http://vroom.railway.internal:8085"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "attachments-consumer",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "COMPOSE_PROFILES",
      "service": "attachments-consumer",
      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
      "secret": false,
      "strategy": "default",
      "default": "errors-only"
    },
    {
      "key": "SENTRY_REDIS_HOST",
      "service": "attachments-consumer",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_URL_PREFIX",
      "service": "attachments-consumer",
      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "SENTRY_POSTGRES_HOST",
      "service": "attachments-consumer",
      "description": "Postgres host (references the postgres service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_MEMCACHED_ADDR",
      "service": "attachments-consumer",
      "description": "Memcached address (references the memcached service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_REDIS_PASSWORD",
      "service": "attachments-consumer",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYMBOLICATOR_URL",
      "service": "attachments-consumer",
      "description": "Symbolicator URL (references the symbolicator service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_POSTGRES_PASSWORD",
      "service": "attachments-consumer",
      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYSTEM_SECRET_KEY",
      "service": "attachments-consumer",
      "description": "Sentry's signing secret (references ${{web.SENTRY_SYSTEM_SECRET_KEY}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_BUCKET",
      "service": "attachments-consumer",
      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_PREFIX",
      "service": "attachments-consumer",
      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "profiles"
    },
    {
      "key": "SENTRY_PROFILES_S3_REGION",
      "service": "attachments-consumer",
      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_BUCKET",
      "service": "attachments-consumer",
      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_PREFIX",
      "service": "attachments-consumer",
      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "filestore"
    },
    {
      "key": "SENTRY_FILESTORE_S3_REGION",
      "service": "attachments-consumer",
      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_BUCKET",
      "service": "attachments-consumer",
      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_PREFIX",
      "service": "attachments-consumer",
      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "nodestore"
    },
    {
      "key": "SENTRY_NODESTORE_S3_REGION",
      "service": "attachments-consumer",
      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "LAUNCHPAD_RPC_SHARED_SECRET",
      "service": "attachments-consumer",
      "description": "Launchpad RPC shared secret (references ${{web.LAUNCHPAD_RPC_SHARED_SECRET}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "attachments-consumer",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "SENTRY_PROFILES_S3_ENDPOINT",
      "service": "attachments-consumer",
      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ENDPOINT",
      "service": "attachments-consumer",
      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ENDPOINT",
      "service": "attachments-consumer",
      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ACCESS_KEY",
      "service": "attachments-consumer",
      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_SECRET_KEY",
      "service": "attachments-consumer",
      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ACCESS_KEY",
      "service": "attachments-consumer",
      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_SECRET_KEY",
      "service": "attachments-consumer",
      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_KAFKA_BOOTSTRAP_SERVERS",
      "service": "attachments-consumer",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ACCESS_KEY",
      "service": "attachments-consumer",
      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_SECRET_KEY",
      "service": "attachments-consumer",
      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ADDRESSING_STYLE",
      "service": "attachments-consumer",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ADDRESSING_STYLE",
      "service": "attachments-consumer",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ADDRESSING_STYLE",
      "service": "attachments-consumer",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SNUBA",
      "service": "post-process-forwarder-errors",
      "description": "Snuba API URL (references the snuba-api service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "VROOM",
      "service": "post-process-forwarder-errors",
      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
      "secret": false,
      "strategy": "default",
      "default": "http://vroom.railway.internal:8085"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "post-process-forwarder-errors",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "COMPOSE_PROFILES",
      "service": "post-process-forwarder-errors",
      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
      "secret": false,
      "strategy": "default",
      "default": "errors-only"
    },
    {
      "key": "SENTRY_REDIS_HOST",
      "service": "post-process-forwarder-errors",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_URL_PREFIX",
      "service": "post-process-forwarder-errors",
      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "SENTRY_POSTGRES_HOST",
      "service": "post-process-forwarder-errors",
      "description": "Postgres host (references the postgres service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_MEMCACHED_ADDR",
      "service": "post-process-forwarder-errors",
      "description": "Memcached address (references the memcached service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_REDIS_PASSWORD",
      "service": "post-process-forwarder-errors",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYMBOLICATOR_URL",
      "service": "post-process-forwarder-errors",
      "description": "Symbolicator URL (references the symbolicator service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_POSTGRES_PASSWORD",
      "service": "post-process-forwarder-errors",
      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYSTEM_SECRET_KEY",
      "service": "post-process-forwarder-errors",
      "description": "Sentry's signing secret (references ${{web.SENTRY_SYSTEM_SECRET_KEY}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_BUCKET",
      "service": "post-process-forwarder-errors",
      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_PREFIX",
      "service": "post-process-forwarder-errors",
      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "profiles"
    },
    {
      "key": "SENTRY_PROFILES_S3_REGION",
      "service": "post-process-forwarder-errors",
      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_BUCKET",
      "service": "post-process-forwarder-errors",
      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_PREFIX",
      "service": "post-process-forwarder-errors",
      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "filestore"
    },
    {
      "key": "SENTRY_FILESTORE_S3_REGION",
      "service": "post-process-forwarder-errors",
      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_BUCKET",
      "service": "post-process-forwarder-errors",
      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_PREFIX",
      "service": "post-process-forwarder-errors",
      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "nodestore"
    },
    {
      "key": "SENTRY_NODESTORE_S3_REGION",
      "service": "post-process-forwarder-errors",
      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "LAUNCHPAD_RPC_SHARED_SECRET",
      "service": "post-process-forwarder-errors",
      "description": "Launchpad RPC shared secret (references ${{web.LAUNCHPAD_RPC_SHARED_SECRET}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "post-process-forwarder-errors",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "SENTRY_PROFILES_S3_ENDPOINT",
      "service": "post-process-forwarder-errors",
      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ENDPOINT",
      "service": "post-process-forwarder-errors",
      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ENDPOINT",
      "service": "post-process-forwarder-errors",
      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ACCESS_KEY",
      "service": "post-process-forwarder-errors",
      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_SECRET_KEY",
      "service": "post-process-forwarder-errors",
      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ACCESS_KEY",
      "service": "post-process-forwarder-errors",
      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_SECRET_KEY",
      "service": "post-process-forwarder-errors",
      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_KAFKA_BOOTSTRAP_SERVERS",
      "service": "post-process-forwarder-errors",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ACCESS_KEY",
      "service": "post-process-forwarder-errors",
      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_SECRET_KEY",
      "service": "post-process-forwarder-errors",
      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ADDRESSING_STYLE",
      "service": "post-process-forwarder-errors",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ADDRESSING_STYLE",
      "service": "post-process-forwarder-errors",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ADDRESSING_STYLE",
      "service": "post-process-forwarder-errors",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "relay",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "RAILWAY_RUN_UID",
      "service": "relay",
      "description": "Run as root (0) so the service can write to its root-owned Railway volume.",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "RELAY_REDIS_HOST",
      "service": "relay",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "RELAY_STATSD_ADDR",
      "service": "relay",
      "description": "StatsD sink for relay metrics — loopback no-op by default.",
      "secret": false,
      "strategy": "default",
      "default": "127.0.0.1:8125"
    },
    {
      "key": "RELAY_UPSTREAM_HOST",
      "service": "relay",
      "description": "Sentry web upstream (references the web service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "RELAY_REDIS_PASSWORD",
      "service": "relay",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "RELAY_KAFKA_BOOTSTRAP_SERVERS",
      "service": "relay",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDIS_HOST",
      "service": "snuba-api",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDIS_PORT",
      "service": "snuba-api",
      "description": "Redis port.",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "snuba-api",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "snuba-api",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SNUBA_SETTINGS",
      "service": "snuba-api",
      "description": "Snuba settings profile — self_hosted matches upstream.",
      "secret": false,
      "strategy": "default",
      "default": "self_hosted"
    },
    {
      "key": "CLICKHOUSE_HOST",
      "service": "snuba-api",
      "description": "ClickHouse host (references the clickhouse service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "CLICKHOUSE_PORT",
      "service": "snuba-api",
      "description": "ClickHouse native protocol port.",
      "secret": false,
      "strategy": "default",
      "default": "9000"
    },
    {
      "key": "DEFAULT_BROKERS",
      "service": "snuba-api",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "UWSGI_MAX_REQUESTS",
      "service": "snuba-api",
      "description": "Recycle uwsgi workers after this many requests (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "10000"
    },
    {
      "key": "UWSGI_DISABLE_LOGGING",
      "service": "snuba-api",
      "description": "Silence per-request uwsgi logs (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "snuba-api",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "SNUBA",
      "service": "taskscheduler",
      "description": "Snuba API URL (references the snuba-api service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "VROOM",
      "service": "taskscheduler",
      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
      "secret": false,
      "strategy": "default",
      "default": "http://vroom.railway.internal:8085"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "taskscheduler",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "COMPOSE_PROFILES",
      "service": "taskscheduler",
      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
      "secret": false,
      "strategy": "default",
      "default": "errors-only"
    },
    {
      "key": "SENTRY_REDIS_HOST",
      "service": "taskscheduler",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_URL_PREFIX",
      "service": "taskscheduler",
      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "SENTRY_POSTGRES_HOST",
      "service": "taskscheduler",
      "description": "Postgres host (references the postgres service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_MEMCACHED_ADDR",
      "service": "taskscheduler",
      "description": "Memcached address (references the memcached service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_REDIS_PASSWORD",
      "service": "taskscheduler",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYMBOLICATOR_URL",
      "service": "taskscheduler",
