{ "manifest_version": "1.0.0", "template": { "id": "d730345d-497b-4fac-93e0-f8ced059727c", "slug": "siwa-keyring-proxy", "name": "SIWA Full (OpenClaw Agent, Keyring Proxy, Telegram 2FA services)", "description": "SIWA stack with OpenClaw agent, Keyring proxy, and Telegram 2FA services.", "url": "https://railway.com/deploy/siwa-keyring-proxy", "upstream": { "repo_url": "https://github.com/arjunkomath/openclaw-railway-template" } }, "status": "unvalidated", "validated_at": null, "success_rate_30d": null, "services": [ { "name": "OpenClaw_Agent", "source": { "repo": "https://github.com/arjunkomath/openclaw-railway-template" }, "needs_volume": true, "volume_mount_path": "/data", "http": true }, { "name": "2FA_Telegram", "source": { "repo": "https://github.com/builders-garden/siwa" }, "needs_volume": false, "http": false }, { "name": "2FA_Gateway", "source": { "repo": "https://github.com/builders-garden/siwa" }, "needs_volume": false, "http": true }, { "name": "Keyring_Proxy", "source": { "repo": "https://github.com/builders-garden/siwa" }, "needs_volume": true, "volume_mount_path": "/data", "http": false } ], "required_inputs": [ { "key": "SETUP_PASSWORD", "service": "OpenClaw_Agent", "description": "Password to access the setup UI. Automatically generated.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "KEYRING_PROXY_URL", "service": "OpenClaw_Agent", "description": "API secret to communicate with the Keyring Service.", "secret": true, "strategy": "default", "default": "http://keyringproxy.railway.internal:3100" }, { "key": "OPENCLAW_STATE_DIR", "service": "OpenClaw_Agent", "description": "Where your OpenClaw data lives - configs, auth, sessions.", "secret": false, "strategy": "default", "default": "/data/.openclaw" }, { "key": "KEYRING_PROXY_SECRET", "service": "OpenClaw_Agent", "description": "API secret to communicate with the Keyring Service.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "OPENCLAW_GATEWAY_TOKEN", "service": "OpenClaw_Agent", "description": "Token that protects your gateway.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "OPENCLAW_WORKSPACE_DIR", "service": "OpenClaw_Agent", "description": "Where all the files you create via OpenClaw will reside.", "secret": false, "strategy": "default", "default": "/data/workspace" }, { "key": "TFA_PORT", "service": "2FA_Telegram", "description": "Default Service Port (not public).", "secret": false, "strategy": "default", "default": "3200" }, { "key": "TFA_SECRET", "service": "2FA_Telegram", "description": "API secret to let this service communicate with the Keyring Proxy. ", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "TELEGRAM_CHAT_ID", "service": "2FA_Telegram", "description": "Telegram Bot chat ID.", "secret": false, "strategy": "ask_user" }, { "key": "TELEGRAM_BOT_TOKEN", "service": "2FA_Telegram", "description": "Telegram Bot Token.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "TFA_AUDIT_LOG_PATH", "service": "2FA_Telegram", "description": "Path for audit logs (JSON lines format).", "secret": false, "strategy": "default", "default": "./audit.jsonl" }, { "key": "TFA_APPROVAL_TIMEOUT_MS", "service": "2FA_Telegram", "description": "Approval timeout in milliseconds (default: 60000 = 60 seconds).", "secret": false, "strategy": "default", "default": "60000" }, { "key": "TFA_GATEWAY_PORT", "service": "2FA_Gateway", "description": "Default Service Port (public).", "secret": false, "strategy": "default", "default": "3201" }, { "key": "TFA_INTERNAL_URL", "service": "2FA_Gateway", "description": "The private DNS name of the service.", "secret": false, "strategy": "default", "default": "http://2fatelegram.railway.internal:3200" }, { "key": "TELEGRAM_BOT_TOKEN", "service": "2FA_Gateway", "description": "Telegram Bot Token.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "TFA_SECRET", "service": "Keyring_Proxy", "description": "API secret to communicate with the 2FA Service.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "TFA_ENABLED", "service": "Keyring_Proxy", "description": "Enable or Disable 2FA feature.", "secret": false, "strategy": "default", "default": "true" }, { "key": "TFA_OPERATIONS", "service": "Keyring_Proxy", "description": "Which operations require 2FA (comma-separated).", "secret": false, "strategy": "default", "default": "sign-message,sign-transaction,sign-authorization" }, { "key": "TFA_SERVER_URL", "service": "Keyring_Proxy", "description": "2FA Service url (using internal network, not public).", "secret": false, "strategy": "default", "default": "http://2fatelegram.railway.internal:3200" }, { "key": "KEYSTORE_PASSWORD", "service": "Keyring_Proxy", "description": "Password to decrypto the local keystore file where keys and sensitive data are stored.