{ "manifest_version": "1.0.0", "template": { "id": "8e7fcfdf-cea9-4732-b303-873413592d03", "slug": "siwa-keyring-keyring-proxy-telegram-2fa-", "name": "SIWA Keyring (Keyring Proxy, Telegram 2FA services)", "description": "SIWA stack with Keyring proxy, and Telegram 2FA services.", "url": "https://railway.com/deploy/siwa-keyring-keyring-proxy-telegram-2fa-", "upstream": { "repo_url": "https://github.com/builders-garden/siwa" } }, "status": "unvalidated", "validated_at": null, "success_rate_30d": null, "services": [ { "name": "2FA_Telegram", "source": { "repo": "https://github.com/builders-garden/siwa" }, "needs_volume": false, "http": false }, { "name": "2FA_Gateway", "source": { "repo": "https://github.com/builders-garden/siwa" }, "needs_volume": false, "http": true }, { "name": "Keyring_Proxy", "source": { "repo": "https://github.com/builders-garden/siwa" }, "needs_volume": true, "volume_mount_path": "/data", "http": true } ], "required_inputs": [ { "key": "TFA_PORT", "service": "2FA_Telegram", "description": "Default Service Port (not public).", "secret": false, "strategy": "default", "default": "3200" }, { "key": "TFA_SECRET", "service": "2FA_Telegram", "description": "API secret to let this service communicate with the Keyring Proxy. ", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "TELEGRAM_CHAT_ID", "service": "2FA_Telegram", "description": "Telegram Bot chat ID.", "secret": false, "strategy": "ask_user" }, { "key": "TELEGRAM_BOT_TOKEN", "service": "2FA_Telegram", "description": "Telegram Bot Token.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "TFA_AUDIT_LOG_PATH", "service": "2FA_Telegram", "description": "Path for audit logs (JSON lines format).", "secret": false, "strategy": "default", "default": "./audit.jsonl" }, { "key": "TFA_APPROVAL_TIMEOUT_MS", "service": "2FA_Telegram", "description": "Approval timeout in milliseconds (default: 60000 = 60 seconds).", "secret": false, "strategy": "default", "default": "60000" }, { "key": "TFA_GATEWAY_PORT", "service": "2FA_Gateway", "description": "Default Service Port (public).", "secret": false, "strategy": "default", "default": "3201" }, { "key": "TFA_INTERNAL_URL", "service": "2FA_Gateway", "description": "The private DNS name of the service.", "secret": false, "strategy": "default", "default": "http://2fatelegram.railway.internal:3200" }, { "key": "TELEGRAM_BOT_TOKEN", "service": "2FA_Gateway", "description": "Telegram Bot Token.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "TFA_SECRET", "service": "Keyring_Proxy", "description": "API secret to communicate with the 2FA Service.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "TFA_ENABLED", "service": "Keyring_Proxy", "description": "Enable or Disable 2FA feature.", "secret": false, "strategy": "default", "default": "true" }, { "key": "TFA_OPERATIONS", "service": "Keyring_Proxy", "description": "Which operations require 2FA (comma-separated).", "secret": false, "strategy": "default", "default": "sign-message,sign-transaction,sign-authorization" }, { "key": "TFA_SERVER_URL", "service": "Keyring_Proxy", "description": "2FA Service url (using internal network, not public).", "secret": false, "strategy": "default", "default": "http://2fatelegram.railway.internal:3200" }, { "key": "KEYSTORE_PASSWORD", "service": "Keyring_Proxy", "description": "Password to decrypto the local keystore file where keys and sensitive data are stored.