{ "manifest_version": "1.0.0", "template": { "id": "2ea3c4d3-4d3d-4281-9954-7541a0372aa0", "slug": "temporal-production", "name": "Temporal Production", "description": "Self-hosted Temporal cluster with PostgreSQL and a protected Web UI.", "url": "https://railway.com/deploy/temporal-production", "upstream": { "image": "caddy:2.11.4-alpine" } }, "services": [ { "name": "temporal-ui", "source": { "image": "temporalio/ui:2.53.3" }, "needs_volume": false, "http": false }, { "name": "temporal-schema", "source": { "image": "temporalio/admin-tools:1.31.2" }, "needs_volume": false, "http": false }, { "name": "temporal-ui-auth", "source": { "image": "caddy:2.11.4-alpine" }, "needs_volume": false, "http": true }, { "name": "temporal-bootstrap", "source": { "image": "temporalio/admin-tools:1.31.2" }, "needs_volume": false, "http": false }, { "name": "temporal-system-worker", "source": { "image": "temporalio/server:1.31.2" }, "needs_volume": false, "http": false }, { "name": "temporal-db", "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:18" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false }, { "name": "temporal-matching", "source": { "image": "temporalio/server:1.31.2" }, "needs_volume": false, "http": false }, { "name": "temporal-history", "source": { "image": "temporalio/server:1.31.2" }, "needs_volume": false, "http": false }, { "name": "temporal-frontend", "source": { "image": "temporalio/server:1.31.2" }, "needs_volume": false, "http": false } ], "required_inputs": [ { "key": "TEMPORAL_ADDRESS", "service": "temporal-ui", "description": "Private gRPC endpoint used by the Web UI to query Temporal.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "TEMPORAL_UI_PORT", "service": "temporal-ui", "description": "Internal HTTP port on which the Temporal Web UI listens.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "BOOTSTRAP_READY_HOST", "service": "temporal-ui", "description": "Railway dependency marker ensuring Namespace bootstrap is available first.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "TEMPORAL_OPENAPI_ENABLED", "service": "temporal-ui", "description": "Enables the Temporal UI OpenAPI endpoint.", "secret": false, "strategy": "default", "default": "true" }, { "key": "TEMPORAL_DEFAULT_NAMESPACE", "service": "temporal-ui", "description": "Namespace selected automatically when users open the Web UI.", "secret": false, "strategy": "default", "default": "default" }, { "key": "TEMPORAL_NOTIFY_ON_NEW_VERSION", "service": "temporal-ui", "description": "Disables upstream version notification banners in the Web UI.", "secret": false, "strategy": "default", "default": "false" }, { "key": "PORT", "service": "temporal-schema", "description": "Internal HTTP port used only for the Railway readiness health check.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "DBNAME", "service": "temporal-schema", "description": "Database that stores Temporal Workflow state and event history.", "secret": false, "strategy": "default", "default": "temporal" }, { "key": "DB_PORT", "service": "temporal-schema", "description": "Internal PostgreSQL port used during schema initialization.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_PWD", "service": "temporal-schema", "description": "PostgreSQL password used by the Temporal schema tools.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SQL_PASSWORD", "service": "temporal-schema", "description": "SQL password alias required by the Temporal PostgreSQL tooling.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_USER", "service": "temporal-schema", "description": "PostgreSQL user used to create and upgrade Temporal schemas.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_SEEDS", "service": "temporal-schema", "description": "Private PostgreSQL hostname used by the Temporal schema tools.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "VISIBILITY_DBNAME", "service": "temporal-schema", "description": "Database that stores Workflow list and visibility records.", "secret": false, "strategy": "default", "default": "temporal_visibility" }, { "key": "PORT", "service": "temporal-ui-auth", "description": "HTTP port exposed by the authenticated Caddy gateway to Railway.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "UI_PASSWORD", "service": "temporal-ui-auth", "description": "Strong password generated automatically for Web UI access.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "UI_UPSTREAM", "service": "temporal-ui-auth", "description": "Private upstream address of the Temporal Web UI service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "UI_USERNAME", "service": "temporal-ui-auth", "description": "Username required to access the protected Temporal Web UI.", "secret": false, "strategy": "default", "default": "admin" }, { "key": "PORT", "service": "temporal-bootstrap", "description": "Internal HTTP port used only for the Railway readiness health check.