{
  "manifest_version": "1.0.0",
  "template": {
    "id": "60b8e027-67dc-4b30-8bdf-137e0fec06e6",
    "slug": "support-secret-drop-with-privatebin",
    "name": "Support Secret Drop with PrivateBin",
    "description": "Browser-encrypted support pastes with one-hour default expiry.",
    "url": "https://railway.com/deploy/support-secret-drop-with-privatebin",
    "upstream": {
      "image": "privatebin/nginx-fpm-alpine@sha256:4d4e8d8c05e7556a5fbf481375fc2f8311402d780ac0b074314b197544288156"
    }
  },
  "services": [
    {
      "name": "App",
      "source": {
        "image": "privatebin/nginx-fpm-alpine@sha256:4d4e8d8c05e7556a5fbf481375fc2f8311402d780ac0b074314b197544288156"
      },
      "needs_volume": true,
      "volume_mount_path": "/srv/data",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "TZ",
      "service": "App",
      "description": "Provide a value for TZ.",
      "secret": false,
      "strategy": "default",
      "default": "Etc/UTC"
    },
    {
      "key": "PORT",
      "service": "App",
      "description": "Provide a value for PORT.",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "RAILWAY_RUN_UID",
      "service": "App",
      "description": "Required for access to the Railway root-owned persistent volume.",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "PRIVATEBIN_CONFIG",
      "service": "App",
      "description": "Provide a value for PRIVATEBIN_CONFIG.",
      "secret": false,
      "strategy": "default",
      "default": ";<?php http_response_code(403); /*\n[main]\nname = \"Support Secret Drop\"\ndiscussion = false\nfileupload = false\npassword = true\nburnafterreadingselected = true\nsizelimit = 1000000\n[expire]\ndefault = \"1hour\"\n[traffic]\nlimit = 10\n[model]\nclass = Filesystem\n[model_options]\ndir = \"/srv/data\"\n"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "support-secret-drop-with-privatebin"
      }
    },
    "cli": "railway deploy --template support-secret-drop-with-privatebin",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "60b8e027-67dc-4b30-8bdf-137e0fec06e6",
            "serializedConfig": {
              "services": {
                "58bf1e1d-20b5-5791-a9b0-d1da5257ec8d": {
                  "name": "App",
                  "deploy": {
                    "startCommand": "/bin/sh -c 'set -eu; chown 65534:82 /srv/data; printf \"%s\" \"$PRIVATEBIN_CONFIG\" > /srv/cfg/conf.php; chmod 644 /srv/cfg/conf.php; exec su -s /bin/sh nobody -c '\"'\"'exec /etc/init.d/rc.local'\"'\"''",
                    "restartPolicyType": "ALWAYS"
                  },
                  "source": {
                    "image": "privatebin/nginx-fpm-alpine@sha256:4d4e8d8c05e7556a5fbf481375fc2f8311402d780ac0b074314b197544288156"
                  },
                  "variables": {
                    "TZ": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "Etc/UTC"
                    },
                    "PORT": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "8080"
                    },
                    "RAILWAY_RUN_UID": {
                      "isOptional": false,
                      "description": "Required for access to the Railway root-owned persistent volume.",
                      "defaultValue": "0"
                    },
                    "PRIVATEBIN_CONFIG": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": ";<?php http_response_code(403); /*\n[main]\nname = \"Support Secret Drop\"\ndiscussion = false\nfileupload = false\npassword = true\nburnafterreadingselected = true\nsizelimit = 1000000\n[expire]\ndefault = \"1hour\"\n[traffic]\nlimit = 10\n[model]\nclass = Filesystem\n[model_options]\ndir = \"/srv/data\"\n"
                    }
                  },
                  "networking": {
                    "tcpProxies": {},
                    "serviceDomains": {
                      "<hasDomain>": {
                        "port": 8080
                      }
                    }
                  },
                  "volumeMounts": {
                    "13c67bb7-908c-5af2-979e-1146a06784a5": {
                      "mountPath": "/srv/data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-10-18T10:14:45.913Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-10-18T09:20:41.828Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_bcac6704f85440ef8fbc",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 82,
    "typical_build_seconds": 0,
    "typical_start_seconds": 0,
    "slowest_service": "App"
  }
}