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "KEYRING_PROXY_SECRET", "service": "Keyring_Proxy", "description": "API secret to communicate with the Keyring Service. Set it up also on your OpenClaw gateway service.", "secret": true, "strategy": "generate", "generate": "random_base64_32" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "siwa-keyring-keyring-proxy-telegram-2fa-" } }, "cli": "railway deploy --template siwa-keyring-keyring-proxy-telegram-2fa-", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "8e7fcfdf-cea9-4732-b303-873413592d03", "serializedConfig": { "services": { "5a5338e9-4fd7-4403-b6a6-523ec053ec07": { "name": "2FA_Telegram", "source": { "repo": "builders-garden/siwa", "branch": null, "rootDirectory": "/packages/2fa-telegram" }, "variables": { "TFA_PORT": { "description": "Default Service Port (not public).", "defaultValue": "3200" }, "TFA_SECRET": { "description": "API secret to let this service communicate with the Keyring Proxy. ", "defaultValue": "{{TFA_SECRET}}" }, "TELEGRAM_CHAT_ID": { "description": "Telegram Bot chat ID.", "defaultValue": "{{TELEGRAM_CHAT_ID}}" }, "TELEGRAM_BOT_TOKEN": { "description": "Telegram Bot Token.", "defaultValue": "{{TELEGRAM_BOT_TOKEN}}" }, "TFA_AUDIT_LOG_PATH": { "description": "Path for audit logs (JSON lines format).", "defaultValue": "./audit.jsonl" }, "TFA_APPROVAL_TIMEOUT_MS": { "description": "Approval timeout in milliseconds (default: 60000 = 60 seconds).", "defaultValue": "60000" } }, "networking": {} }, "6e18975c-2dfb-4753-bd67-1c8c9341ef4f": { "name": "2FA_Gateway", "source": { "repo": "builders-garden/siwa", "branch": null, "rootDirectory": "/packages/2fa-gateway" }, "variables": { "TFA_GATEWAY_PORT": { "description": "Default Service Port (public).", "defaultValue": "3201" }, "TFA_INTERNAL_URL": { "description": "The private DNS name of the service.", "defaultValue": "http://2fatelegram.railway.internal:3200" }, "TELEGRAM_BOT_TOKEN": { "description": "Telegram Bot Token.", "defaultValue": "{{TELEGRAM_BOT_TOKEN}}" } }, "networking": { "serviceDomains": { ":3201": { "port": 3201 } } } }, "b5a9707f-8ef6-4c4a-baf0-e17f77159303": { "icon": null, "name": "Keyring_Proxy", "deploy": { "startCommand": null, "healthcheckPath": "/health", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/builders-garden/siwa", "rootDirectory": "/packages/keyring-proxy" }, "variables": { "TFA_SECRET": { "description": "API secret to communicate with the 2FA Service.", "defaultValue": "${{2FA_Telegram.TFA_SECRET}}" }, "TFA_ENABLED": { "description": "Enable or Disable 2FA feature.", "defaultValue": "true" }, "TFA_OPERATIONS": { "description": "Which operations require 2FA (comma-separated).", "defaultValue": "sign-message,sign-transaction,sign-authorization" }, "TFA_SERVER_URL": { "description": "2FA Service url (using internal network, not public).", "defaultValue": "http://2fatelegram.railway.internal:3200" }, "KEYSTORE_PASSWORD": { "isOptional": false, "description": "Password to decrypto the local keystore file where keys and sensitive data are stored.", "defaultValue": "{{KEYSTORE_PASSWORD}}" }, "KEYRING_PROXY_SECRET": { "isOptional": false, "description": "API secret to communicate with the Keyring Service. Set it up also on your OpenClaw gateway service.", "defaultValue": "{{KEYRING_PROXY_SECRET}}" } }, "networking": { "serviceDomains": { ":8080": { "port": 8080 } } }, "volumeMounts": { "b5a9707f-8ef6-4c4a-baf0-e17f77159303": { "mountPath": "/data" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "Keyring_Proxy", "method": "GET", "path": "/health", "expect_status": 200 } }, "resources": { "expected_services": 3, "needs_volume": true }, "generated_at": "2026-09-21T22:14:44.200Z", "generator_version": "0.1.0" }