      "description": "Symbolicator URL (references the symbolicator service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_POSTGRES_PASSWORD",
      "service": "taskscheduler",
      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYSTEM_SECRET_KEY",
      "service": "taskscheduler",
      "description": "Sentry's signing secret (references ${{web.SENTRY_SYSTEM_SECRET_KEY}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_BUCKET",
      "service": "taskscheduler",
      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_PREFIX",
      "service": "taskscheduler",
      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "profiles"
    },
    {
      "key": "SENTRY_PROFILES_S3_REGION",
      "service": "taskscheduler",
      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_BUCKET",
      "service": "taskscheduler",
      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_PREFIX",
      "service": "taskscheduler",
      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "filestore"
    },
    {
      "key": "SENTRY_FILESTORE_S3_REGION",
      "service": "taskscheduler",
      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_BUCKET",
      "service": "taskscheduler",
      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_PREFIX",
      "service": "taskscheduler",
      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "nodestore"
    },
    {
      "key": "SENTRY_NODESTORE_S3_REGION",
      "service": "taskscheduler",
      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "LAUNCHPAD_RPC_SHARED_SECRET",
      "service": "taskscheduler",
      "description": "Launchpad RPC shared secret (references ${{web.LAUNCHPAD_RPC_SHARED_SECRET}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "taskscheduler",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "SENTRY_PROFILES_S3_ENDPOINT",
      "service": "taskscheduler",
      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ENDPOINT",
      "service": "taskscheduler",
      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ENDPOINT",
      "service": "taskscheduler",
      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ACCESS_KEY",
      "service": "taskscheduler",
      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_SECRET_KEY",
      "service": "taskscheduler",
      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ACCESS_KEY",
      "service": "taskscheduler",
      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_SECRET_KEY",
      "service": "taskscheduler",
      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_KAFKA_BOOTSTRAP_SERVERS",
      "service": "taskscheduler",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ACCESS_KEY",
      "service": "taskscheduler",
      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_SECRET_KEY",
      "service": "taskscheduler",
      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ADDRESSING_STYLE",
      "service": "taskscheduler",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ADDRESSING_STYLE",
      "service": "taskscheduler",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ADDRESSING_STYLE",
      "service": "taskscheduler",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "REDIS_HOST",
      "service": "snuba-errors-consumer",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDIS_PORT",
      "service": "snuba-errors-consumer",
      "description": "Redis port.",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "snuba-errors-consumer",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "snuba-errors-consumer",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SNUBA_SETTINGS",
      "service": "snuba-errors-consumer",
      "description": "Snuba settings profile — self_hosted matches upstream.",
      "secret": false,
      "strategy": "default",
      "default": "self_hosted"
    },
    {
      "key": "CLICKHOUSE_HOST",
      "service": "snuba-errors-consumer",
      "description": "ClickHouse host (references the clickhouse service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "CLICKHOUSE_PORT",
      "service": "snuba-errors-consumer",
      "description": "ClickHouse native protocol port.",
      "secret": false,
      "strategy": "default",
      "default": "9000"
    },
    {
      "key": "DEFAULT_BROKERS",
      "service": "snuba-errors-consumer",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "UWSGI_MAX_REQUESTS",
      "service": "snuba-errors-consumer",
      "description": "Recycle uwsgi workers after this many requests (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "10000"
    },
    {
      "key": "UWSGI_DISABLE_LOGGING",
      "service": "snuba-errors-consumer",
      "description": "Silence per-request uwsgi logs (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "snuba-errors-consumer",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "PGDATA",
      "service": "postgres",
      "description": "Postgres data directory — a subdirectory of the volume, because the volume mount root contains lost+found.",
      "secret": false,
      "strategy": "default",
      "default": "/var/lib/postgresql/data/pgdata"
    },
    {
      "key": "PGHOST",
      "service": "postgres",
      "description": "Postgres host (this service's Railway private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "PGPORT",
      "service": "postgres",
      "description": "Postgres port.",
      "secret": false,
      "strategy": "default",
      "default": "5432"
    },
    {
      "key": "PGUSER",
      "service": "postgres",
      "description": "Postgres user (references POSTGRES_USER).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGDATABASE",
      "service": "postgres",
      "description": "Postgres database name (references POSTGRES_DB).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PGPASSWORD",
      "service": "postgres",
      "description": "Postgres password (references POSTGRES_PASSWORD).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "POSTGRES_DB",
      "service": "postgres",
      "description": "Database created on first boot; Sentry stores its relational data here.",
      "secret": false,
      "strategy": "default",
      "default": "postgres"
    },
    {
      "key": "DATABASE_URL",
      "service": "postgres",
      "description": "Standard Railway connection string for this database (private network).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "POSTGRES_USER",
      "service": "postgres",
      "description": "Superuser created on first boot.",
      "secret": false,
      "strategy": "default",
      "default": "postgres"
    },
    {
      "key": "POSTGRES_PASSWORD",
      "service": "postgres",
      "description": "Postgres password — generated at deploy time. Other services reference it as ${{postgres.POSTGRES_PASSWORD}}.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "PORT",
      "service": "nginx",
      "description": "Port Railway probes for healthchecks and routes the domain to — must match nginx's listen port (80).",
      "secret": false,
      "strategy": "default",
      "default": "80"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "nginx",
      "description": "Sentry version for the whole stack: 'nightly' tracks upstream master; a release tag like '26.7.2' pins that upstream release. Every other service references this value. Change + redeploy to upgrade.",
      "secret": false,
      "strategy": "default",
      "default": "nightly"
    },
    {
      "key": "SNUBA",
      "service": "taskworker",
      "description": "Snuba API URL (references the snuba-api service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "VROOM",
      "service": "taskworker",
      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
      "secret": false,
      "strategy": "default",
      "default": "http://vroom.railway.internal:8085"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "taskworker",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "COMPOSE_PROFILES",
      "service": "taskworker",
      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
      "secret": false,
      "strategy": "default",
      "default": "errors-only"
    },
    {
      "key": "SENTRY_REDIS_HOST",
      "service": "taskworker",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_URL_PREFIX",
      "service": "taskworker",
      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "SENTRY_POSTGRES_HOST",
      "service": "taskworker",
      "description": "Postgres host (references the postgres service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_MEMCACHED_ADDR",
      "service": "taskworker",
      "description": "Memcached address (references the memcached service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_REDIS_PASSWORD",
      "service": "taskworker",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYMBOLICATOR_URL",
      "service": "taskworker",
      "description": "Symbolicator URL (references the symbolicator service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_POSTGRES_PASSWORD",
      "service": "taskworker",
      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYSTEM_SECRET_KEY",
      "service": "taskworker",
      "description": "Sentry's signing secret (references ${{web.SENTRY_SYSTEM_SECRET_KEY}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_BUCKET",
      "service": "taskworker",
      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_PREFIX",
      "service": "taskworker",
      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "profiles"
    },
    {
      "key": "SENTRY_PROFILES_S3_REGION",
      "service": "taskworker",
      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_BUCKET",
      "service": "taskworker",
      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_PREFIX",
      "service": "taskworker",
      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "filestore"
    },
    {
      "key": "SENTRY_FILESTORE_S3_REGION",
      "service": "taskworker",
      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_BUCKET",
      "service": "taskworker",
      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_PREFIX",
      "service": "taskworker",
      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "nodestore"
    },
    {
      "key": "SENTRY_NODESTORE_S3_REGION",
      "service": "taskworker",
      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "LAUNCHPAD_RPC_SHARED_SECRET",
      "service": "taskworker",
      "description": "Launchpad RPC shared secret (references ${{web.LAUNCHPAD_RPC_SHARED_SECRET}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "taskworker",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "SENTRY_PROFILES_S3_ENDPOINT",
      "service": "taskworker",
      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ENDPOINT",
      "service": "taskworker",
      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ENDPOINT",
      "service": "taskworker",
      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ACCESS_KEY",
      "service": "taskworker",
      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_SECRET_KEY",
      "service": "taskworker",
      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ACCESS_KEY",
      "service": "taskworker",
      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_SECRET_KEY",
      "service": "taskworker",
      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_KAFKA_BOOTSTRAP_SERVERS",
      "service": "taskworker",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ACCESS_KEY",
      "service": "taskworker",
      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_SECRET_KEY",
      "service": "taskworker",
      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ADDRESSING_STYLE",
      "service": "taskworker",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ADDRESSING_STYLE",
      "service": "taskworker",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ADDRESSING_STYLE",
      "service": "taskworker",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SNUBA",
      "service": "events-consumer",
      "description": "Snuba API URL (references the snuba-api service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "VROOM",
      "service": "events-consumer",
      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
      "secret": false,
      "strategy": "default",
      "default": "http://vroom.railway.internal:8085"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "events-consumer",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "COMPOSE_PROFILES",
      "service": "events-consumer",
      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
      "secret": false,
      "strategy": "default",
      "default": "errors-only"
    },
    {
      "key": "SENTRY_REDIS_HOST",
      "service": "events-consumer",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_URL_PREFIX",
      "service": "events-consumer",
      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "SENTRY_POSTGRES_HOST",
      "service": "events-consumer",
      "description": "Postgres host (references the postgres service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_MEMCACHED_ADDR",
      "service": "events-consumer",
      "description": "Memcached address (references the memcached service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_REDIS_PASSWORD",
      "service": "events-consumer",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYMBOLICATOR_URL",
      "service": "events-consumer",
      "description": "Symbolicator URL (references the symbolicator service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_POSTGRES_PASSWORD",
      "service": "events-consumer",
      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_SYSTEM_SECRET_KEY",
