{
  "manifest_version": "1.0.0",
  "template": {
    "id": "5236eb1f-39eb-459b-822f-51f78101cdc6",
    "slug": "ssh",
    "name": "SSH Bastion",
    "description": "Key-only SSH jump host: tunnel to private Postgres, Redis and services.",
    "url": "https://railway.com/deploy/ssh",
    "upstream": {
      "image": "ghcr.io/two-workspaces/ssh:afe7530"
    }
  },
  "status": "unvalidated",
  "validated_at": null,
  "success_rate_30d": null,
  "services": [
    {
      "name": "ssh-bastion",
      "source": {
        "image": "ghcr.io/two-workspaces/ssh:afe7530"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "tcp_ports": [
        22
      ],
      "http": false
    }
  ],
  "required_inputs": [
    {
      "key": "SSH_USER",
      "service": "ssh-bastion",
      "description": "User name to log in as. Not root.",
      "secret": false,
      "strategy": "default",
      "default": "railway"
    },
    {
      "key": "AUTHORIZED_KEYS",
      "service": "ssh-bastion",
      "description": "Who can log in: your public key (cat ~/.ssh/id_ed25519.pub), one per line, or github:<username> to use the keys on that GitHub account.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "ssh"
      }
    },
    "cli": "railway deploy --template ssh",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "5236eb1f-39eb-459b-822f-51f78101cdc6",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "8f52aa79-89a7-45e7-a38f-ebc38059d487": {
                  "icon": "https://raw.githubusercontent.com/two-workspaces/ssh/main/images/icon.svg",
                  "name": "ssh-bastion",
                  "deploy": {
                    "startCommand": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "ghcr.io/two-workspaces/ssh:afe7530"
                  },
                  "variables": {
                    "SSH_USER": {
                      "isOptional": true,
                      "description": "User name to log in as. Not root.",
                      "defaultValue": "railway"
                    },
                    "AUTHORIZED_KEYS": {
                      "isOptional": false,
                      "description": "Who can log in: your public key (cat ~/.ssh/id_ed25519.pub), one per line, or github:<username> to use the keys on that GitHub account.",
                      "defaultValue": "{{AUTHORIZED_KEYS}}"
                    }
                  },
                  "networking": {
                    "tcpProxies": {
                      "22": {}
                    }
                  },
                  "volumeMounts": {
                    "8f52aa79-89a7-45e7-a38f-ebc38059d487": {
                      "mountPath": "/data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-11-09T04:15:11.248Z",
  "generator_version": "0.1.0"
}