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "KEYRING_PROXY_SECRET", "service": "Keyring_Proxy", "description": "API secret to communicate with the Keyring Service. Set it up also on your OpenClaw gateway service.", "secret": true, "strategy": "generate", "generate": "random_base64_32" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "siwa-keyring-proxy" } }, "cli": "railway deploy --template siwa-keyring-proxy", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "d730345d-497b-4fac-93e0-f8ced059727c", "serializedConfig": { "buckets": {}, "services": { "1b04c40d-70d2-41fa-a430-9da66a5b2da2": { "name": "OpenClaw_Agent", "deploy": { "preDeployCommand": [ "npx clawhub@latest install siwa --dir /data/skills" ] }, "source": { "repo": "arjunkomath/openclaw-railway-template", "branch": null, "rootDirectory": null }, "variables": { "SETUP_PASSWORD": { "isOptional": false, "description": "Password to access the setup UI. Automatically generated.", "defaultValue": "{{SETUP_PASSWORD}}" }, "KEYRING_PROXY_URL": { "isOptional": false, "description": "API secret to communicate with the Keyring Service.", "defaultValue": "http://keyringproxy.railway.internal:3100" }, "OPENCLAW_STATE_DIR": { "isOptional": false, "description": "Where your OpenClaw data lives - configs, auth, sessions.", "defaultValue": "/data/.openclaw" }, "KEYRING_PROXY_SECRET": { "isOptional": false, "description": "API secret to communicate with the Keyring Service.", "defaultValue": "${{Keyring_Proxy.KEYRING_PROXY_SECRET}}" }, "OPENCLAW_GATEWAY_TOKEN": { "isOptional": false, "description": "Token that protects your gateway.", "defaultValue": "{{OPENCLAW_GATEWAY_TOKEN}}" }, "OPENCLAW_WORKSPACE_DIR": { "isOptional": false, "description": "Where all the files you create via OpenClaw will reside.", "defaultValue": "/data/workspace" } }, "networking": { "serviceDomains": { ":8080": { "port": 8080 } } }, "volumeMounts": { "1b04c40d-70d2-41fa-a430-9da66a5b2da2": { "mountPath": "/data" } } }, "585fb438-ccd9-4f13-aae4-88c44e5c4ac3": { "name": "2FA_Telegram", "source": { "repo": "builders-garden/siwa", "branch": null, "rootDirectory": "/packages/2fa-telegram" }, "variables": { "TFA_PORT": { "description": "Default Service Port (not public).", "defaultValue": "3200" }, "TFA_SECRET": { "description": "API secret to let this service communicate with the Keyring Proxy. ", "defaultValue": "{{TFA_SECRET}}" }, "TELEGRAM_CHAT_ID": { "description": "Telegram Bot chat ID.", "defaultValue": "{{TELEGRAM_CHAT_ID}}" }, "TELEGRAM_BOT_TOKEN": { "description": "Telegram Bot Token.", "defaultValue": "{{TELEGRAM_BOT_TOKEN}}" }, "TFA_AUDIT_LOG_PATH": { "description": "Path for audit logs (JSON lines format).", "defaultValue": "./audit.jsonl" }, "TFA_APPROVAL_TIMEOUT_MS": { "description": "Approval timeout in milliseconds (default: 60000 = 60 seconds).", "defaultValue": "60000" } }, "networking": {} }, "864e2b85-0fac-4170-a80d-dfe5d3a8e16b": { "name": "2FA_Gateway", "source": { "repo": "builders-garden/siwa", "branch": null, "rootDirectory": "/packages/2fa-gateway" }, "variables": { "TFA_GATEWAY_PORT": { "description": "Default Service Port (public).", "defaultValue": "3201" }, "TFA_INTERNAL_URL": { "description": "The private DNS name of the service.", "defaultValue": "http://2fatelegram.railway.internal:3200" }, "TELEGRAM_BOT_TOKEN": { "description": "Telegram Bot Token.", "defaultValue": "{{TELEGRAM_BOT_TOKEN}}" } }, "networking": { "serviceDomains": { ":3201": { "port": 3201 } } } }, "e8945fae-43e6-40f1-bc30-a970c3dcc19b": { "icon": null, "name": "Keyring_Proxy", "deploy": { "startCommand": null, "healthcheckPath": "/health", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/builders-garden/siwa", "rootDirectory": "/packages/keyring-proxy" }, "variables": { "TFA_SECRET": { "description": "API secret to communicate with the 2FA Service.", "defaultValue": "${{2FA_Telegram.TFA_SECRET}}" }, "TFA_ENABLED": { "description": "Enable or Disable 2FA feature.", "defaultValue": "true" }, "TFA_OPERATIONS": { "description": "Which operations require 2FA (comma-separated).", "defaultValue": "sign-message,sign-transaction,sign-authorization" }, "TFA_SERVER_URL": { "description": "2FA Service url (using internal network, not public).", "defaultValue": "http://2fatelegram.railway.internal:3200" }, "KEYSTORE_PASSWORD": { "isOptional": false, "description": "Password to decrypto the local keystore file where keys and sensitive data are stored.", "defaultValue": "{{KEYSTORE_PASSWORD}}" }, "KEYRING_PROXY_SECRET": { "isOptional": false, "description": "API secret to communicate with the Keyring Service. Set it up also on your OpenClaw gateway service.", "defaultValue": "{{KEYRING_PROXY_SECRET}}" } }, "networking": {}, "volumeMounts": { "e8945fae-43e6-40f1-bc30-a970c3dcc19b": { "mountPath": "/data" } } } } } } } } } }, "post_deploy": {}, "resources": { "expected_services": 4, "needs_volume": true }, "generated_at": "2026-09-12T16:14:42.609Z", "generator_version": "0.1.0" }