      "service": "events-consumer",
      "description": "Sentry's signing secret (references ${{web.SENTRY_SYSTEM_SECRET_KEY}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_BUCKET",
      "service": "events-consumer",
      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_PREFIX",
      "service": "events-consumer",
      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "profiles"
    },
    {
      "key": "SENTRY_PROFILES_S3_REGION",
      "service": "events-consumer",
      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_BUCKET",
      "service": "events-consumer",
      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_PREFIX",
      "service": "events-consumer",
      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "filestore"
    },
    {
      "key": "SENTRY_FILESTORE_S3_REGION",
      "service": "events-consumer",
      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_BUCKET",
      "service": "events-consumer",
      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_PREFIX",
      "service": "events-consumer",
      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
      "secret": false,
      "strategy": "default",
      "default": "nodestore"
    },
    {
      "key": "SENTRY_NODESTORE_S3_REGION",
      "service": "events-consumer",
      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "LAUNCHPAD_RPC_SHARED_SECRET",
      "service": "events-consumer",
      "description": "Launchpad RPC shared secret (references ${{web.LAUNCHPAD_RPC_SHARED_SECRET}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "events-consumer",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "SENTRY_PROFILES_S3_ENDPOINT",
      "service": "events-consumer",
      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ENDPOINT",
      "service": "events-consumer",
      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ENDPOINT",
      "service": "events-consumer",
      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ACCESS_KEY",
      "service": "events-consumer",
      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_SECRET_KEY",
      "service": "events-consumer",
      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ACCESS_KEY",
      "service": "events-consumer",
      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_FILESTORE_S3_SECRET_KEY",
      "service": "events-consumer",
      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_KAFKA_BOOTSTRAP_SERVERS",
      "service": "events-consumer",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ACCESS_KEY",
      "service": "events-consumer",
      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_NODESTORE_S3_SECRET_KEY",
      "service": "events-consumer",
      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_PROFILES_S3_ADDRESSING_STYLE",
      "service": "events-consumer",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_FILESTORE_S3_ADDRESSING_STYLE",
      "service": "events-consumer",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_NODESTORE_S3_ADDRESSING_STYLE",
      "service": "events-consumer",
      "description": "S3 addressing style — Railway buckets use virtual-host style.",
      "secret": false,
      "strategy": "default",
      "default": "virtual"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "taskbroker",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "TASKBROKER_DB_PATH",
      "service": "taskbroker",
      "description": "SQLite path for in-flight task activations — persisted on this service's volume.",
      "secret": false,
      "strategy": "default",
      "default": "/opt/sqlite/taskbroker-activations.sqlite"
    },
    {
      "key": "TASKBROKER_STATSD_ADDR",
      "service": "taskbroker",
      "description": "StatsD sink for taskbroker metrics — loopback no-op by default.",
      "secret": false,
      "strategy": "default",
      "default": "127.0.0.1:8125"
    },
    {
      "key": "TASKBROKER_KAFKA_CLUSTERS__DEFAULT__ADDRESS",
      "service": "taskbroker",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDISHOST",
      "service": "redis",
      "description": "Redis host (this service's Railway private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDISPORT",
      "service": "redis",
      "description": "Redis port.",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDISUSER",
      "service": "redis",
      "description": "Redis ACL user (default).",
      "secret": false,
      "strategy": "default",
      "default": "default"
    },
    {
      "key": "REDIS_URL",
      "service": "redis",
      "description": "Standard Railway connection string for this Redis (private network).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDISPASSWORD",
      "service": "redis",
      "description": "Redis password (references REDIS_PASSWORD).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "redis",
      "description": "Redis password — generated at deploy time. Other services reference it as ${{redis.REDIS_PASSWORD}}.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "REDIS_HOST",
      "service": "snuba-replacer",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDIS_PORT",
      "service": "snuba-replacer",
      "description": "Redis port.",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "snuba-replacer",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "snuba-replacer",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SNUBA_SETTINGS",
      "service": "snuba-replacer",
      "description": "Snuba settings profile — self_hosted matches upstream.",
      "secret": false,
      "strategy": "default",
      "default": "self_hosted"
    },
    {
      "key": "CLICKHOUSE_HOST",
      "service": "snuba-replacer",
      "description": "ClickHouse host (references the clickhouse service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "CLICKHOUSE_PORT",
      "service": "snuba-replacer",
      "description": "ClickHouse native protocol port.",
      "secret": false,
      "strategy": "default",
      "default": "9000"
    },
    {
      "key": "DEFAULT_BROKERS",
      "service": "snuba-replacer",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "UWSGI_MAX_REQUESTS",
      "service": "snuba-replacer",
      "description": "Recycle uwsgi workers after this many requests (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "10000"
    },
    {
      "key": "UWSGI_DISABLE_LOGGING",
      "service": "snuba-replacer",
      "description": "Silence per-request uwsgi logs (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "snuba-replacer",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "REDIS_HOST",
      "service": "snuba-subscription-consumer-events",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDIS_PORT",
      "service": "snuba-subscription-consumer-events",
      "description": "Redis port.",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "snuba-subscription-consumer-events",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "snuba-subscription-consumer-events",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SNUBA_SETTINGS",
      "service": "snuba-subscription-consumer-events",
      "description": "Snuba settings profile — self_hosted matches upstream.",
      "secret": false,
      "strategy": "default",
      "default": "self_hosted"
    },
    {
      "key": "CLICKHOUSE_HOST",
      "service": "snuba-subscription-consumer-events",
      "description": "ClickHouse host (references the clickhouse service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "CLICKHOUSE_PORT",
      "service": "snuba-subscription-consumer-events",
      "description": "ClickHouse native protocol port.",
      "secret": false,
      "strategy": "default",
      "default": "9000"
    },
    {
      "key": "DEFAULT_BROKERS",
      "service": "snuba-subscription-consumer-events",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "UWSGI_MAX_REQUESTS",
      "service": "snuba-subscription-consumer-events",
      "description": "Recycle uwsgi workers after this many requests (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "10000"
    },
    {
      "key": "UWSGI_DISABLE_LOGGING",
      "service": "snuba-subscription-consumer-events",
      "description": "Silence per-request uwsgi logs (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "snuba-subscription-consumer-events",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    },
    {
      "key": "REDIS_HOST",
      "service": "snuba-group-attributes-consumer",
      "description": "Redis host (references the redis service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDIS_PORT",
      "service": "snuba-group-attributes-consumer",
      "description": "Redis port.",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "snuba-group-attributes-consumer",
      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SENTRY_VERSION",
      "service": "snuba-group-attributes-consumer",
      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "SNUBA_SETTINGS",
      "service": "snuba-group-attributes-consumer",
      "description": "Snuba settings profile — self_hosted matches upstream.",
      "secret": false,
      "strategy": "default",
      "default": "self_hosted"
    },
    {
      "key": "CLICKHOUSE_HOST",
      "service": "snuba-group-attributes-consumer",
      "description": "ClickHouse host (references the clickhouse service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "CLICKHOUSE_PORT",
      "service": "snuba-group-attributes-consumer",
      "description": "ClickHouse native protocol port.",
      "secret": false,
      "strategy": "default",
      "default": "9000"
    },
    {
      "key": "DEFAULT_BROKERS",
      "service": "snuba-group-attributes-consumer",
      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "UWSGI_MAX_REQUESTS",
      "service": "snuba-group-attributes-consumer",
      "description": "Recycle uwsgi workers after this many requests (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "10000"
    },
    {
      "key": "UWSGI_DISABLE_LOGGING",
      "service": "snuba-group-attributes-consumer",
      "description": "Silence per-request uwsgi logs (upstream default).",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "SENTRY_EVENT_RETENTION_DAYS",
      "service": "snuba-group-attributes-consumer",
      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
      "secret": false,
      "strategy": "default",
      "default": "90"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "sentry-errors-only-mode"
      }
    },
    "cli": "railway deploy --template sentry-errors-only-mode",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "db9a4b96-3544-44cc-b7f3-9e3707a283e9",
            "serializedConfig": {
              "buckets": {
                "ad5081aa-86e3-407e-97e0-695fc2c13d55": {
                  "name": "s3"
                }
              },
              "services": {
                "2b2bfc11-6f33-46ed-b4e8-7544c51ef8c1": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "web",
                  "deploy": {
                    "startCommand": "/railway/entrypoint.sh run web",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/sentry"
                  },
                  "variables": {
                    "SNUBA": {
                      "isOptional": false,
                      "description": "Snuba API URL (references the snuba-api service's private domain).",
                      "defaultValue": "http://${{snuba-api.RAILWAY_PRIVATE_DOMAIN}}:1218"
                    },
                    "VROOM": {
                      "isOptional": false,
                      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
                      "defaultValue": "http://vroom.railway.internal:8085"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "COMPOSE_PROFILES": {
                      "isOptional": false,
                      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
                      "defaultValue": "errors-only"
                    },
                    "SENTRY_REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_URL_PREFIX": {
                      "isOptional": false,
                      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
                      "defaultValue": "https://${{nginx.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "SENTRY_ADMIN_EMAIL": {
                      "isOptional": false,
                      "description": "Login email for the initial Sentry admin user. The default works as a username (email delivery is disabled unless SMTP is configured) — change it here before deploying, or later in Sentry itself. The generated password is in this service's SENTRY_ADMIN_PASSWORD variable.",
                      "defaultValue": "admin@example.com"
                    },
                    "SENTRY_POSTGRES_HOST": {
                      "isOptional": false,
                      "description": "Postgres host (references the postgres service's private domain).",
                      "defaultValue": "${{postgres.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_ADMIN_PASSWORD": {
                      "isOptional": false,
                      "description": "Password for the initial Sentry admin user — generated at deploy time.",
                      "defaultValue": "{{SENTRY_ADMIN_PASSWORD}}"
                    },
                    "SENTRY_MEMCACHED_ADDR": {
                      "isOptional": false,
                      "description": "Memcached address (references the memcached service's private domain).",
                      "defaultValue": "${{memcached.RAILWAY_PRIVATE_DOMAIN}}:11211"
                    },