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "TEMPORAL_ADDRESS", "service": "temporal-bootstrap", "description": "Private gRPC endpoint of the Temporal Frontend service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "DEFAULT_NAMESPACE", "service": "temporal-bootstrap", "description": "Namespace created automatically for application Workflows and Workers.", "secret": false, "strategy": "default", "default": "default" }, { "key": "DEFAULT_NAMESPACE_RETENTION", "service": "temporal-bootstrap", "description": "Time completed Workflow histories are retained before automatic deletion.", "secret": false, "strategy": "default", "default": "72h" }, { "key": "DB", "service": "temporal-system-worker", "description": "Temporal persistence plugin for PostgreSQL-compatible schemas.", "secret": false, "strategy": "default", "default": "postgres12" }, { "key": "DBNAME", "service": "temporal-system-worker", "description": "Database containing Workflow state and event history.", "secret": false, "strategy": "default", "default": "temporal" }, { "key": "DB_PORT", "service": "temporal-system-worker", "description": "Internal PostgreSQL service port.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ENABLE_ES", "service": "temporal-system-worker", "description": "Uses PostgreSQL advanced visibility instead of Elasticsearch.", "secret": false, "strategy": "default", "default": "false" }, { "key": "LOG_LEVEL", "service": "temporal-system-worker", "description": "Temporal server logging level suitable for normal production operation.", "secret": false, "strategy": "default", "default": "info" }, { "key": "POSTGRES_PWD", "service": "temporal-system-worker", "description": "PostgreSQL password shared by the Temporal server roles.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_USER", "service": "temporal-system-worker", "description": "PostgreSQL user shared by the Temporal server roles.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SQL_MAX_CONNS", "service": "temporal-system-worker", "description": "Maximum persistence database connections opened by each server process.", "secret": false, "strategy": "default", "default": "10" }, { "key": "POSTGRES_SEEDS", "service": "temporal-system-worker", "description": "Private hostname of the Railway PostgreSQL service.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SCHEMA_READY_HOST", "service": "temporal-system-worker", "description": "Railway dependency marker ensuring schema initialization is available first.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "SQL_VIS_MAX_CONNS", "service": "temporal-system-worker", "description": "Maximum visibility database connections opened by each server process.", "secret": false, "strategy": "default", "default": "5" }, { "key": "VISIBILITY_DBNAME", "service": "temporal-system-worker", "description": "Database containing Workflow visibility and list data.", "secret": false, "strategy": "default", "default": "temporal_visibility" }, { "key": "NUM_HISTORY_SHARDS", "service": "temporal-system-worker", "description": "Number of History shards created for the cluster. Cannot be changed after initialization.", "secret": false, "strategy": "default", "default": "512" }, { "key": "SQL_MAX_IDLE_CONNS", "service": "temporal-system-worker", "description": "Maximum idle persistence connections retained by each server process.", "secret": false, "strategy": "default", "default": "10" }, { "key": "SQL_VIS_MAX_IDLE_CONNS", "service": "temporal-system-worker", "description": "Maximum idle visibility connections retained by each server process.", "secret": false, "strategy": "default", "default": "5" }, { "key": "DYNAMIC_CONFIG_FILE_PATH", "service": "temporal-system-worker", "description": "Runtime path for the Dynamic Config file created during container startup.", "secret": false, "strategy": "default", "default": "/tmp/temporal-dynamicconfig.yaml" }, { "key": "PGDATA", "service": "temporal-db", "description": "Directory inside the persistent volume where PostgreSQL stores its database files.", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "PGHOST", "service": "temporal-db", "description": "Railway private hostname used by services in the same project.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGPORT", "service": "temporal-db", "description": "Internal PostgreSQL server port.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "PGUSER", "service": "temporal-db", "description": "Standard PostgreSQL client alias for the configured database user.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGDATABASE", "service": "temporal-db", "description": "Standard PostgreSQL client alias for the default database name.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGPASSWORD", "service": "temporal-db", "description": "Standard PostgreSQL client alias for the generated database password.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_DB", "service": "temporal-db", "description": "Default PostgreSQL database created when the service initializes.", "secret": false, "strategy": "default", "default": "railway" }, { "key": "DATABASE_URL", "service": "temporal-db", "description": "Private PostgreSQL connection URL for services in the same Railway project.