{
  "manifest_version": "1.0.0",
  "template": {
    "id": "a10a4d04-ad33-40f0-82d2-39f10fbcc399",
    "slug": "tailscale-exit-nod-1",
    "name": "Tailscale Exit Node",
    "description": "Docker Image Tailscale Exit Node, no GitHub dependency.",
    "url": "https://railway.com/deploy/tailscale-exit-nod-1",
    "upstream": {
      "image": "tailscale/tailscale:stable"
    }
  },
  "services": [
    {
      "name": "Tailscale Exit Node",
      "source": {
        "image": "tailscale/tailscale:stable"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/tailscale",
      "http": false
    }
  ],
  "required_inputs": [
    {
      "key": "TS_AUTHKEY",
      "service": "Tailscale Exit Node",
      "description": "Tailscale authentication key used to join your tailnet. Generate one in the Tailscale admin console (Settings → Keys). Use a reusable or ephemeral (single-use) key.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "TS_STATE_DIR",
      "service": "Tailscale Exit Node",
      "description": "Directory inside the container where Tailscale stores its state (auth, keys, etc.). Mount a Railway Volume here so the node stays authenticated after restarts.",
      "secret": false,
      "strategy": "default",
      "default": "/var/lib/tailscale"
    },
    {
      "key": "TS_EXTRA_ARGS",
      "service": "Tailscale Exit Node",
      "description": "Extra flags passed to tailscale up. Use this to make the node an exit node, enable SSH, advertise routes, etc.",
      "secret": false,
      "strategy": "default",
      "default": "--advertise-exit-node"
    },
    {
      "key": "TS_ACCEPT_ROUTES",
      "service": "Tailscale Exit Node",
      "description": "Whether this node should accept routes (including exit nodes and subnet routes) advertised by other machines in your tailnet.",
      "secret": false,
      "strategy": "default",
      "default": "true"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "tailscale-exit-nod-1"
      }
    },
    "cli": "railway deploy --template tailscale-exit-nod-1",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "a10a4d04-ad33-40f0-82d2-39f10fbcc399",
            "serializedConfig": {
              "services": {
                "e7ceff92-e9fe-4661-ae44-8b315e83e6e7": {
                  "icon": "https://tailscale.com/favicon.ico",
                  "name": "Tailscale Exit Node",
                  "deploy": {
                    "startCommand": "/usr/local/bin/containerboot"
                  },
                  "source": {
                    "image": "tailscale/tailscale:stable"
                  },
                  "variables": {
                    "TS_AUTHKEY": {
                      "isOptional": false,
                      "description": "Tailscale authentication key used to join your tailnet. Generate one in the Tailscale admin console (Settings → Keys). Use a reusable or ephemeral (single-use) key.",
                      "defaultValue": "{{TS_AUTHKEY}}"
                    },
                    "TS_HOSTNAME": {
                      "isOptional": true,
                      "description": "Custom hostname for this node in your Tailscale network. Helpful for identifying the Railway exit node.",
                      "defaultValue": ""
                    },
                    "TS_STATE_DIR": {
                      "isOptional": false,
                      "description": "Directory inside the container where Tailscale stores its state (auth, keys, etc.). Mount a Railway Volume here so the node stays authenticated after restarts.",
                      "defaultValue": "/var/lib/tailscale"
                    },
                    "TS_EXTRA_ARGS": {
                      "isOptional": false,
                      "description": "Extra flags passed to tailscale up. Use this to make the node an exit node, enable SSH, advertise routes, etc.",
                      "defaultValue": "--advertise-exit-node"
                    },
                    "TS_ACCEPT_ROUTES": {
                      "isOptional": false,
                      "description": "Whether this node should accept routes (including exit nodes and subnet routes) advertised by other machines in your tailnet.",
                      "defaultValue": "true"
                    }
                  },
                  "volumeMounts": {
                    "e7ceff92-e9fe-4661-ae44-8b315e83e6e7": {
                      "mountPath": "/var/lib/tailscale"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-09-21T22:14:44.200Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-09-20T09:10:20.001Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_27a7a57e38744829a2ac",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 30,
    "typical_build_seconds": 0,
    "typical_start_seconds": 0,
    "slowest_service": "Tailscale Exit Node"
  }
}