                    "SENTRY_REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_SYMBOLICATOR_URL": {
                      "isOptional": false,
                      "description": "Symbolicator URL (references the symbolicator service's private domain).",
                      "defaultValue": "http://${{symbolicator.RAILWAY_PRIVATE_DOMAIN}}:3021"
                    },
                    "SENTRY_POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
                      "defaultValue": "${{postgres.POSTGRES_PASSWORD}}"
                    },
                    "SENTRY_SYSTEM_SECRET_KEY": {
                      "isOptional": false,
                      "description": "Sentry's signing secret — generated at deploy time; all sentry services reference this value. Rotating it invalidates sessions.",
                      "defaultValue": "{{SENTRY_SYSTEM_SECRET_KEY}}"
                    },
                    "SENTRY_BOOTSTRAP_ON_START": {
                      "isOptional": false,
                      "description": "Runs the idempotent bootstrap before serving: waits for backing services, verifies object storage, runs sentry upgrade (migrations + Kafka topics), ensures the admin user.",
                      "defaultValue": "1"
                    },
                    "SENTRY_PROFILES_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_PROFILES_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
                      "defaultValue": "profiles"
                    },
                    "SENTRY_PROFILES_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_FILESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_FILESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
                      "defaultValue": "filestore"
                    },
                    "SENTRY_FILESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_NODESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_NODESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
                      "defaultValue": "nodestore"
                    },
                    "SENTRY_NODESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "LAUNCHPAD_RPC_SHARED_SECRET": {
                      "isOptional": false,
                      "description": "Shared secret for the launchpad RPC (feature-complete profile) — generated at deploy time.",
                      "defaultValue": "{{LAUNCHPAD_RPC_SHARED_SECRET}}"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    },
                    "SENTRY_PROFILES_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_FILESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_NODESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_PROFILES_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_PROFILES_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_FILESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_FILESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_KAFKA_BOOTSTRAP_SERVERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "SENTRY_NODESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_NODESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_PROFILES_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_FILESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_NODESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    }
                  }
                },
                "352577e7-4f78-43e8-a8a8-586f8757599e": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "symbolicator",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/symbolicator"
                  },
                  "variables": {
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "SYMBOLICATOR_STATSD_ADDR": {
                      "isOptional": false,
                      "description": "StatsD sink for symbolicator metrics — loopback no-op by default.",
                      "defaultValue": "127.0.0.1:8125"
                    }
                  }
                },
                "379a71b2-7fc2-4d11-8adc-9069143a68c5": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "snuba-subscription-consumer-eap-items",
                  "deploy": {
                    "startCommand": "/railway-entrypoint.sh subscriptions-scheduler-executor --dataset events_analytics_platform --entity eap_items --auto-offset-reset=latest --no-strict-offset-reset --consumer-group=snuba-eap-items-subscriptions-consumers --followed-consumer-group=eap_items_group --schedule-ttl=60 --stale-threshold-seconds=900",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/snuba"
                  },
                  "variables": {
                    "REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDIS_PORT": {
                      "isOptional": false,
                      "description": "Redis port.",
                      "defaultValue": "6379"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "SNUBA_SETTINGS": {
                      "isOptional": false,
                      "description": "Snuba settings profile — self_hosted matches upstream.",
                      "defaultValue": "self_hosted"
                    },
                    "CLICKHOUSE_HOST": {
                      "isOptional": false,
                      "description": "ClickHouse host (references the clickhouse service's private domain).",
                      "defaultValue": "${{clickhouse.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "CLICKHOUSE_PORT": {
                      "isOptional": false,
                      "description": "ClickHouse native protocol port.",
                      "defaultValue": "9000"
                    },
                    "DEFAULT_BROKERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "UWSGI_MAX_REQUESTS": {
                      "isOptional": false,
                      "description": "Recycle uwsgi workers after this many requests (upstream default).",
                      "defaultValue": "10000"
                    },
                    "UWSGI_DISABLE_LOGGING": {
                      "isOptional": false,
                      "description": "Silence per-request uwsgi logs (upstream default).",
                      "defaultValue": "true"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    }
                  }
                },
                "3c506353-c6d3-47b2-b556-df260c3aa418": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/kafka.svg",
                  "name": "kafka",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "confluentinc/cp-kafka:7.6.6"
                  },
                  "variables": {
                    "CLUSTER_ID": {
                      "isOptional": false,
                      "description": "Fixed KRaft cluster id from upstream self-hosted — do not change after first boot.",
                      "defaultValue": "MkU3OEVBNTcwNTJENDM2Qk"
                    },
                    "KAFKA_NODE_ID": {
                      "isOptional": false,
                      "description": "Fixed broker node id (upstream default).",
                      "defaultValue": "1001"
                    },
                    "KAFKA_LOG_DIRS": {
                      "isOptional": false,
                      "description": "Kafka data directory — a subdirectory of the volume, because the volume mount root contains lost+found (which kafka rejects).",
                      "defaultValue": "/var/lib/kafka/data/kraft-logs"
                    },
                    "KAFKA_LISTENERS": {
                      "isOptional": false,
                      "description": "Bind addresses: loopback broker+controller, plus EXTERNAL on [::]:9092 for the private network (IPv6).",
                      "defaultValue": "PLAINTEXT://127.0.0.1:29092,EXTERNAL://[::]:9092,CONTROLLER://127.0.0.1:29093"
                    },
                    "RAILWAY_RUN_UID": {
                      "isOptional": false,
                      "description": "Run as root (0) so the service can write to its root-owned Railway volume.",
                      "defaultValue": "0"
                    },
                    "KAFKA_LOG4J_LOGGERS": {
                      "isOptional": false,
                      "description": "Per-component log levels (upstream default: WARN).",
                      "defaultValue": "kafka.cluster=WARN,kafka.controller=WARN,kafka.coordinator=WARN,kafka.log=WARN,kafka.server=WARN,state.change.logger=WARN"
                    },
                    "KAFKA_PROCESS_ROLES": {
                      "isOptional": false,
                      "description": "KRaft mode: this single node acts as both broker and controller (upstream self-hosted default).",
                      "defaultValue": "broker,controller"
                    },
                    "KAFKA_MAX_REQUEST_SIZE": {
                      "isOptional": false,
                      "description": "Max request size (50 MB, matches KAFKA_MESSAGE_MAX_BYTES).",
                      "defaultValue": "50000000"
                    },
                    "KAFKA_MESSAGE_MAX_BYTES": {
                      "isOptional": false,
                      "description": "Max message size (50 MB, upstream default — large events/attachments).",
                      "defaultValue": "50000000"
                    },
                    "KAFKA_LOG4J_ROOT_LOGLEVEL": {
                      "isOptional": false,
                      "description": "Root log level (upstream default: WARN).",
                      "defaultValue": "WARN"
                    },
                    "KAFKA_LOG_RETENTION_HOURS": {
                      "isOptional": false,
                      "description": "Kafka topic retention. Lower to shrink the kafka volume; events already consumed are not needed again.",
                      "defaultValue": "24"
                    },
                    "KAFKA_ADVERTISED_LISTENERS": {
                      "isOptional": false,
                      "description": "Addresses advertised to clients — EXTERNAL uses this service's Railway private domain.",
                      "defaultValue": "PLAINTEXT://127.0.0.1:29092,EXTERNAL://${{RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "KAFKA_TOOLS_LOG4J_LOGLEVEL": {
                      "isOptional": false,
                      "description": "CLI tools log level (upstream default: WARN).",
                      "defaultValue": "WARN"
                    },
                    "KAFKA_CONTROLLER_QUORUM_VOTERS": {
                      "isOptional": false,
                      "description": "Single-node KRaft controller quorum (loopback).",
                      "defaultValue": "1001@127.0.0.1:29093"
                    },
                    "KAFKA_CONTROLLER_LISTENER_NAMES": {
                      "isOptional": false,
                      "description": "Listener name used for the KRaft controller.",
                      "defaultValue": "CONTROLLER"
                    },
                    "CONFLUENT_SUPPORT_METRICS_ENABLE": {
                      "isOptional": false,
                      "description": "Disables Confluent phone-home metrics.",
                      "defaultValue": "false"
                    },
                    "KAFKA_INTER_BROKER_LISTENER_NAME": {
                      "isOptional": false,
                      "description": "Listener used for inter-broker traffic (single node).",
                      "defaultValue": "PLAINTEXT"
                    },
                    "KAFKA_OFFSETS_TOPIC_NUM_PARTITIONS": {
                      "isOptional": false,
                      "description": "Partitions for the consumer-offsets topic (upstream default).",
                      "defaultValue": "1"
                    },
                    "KAFKA_LISTENER_SECURITY_PROTOCOL_MAP": {
                      "isOptional": false,
                      "description": "All listeners are PLAINTEXT — traffic stays on Railway's private network.",
                      "defaultValue": "PLAINTEXT:PLAINTEXT,EXTERNAL:PLAINTEXT,CONTROLLER:PLAINTEXT"
                    },
                    "KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR": {
                      "isOptional": false,
                      "description": "Replication factor 1 — single-broker deployment.",
                      "defaultValue": "1"
                    }
                  },
                  "volumeMounts": {
                    "495145cb-0600-4f64-8f8c-b85384b1899b": {
                      "mountPath": "/var/lib/kafka/data"
                    }
                  }
                },
                "4cc5789e-0141-479a-825b-cfabfc817d93": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/clickhouse.svg",
                  "name": "clickhouse",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/clickhouse"
                  },
                  "variables": {
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "RAILWAY_RUN_UID": {
                      "isOptional": false,
                      "description": "Run as root (0) so the service can write to its root-owned Railway volume.",
                      "defaultValue": "0"
                    },
                    "MAX_MEMORY_USAGE_RATIO": {
                      "isOptional": false,
                      "description": "Caps ClickHouse memory at this fraction of container memory (upstream default 0.3).",
                      "defaultValue": "0.3"
                    }
                  },
                  "volumeMounts": {
                    "ee7ef920-72b3-4349-9f76-2e48b1557f8e": {
                      "mountPath": "/var/lib/clickhouse"
                    }
                  }
                },
                "4de1180c-513d-426d-8e1f-69193d717f6b": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "snuba-outcomes-billing-consumer",