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_USER", "service": "temporal-db", "description": "PostgreSQL superuser created during first initialization.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "SSL_CERT_DAYS", "service": "temporal-db", "description": "Compatibility value for the Railway PostgreSQL SSL image; leave unchanged.", "secret": false, "strategy": "default", "default": "820" }, { "key": "POSTGRES_PASSWORD", "service": "temporal-db", "description": "Strong PostgreSQL password generated independently for every deployment.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "temporal-db", "description": "Graceful shutdown window before Railway terminates the previous PostgreSQL deployment.", "secret": false, "strategy": "default", "default": "60" }, { "key": "DB", "service": "temporal-matching", "description": "Temporal persistence plugin for PostgreSQL-compatible schemas.", "secret": false, "strategy": "default", "default": "postgres12" }, { "key": "DBNAME", "service": "temporal-matching", "description": "Database containing Workflow state and event history.", "secret": false, "strategy": "default", "default": "temporal" }, { "key": "DB_PORT", "service": "temporal-matching", "description": "Internal PostgreSQL service port.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ENABLE_ES", "service": "temporal-matching", "description": "Uses PostgreSQL advanced visibility instead of Elasticsearch.", "secret": false, "strategy": "default", "default": "false" }, { "key": "LOG_LEVEL", "service": "temporal-matching", "description": "Temporal server logging level suitable for normal production operation.", "secret": false, "strategy": "default", "default": "info" }, { "key": "POSTGRES_PWD", "service": "temporal-matching", "description": "PostgreSQL password shared by the Temporal server roles.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_USER", "service": "temporal-matching", "description": "PostgreSQL user shared by the Temporal server roles.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SQL_MAX_CONNS", "service": "temporal-matching", "description": "Maximum persistence database connections opened by each server process.", "secret": false, "strategy": "default", "default": "10" }, { "key": "POSTGRES_SEEDS", "service": "temporal-matching", "description": "Private hostname of the Railway PostgreSQL service.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SCHEMA_READY_HOST", "service": "temporal-matching", "description": "Railway dependency marker ensuring schema initialization is available first.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "SQL_VIS_MAX_CONNS", "service": "temporal-matching", "description": "Maximum visibility database connections opened by each server process.", "secret": false, "strategy": "default", "default": "5" }, { "key": "VISIBILITY_DBNAME", "service": "temporal-matching", "description": "Database containing Workflow visibility and list data.", "secret": false, "strategy": "default", "default": "temporal_visibility" }, { "key": "NUM_HISTORY_SHARDS", "service": "temporal-matching", "description": "Number of History shards created for the cluster. Cannot be changed after initialization.", "secret": false, "strategy": "default", "default": "512" }, { "key": "SQL_MAX_IDLE_CONNS", "service": "temporal-matching", "description": "Maximum idle persistence connections retained by each server process.", "secret": false, "strategy": "default", "default": "10" }, { "key": "SQL_VIS_MAX_IDLE_CONNS", "service": "temporal-matching", "description": "Maximum idle visibility connections retained by each server process.", "secret": false, "strategy": "default", "default": "5" }, { "key": "DYNAMIC_CONFIG_FILE_PATH", "service": "temporal-matching", "description": "Runtime path for the Dynamic Config file created during container startup.", "secret": false, "strategy": "default", "default": "/tmp/temporal-dynamicconfig.yaml" }, { "key": "DB", "service": "temporal-history", "description": "Temporal persistence plugin for PostgreSQL-compatible schemas.", "secret": false, "strategy": "default", "default": "postgres12" }, { "key": "DBNAME", "service": "temporal-history", "description": "Database containing Workflow state and event history.", "secret": false, "strategy": "default", "default": "temporal" }, { "key": "DB_PORT", "service": "temporal-history", "description": "Internal PostgreSQL service port.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ENABLE_ES", "service": "temporal-history", "description": "Uses PostgreSQL advanced visibility instead of Elasticsearch.", "secret": false, "strategy": "default", "default": "false" }, { "key": "LOG_LEVEL", "service": "temporal-history", "description": "Temporal server logging level suitable for normal production operation.", "secret": false, "strategy": "default", "default": "info" }, { "key": "POSTGRES_PWD", "service": "temporal-history", "description": "PostgreSQL password shared by the Temporal server roles.