                  "deploy": {
                    "startCommand": "/railway-entrypoint.sh rust-consumer --storage outcomes_raw --consumer-group snuba-consumers --auto-offset-reset=earliest --max-batch-time-ms 750 --no-strict-offset-reset --raw-events-topic outcomes-billing",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/snuba"
                  },
                  "variables": {
                    "REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDIS_PORT": {
                      "isOptional": false,
                      "description": "Redis port.",
                      "defaultValue": "6379"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "SNUBA_SETTINGS": {
                      "isOptional": false,
                      "description": "Snuba settings profile — self_hosted matches upstream.",
                      "defaultValue": "self_hosted"
                    },
                    "CLICKHOUSE_HOST": {
                      "isOptional": false,
                      "description": "ClickHouse host (references the clickhouse service's private domain).",
                      "defaultValue": "${{clickhouse.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "CLICKHOUSE_PORT": {
                      "isOptional": false,
                      "description": "ClickHouse native protocol port.",
                      "defaultValue": "9000"
                    },
                    "DEFAULT_BROKERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "UWSGI_MAX_REQUESTS": {
                      "isOptional": false,
                      "description": "Recycle uwsgi workers after this many requests (upstream default).",
                      "defaultValue": "10000"
                    },
                    "UWSGI_DISABLE_LOGGING": {
                      "isOptional": false,
                      "description": "Silence per-request uwsgi logs (upstream default).",
                      "defaultValue": "true"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    }
                  }
                },
                "686650a6-d680-4a46-8613-d905541b7eb1": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "snuba-outcomes-consumer",
                  "deploy": {
                    "startCommand": "/railway-entrypoint.sh rust-consumer --storage outcomes_raw --consumer-group snuba-consumers --auto-offset-reset=earliest --max-batch-time-ms 750 --no-strict-offset-reset",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/snuba"
                  },
                  "variables": {
                    "REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDIS_PORT": {
                      "isOptional": false,
                      "description": "Redis port.",
                      "defaultValue": "6379"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "SNUBA_SETTINGS": {
                      "isOptional": false,
                      "description": "Snuba settings profile — self_hosted matches upstream.",
                      "defaultValue": "self_hosted"
                    },
                    "CLICKHOUSE_HOST": {
                      "isOptional": false,
                      "description": "ClickHouse host (references the clickhouse service's private domain).",
                      "defaultValue": "${{clickhouse.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "CLICKHOUSE_PORT": {
                      "isOptional": false,
                      "description": "ClickHouse native protocol port.",
                      "defaultValue": "9000"
                    },
                    "DEFAULT_BROKERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "UWSGI_MAX_REQUESTS": {
                      "isOptional": false,
                      "description": "Recycle uwsgi workers after this many requests (upstream default).",
                      "defaultValue": "10000"
                    },
                    "UWSGI_DISABLE_LOGGING": {
                      "isOptional": false,
                      "description": "Silence per-request uwsgi logs (upstream default).",
                      "defaultValue": "true"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    }
                  }
                },
                "8313c6cb-73f7-4996-ad82-e13403479f80": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "attachments-consumer",
                  "deploy": {
                    "startCommand": "/railway/entrypoint.sh run consumer ingest-attachments --consumer-group ingest-consumer",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/sentry"
                  },
                  "variables": {
                    "SNUBA": {
                      "isOptional": false,
                      "description": "Snuba API URL (references the snuba-api service's private domain).",
                      "defaultValue": "http://${{snuba-api.RAILWAY_PRIVATE_DOMAIN}}:1218"
                    },
                    "VROOM": {
                      "isOptional": false,
                      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
                      "defaultValue": "http://vroom.railway.internal:8085"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "COMPOSE_PROFILES": {
                      "isOptional": false,
                      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
                      "defaultValue": "errors-only"
                    },
                    "SENTRY_REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_URL_PREFIX": {
                      "isOptional": false,
                      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
                      "defaultValue": "https://${{nginx.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "SENTRY_POSTGRES_HOST": {
                      "isOptional": false,
                      "description": "Postgres host (references the postgres service's private domain).",
                      "defaultValue": "${{postgres.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_MEMCACHED_ADDR": {
                      "isOptional": false,
                      "description": "Memcached address (references the memcached service's private domain).",
                      "defaultValue": "${{memcached.RAILWAY_PRIVATE_DOMAIN}}:11211"
                    },
                    "SENTRY_REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_SYMBOLICATOR_URL": {
                      "isOptional": false,
                      "description": "Symbolicator URL (references the symbolicator service's private domain).",
                      "defaultValue": "http://${{symbolicator.RAILWAY_PRIVATE_DOMAIN}}:3021"
                    },
                    "SENTRY_POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
                      "defaultValue": "${{postgres.POSTGRES_PASSWORD}}"
                    },
                    "SENTRY_SYSTEM_SECRET_KEY": {
                      "isOptional": false,
                      "description": "Sentry's signing secret (references ${{web.SENTRY_SYSTEM_SECRET_KEY}}).",
                      "defaultValue": "${{web.SENTRY_SYSTEM_SECRET_KEY}}"
                    },
                    "SENTRY_PROFILES_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_PROFILES_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
                      "defaultValue": "profiles"
                    },
                    "SENTRY_PROFILES_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_FILESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_FILESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
                      "defaultValue": "filestore"
                    },
                    "SENTRY_FILESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_NODESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_NODESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
                      "defaultValue": "nodestore"
                    },
                    "SENTRY_NODESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "LAUNCHPAD_RPC_SHARED_SECRET": {
                      "isOptional": false,
                      "description": "Launchpad RPC shared secret (references ${{web.LAUNCHPAD_RPC_SHARED_SECRET}}).",
                      "defaultValue": "${{web.LAUNCHPAD_RPC_SHARED_SECRET}}"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    },
                    "SENTRY_PROFILES_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_FILESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_NODESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_PROFILES_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_PROFILES_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_FILESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_FILESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_KAFKA_BOOTSTRAP_SERVERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "SENTRY_NODESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_NODESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_PROFILES_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_FILESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_NODESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    }
                  }
                },
                "a0154e26-5469-4786-8144-1506c9acc74b": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "post-process-forwarder-errors",
                  "deploy": {
                    "startCommand": "/railway/entrypoint.sh run consumer --no-strict-offset-reset post-process-forwarder-errors --consumer-group post-process-forwarder --synchronize-commit-log-topic=snuba-commit-log --synchronize-commit-group=snuba-consumers",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/sentry"
                  },
                  "variables": {
                    "SNUBA": {
                      "isOptional": false,
                      "description": "Snuba API URL (references the snuba-api service's private domain).",
                      "defaultValue": "http://${{snuba-api.RAILWAY_PRIVATE_DOMAIN}}:1218"
                    },
                    "VROOM": {
                      "isOptional": false,
                      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
                      "defaultValue": "http://vroom.railway.internal:8085"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "COMPOSE_PROFILES": {
                      "isOptional": false,
                      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
                      "defaultValue": "errors-only"
                    },
                    "SENTRY_REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_URL_PREFIX": {
                      "isOptional": false,
                      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
                      "defaultValue": "https://${{nginx.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "SENTRY_POSTGRES_HOST": {
                      "isOptional": false,
                      "description": "Postgres host (references the postgres service's private domain).",
                      "defaultValue": "${{postgres.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_MEMCACHED_ADDR": {
                      "isOptional": false,
                      "description": "Memcached address (references the memcached service's private domain).",
                      "defaultValue": "${{memcached.RAILWAY_PRIVATE_DOMAIN}}:11211"
                    },
                    "SENTRY_REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_SYMBOLICATOR_URL": {
                      "isOptional": false,
                      "description": "Symbolicator URL (references the symbolicator service's private domain).",
                      "defaultValue": "http://${{symbolicator.RAILWAY_PRIVATE_DOMAIN}}:3021"
                    },
                    "SENTRY_POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
                      "defaultValue": "${{postgres.POSTGRES_PASSWORD}}"
                    },
                    "SENTRY_SYSTEM_SECRET_KEY": {
                      "isOptional": false,
                      "description": "Sentry's signing secret (references ${{web.SENTRY_SYSTEM_SECRET_KEY}}).",
                      "defaultValue": "${{web.SENTRY_SYSTEM_SECRET_KEY}}"
                    },
                    "SENTRY_PROFILES_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_PROFILES_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
                      "defaultValue": "profiles"
                    },
                    "SENTRY_PROFILES_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_FILESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_FILESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
                      "defaultValue": "filestore"
                    },
                    "SENTRY_FILESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_NODESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_NODESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
                      "defaultValue": "nodestore"
                    },
                    "SENTRY_NODESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "LAUNCHPAD_RPC_SHARED_SECRET": {
                      "isOptional": false,
                      "description": "Launchpad RPC shared secret (references ${{web.LAUNCHPAD_RPC_SHARED_SECRET}}).",
                      "defaultValue": "${{web.LAUNCHPAD_RPC_SHARED_SECRET}}"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    },
                    "SENTRY_PROFILES_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_FILESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_NODESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_PROFILES_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_PROFILES_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_FILESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_FILESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_KAFKA_BOOTSTRAP_SERVERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "SENTRY_NODESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_NODESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_PROFILES_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_FILESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_NODESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    }
                  }
                },
                "b15d8af8-5717-4c39-981e-3dba2ae7f70a": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "relay",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/relay"
                  },
                  "variables": {
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "RAILWAY_RUN_UID": {
                      "isOptional": false,
                      "description": "Run as root (0) so the service can write to its root-owned Railway volume.",
                      "defaultValue": "0"
                    },
                    "RELAY_REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "RELAY_STATSD_ADDR": {
                      "isOptional": false,
                      "description": "StatsD sink for relay metrics — loopback no-op by default.",
                      "defaultValue": "127.0.0.1:8125"
                    },
                    "RELAY_UPSTREAM_HOST": {
                      "isOptional": false,
                      "description": "Sentry web upstream (references the web service's private domain).",
                      "defaultValue": "${{web.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "RELAY_REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "RELAY_KAFKA_BOOTSTRAP_SERVERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    }
                  },
                  "volumeMounts": {
                    "e8a9d24b-09ac-450d-a23d-28e4720e2561": {
                      "mountPath": "/work/.relay"
                    }
                  }
                },
                "b1d1857e-edbd-489f-a73c-f25b162ae36c": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "snuba-api",
                  "deploy": {
                    "startCommand": "/railway-entrypoint.sh bootstrap-then-api",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/snuba"
                  },
                  "variables": {
                    "REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDIS_PORT": {
                      "isOptional": false,
                      "description": "Redis port.",
                      "defaultValue": "6379"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "SNUBA_SETTINGS": {
                      "isOptional": false,
                      "description": "Snuba settings profile — self_hosted matches upstream.",
                      "defaultValue": "self_hosted"
                    },
                    "CLICKHOUSE_HOST": {
                      "isOptional": false,
                      "description": "ClickHouse host (references the clickhouse service's private domain).",
                      "defaultValue": "${{clickhouse.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "CLICKHOUSE_PORT": {
                      "isOptional": false,
                      "description": "ClickHouse native protocol port.",
                      "defaultValue": "9000"
                    },
                    "DEFAULT_BROKERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "UWSGI_MAX_REQUESTS": {
                      "isOptional": false,
                      "description": "Recycle uwsgi workers after this many requests (upstream default).",
                      "defaultValue": "10000"
                    },
                    "UWSGI_DISABLE_LOGGING": {
                      "isOptional": false,
                      "description": "Silence per-request uwsgi logs (upstream default).",
                      "defaultValue": "true"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    }
                  }
                },
                "b5af1717-d0db-4254-8a63-be206927379f": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "taskscheduler",
                  "deploy": {
                    "startCommand": "/railway/entrypoint.sh run taskworker-scheduler",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/sentry"
                  },
                  "variables": {
                    "SNUBA": {
                      "isOptional": false,
                      "description": "Snuba API URL (references the snuba-api service's private domain).",
                      "defaultValue": "http://${{snuba-api.RAILWAY_PRIVATE_DOMAIN}}:1218"
                    },
                    "VROOM": {
                      "isOptional": false,
                      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
                      "defaultValue": "http://vroom.railway.internal:8085"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "COMPOSE_PROFILES": {
                      "isOptional": false,
                      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
                      "defaultValue": "errors-only"
                    },
                    "SENTRY_REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_URL_PREFIX": {
                      "isOptional": false,
                      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
                      "defaultValue": "https://${{nginx.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "SENTRY_POSTGRES_HOST": {
                      "isOptional": false,
                      "description": "Postgres host (references the postgres service's private domain).",
                      "defaultValue": "${{postgres.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_MEMCACHED_ADDR": {
                      "isOptional": false,
                      "description": "Memcached address (references the memcached service's private domain).",
                      "defaultValue": "${{memcached.RAILWAY_PRIVATE_DOMAIN}}:11211"
                    },
                    "SENTRY_REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_SYMBOLICATOR_URL": {
                      "isOptional": false,
                      "description": "Symbolicator URL (references the symbolicator service's private domain).",
                      "defaultValue": "http://${{symbolicator.RAILWAY_PRIVATE_DOMAIN}}:3021"
                    },
                    "SENTRY_POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
                      "defaultValue": "${{postgres.POSTGRES_PASSWORD}}"
                    },
                    "SENTRY_SYSTEM_SECRET_KEY": {
                      "isOptional": false,
                      "description": "Sentry's signing secret (references ${{web.SENTRY_SYSTEM_SECRET_KEY}}).",
                      "defaultValue": "${{web.SENTRY_SYSTEM_SECRET_KEY}}"
                    },
                    "SENTRY_PROFILES_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_PROFILES_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
                      "defaultValue": "profiles"
                    },
                    "SENTRY_PROFILES_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_FILESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_FILESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
                      "defaultValue": "filestore"
                    },
                    "SENTRY_FILESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_NODESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_NODESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
                      "defaultValue": "nodestore"
                    },
                    "SENTRY_NODESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "LAUNCHPAD_RPC_SHARED_SECRET": {
                      "isOptional": false,
                      "description": "Launchpad RPC shared secret (references ${{web.LAUNCHPAD_RPC_SHARED_SECRET}}).",
                      "defaultValue": "${{web.LAUNCHPAD_RPC_SHARED_SECRET}}"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    },
                    "SENTRY_PROFILES_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_FILESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_NODESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_PROFILES_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_PROFILES_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_FILESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_FILESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_KAFKA_BOOTSTRAP_SERVERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "SENTRY_NODESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_NODESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_PROFILES_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_FILESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_NODESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    }
                  }
                },
                "baa719a1-a8ac-41e8-99b0-5ced247f8baf": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "snuba-errors-consumer",
                  "deploy": {
                    "startCommand": "/railway-entrypoint.sh rust-consumer --storage errors --consumer-group snuba-consumers --auto-offset-reset=latest --max-batch-time-ms 750 --no-strict-offset-reset",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/snuba"
                  },
                  "variables": {
                    "REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDIS_PORT": {
                      "isOptional": false,
                      "description": "Redis port.",
                      "defaultValue": "6379"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "SNUBA_SETTINGS": {
                      "isOptional": false,
                      "description": "Snuba settings profile — self_hosted matches upstream.",
                      "defaultValue": "self_hosted"
                    },
                    "CLICKHOUSE_HOST": {
                      "isOptional": false,
                      "description": "ClickHouse host (references the clickhouse service's private domain).",
                      "defaultValue": "${{clickhouse.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "CLICKHOUSE_PORT": {
                      "isOptional": false,
                      "description": "ClickHouse native protocol port.",
                      "defaultValue": "9000"
                    },
                    "DEFAULT_BROKERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "UWSGI_MAX_REQUESTS": {
                      "isOptional": false,
                      "description": "Recycle uwsgi workers after this many requests (upstream default).",
                      "defaultValue": "10000"
                    },
                    "UWSGI_DISABLE_LOGGING": {
                      "isOptional": false,
                      "description": "Silence per-request uwsgi logs (upstream default).",
                      "defaultValue": "true"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    }
                  }
                },
                "bc94eaa6-ca40-4082-86e4-e07e89eb023c": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/postgresql.svg",
                  "name": "postgres",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "postgres:14.23-bookworm"
                  },
                  "variables": {
                    "PGDATA": {
                      "isOptional": false,
                      "description": "Postgres data directory — a subdirectory of the volume, because the volume mount root contains lost+found.",
                      "defaultValue": "/var/lib/postgresql/data/pgdata"
                    },
                    "PGHOST": {
                      "isOptional": false,
                      "description": "Postgres host (this service's Railway private domain).",
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "PGPORT": {
                      "isOptional": false,
                      "description": "Postgres port.",
                      "defaultValue": "5432"
                    },
                    "PGUSER": {
                      "isOptional": false,
                      "description": "Postgres user (references POSTGRES_USER).",
                      "defaultValue": "${{POSTGRES_USER}}"
                    },
                    "PGDATABASE": {
                      "isOptional": false,
                      "description": "Postgres database name (references POSTGRES_DB).",
                      "defaultValue": "${{POSTGRES_DB}}"
                    },
                    "PGPASSWORD": {
                      "isOptional": false,
                      "description": "Postgres password (references POSTGRES_PASSWORD).",
                      "defaultValue": "${{POSTGRES_PASSWORD}}"
                    },
                    "POSTGRES_DB": {
                      "isOptional": false,
                      "description": "Database created on first boot; Sentry stores its relational data here.",
                      "defaultValue": "postgres"
                    },
                    "DATABASE_URL": {
                      "isOptional": false,
                      "description": "Standard Railway connection string for this database (private network).",
                      "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{POSTGRES_DB}}"
                    },
                    "POSTGRES_USER": {
                      "isOptional": false,
                      "description": "Superuser created on first boot.",
                      "defaultValue": "postgres"
                    },
                    "POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Postgres password — generated at deploy time. Other services reference it as ${{postgres.POSTGRES_PASSWORD}}.",
                      "defaultValue": "{{POSTGRES_PASSWORD}}"
                    }
                  },
                  "volumeMounts": {
                    "80e46dda-d967-4722-af37-3e08d9859f9a": {
                      "mountPath": "/var/lib/postgresql/data"
                    }
                  }
                },
                "d78a4fb4-1fd7-49a7-829b-270758733a8a": {
                  "icon": "https://cdn.jsdelivr.net/gh/selfhst/icons/svg/memcached.svg",
                  "name": "memcached",
                  "deploy": {
                    "startCommand": "memcached -I 1M",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "memcached:1.6.45-alpine"
                  },
                  "variables": {}
                },
                "d8d127c6-44f5-4d5e-8003-29e2024e313b": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/nginx.svg",
                  "name": "nginx",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/healthz",
                    "restartPolicyType": "ALWAYS",
                    "healthcheckTimeout": 300,
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/nginx"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "Port Railway probes for healthchecks and routes the domain to — must match nginx's listen port (80).",
                      "defaultValue": "80"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version for the whole stack: 'nightly' tracks upstream master; a release tag like '26.7.2' pins that upstream release. Every other service references this value. Change + redeploy to upgrade.",
                      "defaultValue": "nightly"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:80": {
                        "port": 80
                      }
                    }
                  }
                },
                "e6080d3c-c8c7-4f38-9e29-98d41dfcca56": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "taskworker",
                  "deploy": {
                    "startCommand": "/railway/entrypoint.sh run taskworker --concurrency=4 --rpc-host=taskbroker.railway.internal:50051 --max-child-task-count=10000",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/sentry"
                  },
                  "variables": {
                    "SNUBA": {
                      "isOptional": false,
                      "description": "Snuba API URL (references the snuba-api service's private domain).",
                      "defaultValue": "http://${{snuba-api.RAILWAY_PRIVATE_DOMAIN}}:1218"
                    },
                    "VROOM": {
                      "isOptional": false,
                      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
                      "defaultValue": "http://vroom.railway.internal:8085"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "COMPOSE_PROFILES": {
                      "isOptional": false,
                      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
                      "defaultValue": "errors-only"
                    },
                    "SENTRY_REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_URL_PREFIX": {
                      "isOptional": false,
                      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
                      "defaultValue": "https://${{nginx.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "SENTRY_POSTGRES_HOST": {
                      "isOptional": false,
                      "description": "Postgres host (references the postgres service's private domain).",
                      "defaultValue": "${{postgres.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_MEMCACHED_ADDR": {
                      "isOptional": false,
                      "description": "Memcached address (references the memcached service's private domain).",
                      "defaultValue": "${{memcached.RAILWAY_PRIVATE_DOMAIN}}:11211"
                    },
                    "SENTRY_REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_SYMBOLICATOR_URL": {
                      "isOptional": false,
                      "description": "Symbolicator URL (references the symbolicator service's private domain).",
                      "defaultValue": "http://${{symbolicator.RAILWAY_PRIVATE_DOMAIN}}:3021"
                    },
                    "SENTRY_POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
                      "defaultValue": "${{postgres.POSTGRES_PASSWORD}}"
                    },
                    "SENTRY_SYSTEM_SECRET_KEY": {
                      "isOptional": false,
                      "description": "Sentry's signing secret (references ${{web.SENTRY_SYSTEM_SECRET_KEY}}).",
                      "defaultValue": "${{web.SENTRY_SYSTEM_SECRET_KEY}}"
                    },
                    "SENTRY_PROFILES_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_PROFILES_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
                      "defaultValue": "profiles"
                    },
                    "SENTRY_PROFILES_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_FILESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_FILESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
                      "defaultValue": "filestore"
                    },
                    "SENTRY_FILESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_NODESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_NODESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
                      "defaultValue": "nodestore"
                    },
                    "SENTRY_NODESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "LAUNCHPAD_RPC_SHARED_SECRET": {
                      "isOptional": false,
                      "description": "Launchpad RPC shared secret (references ${{web.LAUNCHPAD_RPC_SHARED_SECRET}}).",
                      "defaultValue": "${{web.LAUNCHPAD_RPC_SHARED_SECRET}}"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    },
                    "SENTRY_PROFILES_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_FILESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_NODESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_PROFILES_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_PROFILES_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_FILESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_FILESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_KAFKA_BOOTSTRAP_SERVERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "SENTRY_NODESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_NODESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_PROFILES_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_FILESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_NODESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    }
                  }
                },
                "f1689e1b-d010-4ebc-b0c9-155b7ed39054": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "events-consumer",
                  "deploy": {
                    "startCommand": "/railway/entrypoint.sh run consumer ingest-events --consumer-group ingest-consumer",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/sentry"
                  },
                  "variables": {
                    "SNUBA": {
                      "isOptional": false,
                      "description": "Snuba API URL (references the snuba-api service's private domain).",
                      "defaultValue": "http://${{snuba-api.RAILWAY_PRIVATE_DOMAIN}}:1218"
                    },
                    "VROOM": {
                      "isOptional": false,
                      "description": "Vroom (profiling) URL — not deployed in the errors-only profile; harmless default.",
                      "defaultValue": "http://vroom.railway.internal:8085"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "COMPOSE_PROFILES": {
                      "isOptional": false,
                      "description": "Upstream feature profile — errors-only mirrors getsentry/self-hosted's errors-only deployment.",
                      "defaultValue": "errors-only"
                    },
                    "SENTRY_REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_URL_PREFIX": {
                      "isOptional": false,
                      "description": "Public URL of this Sentry install (references the nginx service's public domain). Used for links, DSNs and CSRF checks.",
                      "defaultValue": "https://${{nginx.RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "SENTRY_POSTGRES_HOST": {
                      "isOptional": false,
                      "description": "Postgres host (references the postgres service's private domain).",
                      "defaultValue": "${{postgres.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "SENTRY_MEMCACHED_ADDR": {
                      "isOptional": false,
                      "description": "Memcached address (references the memcached service's private domain).",
                      "defaultValue": "${{memcached.RAILWAY_PRIVATE_DOMAIN}}:11211"
                    },
                    "SENTRY_REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_SYMBOLICATOR_URL": {
                      "isOptional": false,
                      "description": "Symbolicator URL (references the symbolicator service's private domain).",
                      "defaultValue": "http://${{symbolicator.RAILWAY_PRIVATE_DOMAIN}}:3021"
                    },
                    "SENTRY_POSTGRES_PASSWORD": {
                      "isOptional": false,
                      "description": "Postgres password (references ${{postgres.POSTGRES_PASSWORD}}).",
                      "defaultValue": "${{postgres.POSTGRES_PASSWORD}}"
                    },
                    "SENTRY_SYSTEM_SECRET_KEY": {
                      "isOptional": false,
                      "description": "Sentry's signing secret (references ${{web.SENTRY_SYSTEM_SECRET_KEY}}).",
                      "defaultValue": "${{web.SENTRY_SYSTEM_SECRET_KEY}}"
                    },
                    "SENTRY_PROFILES_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_PROFILES_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating profiling data (profiles store) within the shared bucket.",
                      "defaultValue": "profiles"
                    },
                    "SENTRY_PROFILES_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_FILESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_FILESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating uploads and file assets (filestore) within the shared bucket.",
                      "defaultValue": "filestore"
                    },
                    "SENTRY_FILESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "SENTRY_NODESTORE_S3_BUCKET": {
                      "isOptional": false,
                      "description": "S3 bucket name for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.BUCKET}}"
                    },
                    "SENTRY_NODESTORE_S3_PREFIX": {
                      "isOptional": false,
                      "description": "Key prefix isolating event payloads (nodestore) within the shared bucket.",
                      "defaultValue": "nodestore"
                    },
                    "SENTRY_NODESTORE_S3_REGION": {
                      "isOptional": false,
                      "description": "S3 region for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.REGION}}"
                    },
                    "LAUNCHPAD_RPC_SHARED_SECRET": {
                      "isOptional": false,
                      "description": "Launchpad RPC shared secret (references ${{web.LAUNCHPAD_RPC_SHARED_SECRET}}).",
                      "defaultValue": "${{web.LAUNCHPAD_RPC_SHARED_SECRET}}"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    },
                    "SENTRY_PROFILES_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for profiling data (profiles store) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_FILESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for uploads and file assets (filestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_NODESTORE_S3_ENDPOINT": {
                      "isOptional": false,
                      "description": "S3 endpoint for event payloads (nodestore) — references the project bucket.",
                      "defaultValue": "${{s3.ENDPOINT}}"
                    },
                    "SENTRY_PROFILES_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_PROFILES_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for profiling data (profiles store) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_FILESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_FILESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for uploads and file assets (filestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_KAFKA_BOOTSTRAP_SERVERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "SENTRY_NODESTORE_S3_ACCESS_KEY": {
                      "isOptional": false,
                      "description": "S3 access key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.ACCESS_KEY_ID}}"
                    },
                    "SENTRY_NODESTORE_S3_SECRET_KEY": {
                      "isOptional": false,
                      "description": "S3 secret key for event payloads (nodestore) — references the project bucket's credentials.",
                      "defaultValue": "${{s3.SECRET_ACCESS_KEY}}"
                    },
                    "SENTRY_PROFILES_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_FILESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    },
                    "SENTRY_NODESTORE_S3_ADDRESSING_STYLE": {
                      "isOptional": false,
                      "description": "S3 addressing style — Railway buckets use virtual-host style.",
                      "defaultValue": "virtual"
                    }
                  }
                },
                "f169f0d5-954d-4dfc-8ed9-63316e4488aa": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "taskbroker",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/taskbroker"
                  },
                  "variables": {
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "TASKBROKER_DB_PATH": {
                      "isOptional": false,
                      "description": "SQLite path for in-flight task activations — persisted on this service's volume.",
                      "defaultValue": "/opt/sqlite/taskbroker-activations.sqlite"
                    },
                    "TASKBROKER_STATSD_ADDR": {
                      "isOptional": false,
                      "description": "StatsD sink for taskbroker metrics — loopback no-op by default.",
                      "defaultValue": "127.0.0.1:8125"
                    },
                    "TASKBROKER_KAFKA_CLUSTERS__DEFAULT__ADDRESS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    }
                  },
                  "volumeMounts": {
                    "d4a8673f-a163-40d7-8718-183a28eb08f5": {
                      "mountPath": "/opt/sqlite"
                    }
                  }
                },
                "f31afb7e-f785-4374-b977-2e696fd821e7": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/redis.svg",
                  "name": "redis",
                  "deploy": {
                    "startCommand": "/bin/sh -c \"rm -rf /data/lost+found/ && exec docker-entrypoint.sh redis-server --requirepass $REDIS_PASSWORD --maxmemory 0 --maxmemory-policy volatile-lru --save 60 1 --dir /data\"",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "redis:6.2.20-alpine"
                  },
                  "variables": {
                    "REDISHOST": {
                      "isOptional": false,
                      "description": "Redis host (this service's Railway private domain).",
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDISPORT": {
                      "isOptional": false,
                      "description": "Redis port.",
                      "defaultValue": "6379"
                    },
                    "REDISUSER": {
                      "isOptional": false,
                      "description": "Redis ACL user (default).",
                      "defaultValue": "default"
                    },
                    "REDIS_URL": {
                      "isOptional": false,
                      "description": "Standard Railway connection string for this Redis (private network).",
                      "defaultValue": "redis://default:${{REDIS_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:6379"
                    },
                    "REDISPASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references REDIS_PASSWORD).",
                      "defaultValue": "${{REDIS_PASSWORD}}"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password — generated at deploy time. Other services reference it as ${{redis.REDIS_PASSWORD}}.",
                      "defaultValue": "{{REDIS_PASSWORD}}"
                    }
                  },
                  "volumeMounts": {
                    "8d08ad8f-5e7c-40a3-95f6-5d43794b5b65": {
                      "mountPath": "/data"
                    }
                  },
                  "haTemplateCode": "redis-ha",
                  "haConversionConfig": {
                    "edge": {
                      "label": "Reverse Proxies",
                      "options": [
                        1,
                        2
                      ],
                      "nodeLabel": "HAProxy",
                      "description": "HAProxy instances routing writes to the primary",
                      "defaultValue": 2
                    },
                    "replica": {
                      "label": "Redis Replicas",
                      "options": [
                        2,
                        3,
                        4,
                        5
                      ],
                      "nodeLabel": "Redis",
                      "description": "Nodes running Redis + colocated Sentinel",
                      "defaultValue": 2
                    },
                    "internal": null,
                    "description": "This will convert your Redis instance to an HA cluster with Sentinel failover and HAProxy routing to the primary."
                  }
                },
                "f63c0a67-8792-4015-a0be-4d49a1581a9d": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "snuba-replacer",
                  "deploy": {
                    "startCommand": "/railway-entrypoint.sh replacer --storage errors --auto-offset-reset=latest --no-strict-offset-reset",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/snuba"
                  },
                  "variables": {
                    "REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDIS_PORT": {
                      "isOptional": false,
                      "description": "Redis port.",
                      "defaultValue": "6379"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "SNUBA_SETTINGS": {
                      "isOptional": false,
                      "description": "Snuba settings profile — self_hosted matches upstream.",
                      "defaultValue": "self_hosted"
                    },
                    "CLICKHOUSE_HOST": {
                      "isOptional": false,
                      "description": "ClickHouse host (references the clickhouse service's private domain).",
                      "defaultValue": "${{clickhouse.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "CLICKHOUSE_PORT": {
                      "isOptional": false,
                      "description": "ClickHouse native protocol port.",
                      "defaultValue": "9000"
                    },
                    "DEFAULT_BROKERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "UWSGI_MAX_REQUESTS": {
                      "isOptional": false,
                      "description": "Recycle uwsgi workers after this many requests (upstream default).",
                      "defaultValue": "10000"
                    },
                    "UWSGI_DISABLE_LOGGING": {
                      "isOptional": false,
                      "description": "Silence per-request uwsgi logs (upstream default).",
                      "defaultValue": "true"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    }
                  }
                },
                "f90be8fc-ad16-4850-806a-c5dfaf28c5d8": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "snuba-subscription-consumer-events",
                  "deploy": {
                    "startCommand": "/railway-entrypoint.sh subscriptions-scheduler-executor --dataset events --entity events --auto-offset-reset=latest --no-strict-offset-reset --consumer-group=snuba-events-subscriptions-consumers --followed-consumer-group=snuba-consumers --schedule-ttl=60 --stale-threshold-seconds=900",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/snuba"
                  },
                  "variables": {
                    "REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDIS_PORT": {
                      "isOptional": false,
                      "description": "Redis port.",
                      "defaultValue": "6379"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "SNUBA_SETTINGS": {
                      "isOptional": false,
                      "description": "Snuba settings profile — self_hosted matches upstream.",
                      "defaultValue": "self_hosted"
                    },
                    "CLICKHOUSE_HOST": {
                      "isOptional": false,
                      "description": "ClickHouse host (references the clickhouse service's private domain).",
                      "defaultValue": "${{clickhouse.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "CLICKHOUSE_PORT": {
                      "isOptional": false,
                      "description": "ClickHouse native protocol port.",
                      "defaultValue": "9000"
                    },
                    "DEFAULT_BROKERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "UWSGI_MAX_REQUESTS": {
                      "isOptional": false,
                      "description": "Recycle uwsgi workers after this many requests (upstream default).",
                      "defaultValue": "10000"
                    },
                    "UWSGI_DISABLE_LOGGING": {
                      "isOptional": false,
                      "description": "Silence per-request uwsgi logs (upstream default).",
                      "defaultValue": "true"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    }
                  }
                },
                "f92fced9-c274-4b66-a2b5-0df6c0a1921e": {
                  "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/sentry.svg",
                  "name": "snuba-group-attributes-consumer",
                  "deploy": {
                    "startCommand": "/railway-entrypoint.sh rust-consumer --storage group_attributes --consumer-group snuba-group-attributes-consumers --auto-offset-reset=latest --max-batch-time-ms 750 --no-strict-offset-reset",
                    "healthcheckPath": null,
                    "restartPolicyType": "ALWAYS",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/jratienza65/sentry-railway",
                    "rootDirectory": "/services/snuba"
                  },
                  "variables": {
                    "REDIS_HOST": {
                      "isOptional": false,
                      "description": "Redis host (references the redis service's private domain).",
                      "defaultValue": "${{redis.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDIS_PORT": {
                      "isOptional": false,
                      "description": "Redis port.",
                      "defaultValue": "6379"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "description": "Redis password (references ${{redis.REDIS_PASSWORD}}).",
                      "defaultValue": "${{redis.REDIS_PASSWORD}}"
                    },
                    "SENTRY_VERSION": {
                      "isOptional": false,
                      "description": "Sentry version (references ${{nginx.SENTRY_VERSION}} — change it there to upgrade the stack).",
                      "defaultValue": "${{nginx.SENTRY_VERSION}}"
                    },
                    "SNUBA_SETTINGS": {
                      "isOptional": false,
                      "description": "Snuba settings profile — self_hosted matches upstream.",
                      "defaultValue": "self_hosted"
                    },
                    "CLICKHOUSE_HOST": {
                      "isOptional": false,
                      "description": "ClickHouse host (references the clickhouse service's private domain).",
                      "defaultValue": "${{clickhouse.RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "CLICKHOUSE_PORT": {
                      "isOptional": false,
                      "description": "ClickHouse native protocol port.",
                      "defaultValue": "9000"
                    },
                    "DEFAULT_BROKERS": {
                      "isOptional": false,
                      "description": "Kafka bootstrap servers (references the kafka service's private domain).",
                      "defaultValue": "${{kafka.RAILWAY_PRIVATE_DOMAIN}}:9092"
                    },
                    "UWSGI_MAX_REQUESTS": {
                      "isOptional": false,
                      "description": "Recycle uwsgi workers after this many requests (upstream default).",
                      "defaultValue": "10000"
                    },
                    "UWSGI_DISABLE_LOGGING": {
                      "isOptional": false,
                      "description": "Silence per-request uwsgi logs (upstream default).",
                      "defaultValue": "true"
                    },
                    "SENTRY_EVENT_RETENTION_DAYS": {
                      "isOptional": false,
                      "description": "How long Sentry keeps event data; also drives the object-storage lifecycle rule for event payloads.",
                      "defaultValue": "90"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "nginx",
      "method": "GET",
      "path": "/healthz",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 23,
    "needs_volume": true
  },
  "generated_at": "2026-09-10T22:14:43.398Z",
  "generator_version": "0.1.0",
  "status": "degraded",
  "validated_at": "2026-09-08T19:52:52.589Z",
  "success_rate_30d": 0,
  "validation": {
    "last_run_id": "run_303313105d43428a85ea",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": false,
        "detail": "DEPLOYING,BUILDING,BUILDING,SUCCESS,BUILDING,SUCCESS,SUCCESS,BUILDING,QUEUED,DEPLOYING,BUILDING,SUCCESS,SUCCESS,QUEUED,SUCCESS,BUILDING,QUEUED,DEPLOYING,SUCCESS,CRASHED,CRASHED,SUCCESS,SUCCESS"
      }
    ]
  }
}