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_USER", "service": "temporal-history", "description": "PostgreSQL user shared by the Temporal server roles.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SQL_MAX_CONNS", "service": "temporal-history", "description": "Maximum persistence database connections opened by each server process.", "secret": false, "strategy": "default", "default": "10" }, { "key": "POSTGRES_SEEDS", "service": "temporal-history", "description": "Private hostname of the Railway PostgreSQL service.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SCHEMA_READY_HOST", "service": "temporal-history", "description": "Railway dependency marker ensuring schema initialization is available first.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "SQL_VIS_MAX_CONNS", "service": "temporal-history", "description": "Maximum visibility database connections opened by each server process.", "secret": false, "strategy": "default", "default": "5" }, { "key": "VISIBILITY_DBNAME", "service": "temporal-history", "description": "Database containing Workflow visibility and list data.", "secret": false, "strategy": "default", "default": "temporal_visibility" }, { "key": "NUM_HISTORY_SHARDS", "service": "temporal-history", "description": "Number of History shards created for the cluster. Cannot be changed after initialization.", "secret": false, "strategy": "default", "default": "512" }, { "key": "SQL_MAX_IDLE_CONNS", "service": "temporal-history", "description": "Maximum idle persistence connections retained by each server process.", "secret": false, "strategy": "default", "default": "10" }, { "key": "SQL_VIS_MAX_IDLE_CONNS", "service": "temporal-history", "description": "Maximum idle visibility connections retained by each server process.", "secret": false, "strategy": "default", "default": "5" }, { "key": "DYNAMIC_CONFIG_FILE_PATH", "service": "temporal-history", "description": "Runtime path for the Dynamic Config file created during container startup.", "secret": false, "strategy": "default", "default": "/tmp/temporal-dynamicconfig.yaml" }, { "key": "DB", "service": "temporal-frontend", "description": "Temporal persistence plugin for PostgreSQL-compatible schemas.", "secret": false, "strategy": "default", "default": "postgres12" }, { "key": "DBNAME", "service": "temporal-frontend", "description": "Database containing Workflow state and event history.", "secret": false, "strategy": "default", "default": "temporal" }, { "key": "DB_PORT", "service": "temporal-frontend", "description": "Internal PostgreSQL service port.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ENABLE_ES", "service": "temporal-frontend", "description": "Uses PostgreSQL advanced visibility instead of Elasticsearch.", "secret": false, "strategy": "default", "default": "false" }, { "key": "LOG_LEVEL", "service": "temporal-frontend", "description": "Temporal server logging level suitable for normal production operation.", "secret": false, "strategy": "default", "default": "info" }, { "key": "POSTGRES_PWD", "service": "temporal-frontend", "description": "PostgreSQL password shared by the Temporal server roles.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_USER", "service": "temporal-frontend", "description": "PostgreSQL user shared by the Temporal server roles.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SQL_MAX_CONNS", "service": "temporal-frontend", "description": "Maximum persistence database connections opened by each server process.", "secret": false, "strategy": "default", "default": "10" }, { "key": "POSTGRES_SEEDS", "service": "temporal-frontend", "description": "Private hostname of the Railway PostgreSQL service.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SCHEMA_READY_HOST", "service": "temporal-frontend", "description": "Railway dependency marker ensuring schema initialization is available first.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "SQL_VIS_MAX_CONNS", "service": "temporal-frontend", "description": "Maximum visibility database connections opened by each server process.", "secret": false, "strategy": "default", "default": "5" }, { "key": "VISIBILITY_DBNAME", "service": "temporal-frontend", "description": "Database containing Workflow visibility and list data.", "secret": false, "strategy": "default", "default": "temporal_visibility" }, { "key": "NUM_HISTORY_SHARDS", "service": "temporal-frontend", "description": "Number of History shards created for the cluster. Cannot be changed after initialization.", "secret": false, "strategy": "default", "default": "512" }, { "key": "SQL_MAX_IDLE_CONNS", "service": "temporal-frontend", "description": "Maximum idle persistence connections retained by each server process.", "secret": false, "strategy": "default", "default": "10" }, { "key": "SQL_VIS_MAX_IDLE_CONNS", "service": "temporal-frontend", "description": "Maximum idle visibility connections retained by each server process.", "secret": false, "strategy": "default", "default": "5" }, { "key": "DYNAMIC_CONFIG_FILE_PATH", "service": "temporal-frontend", "description": "Runtime path for the Dynamic Config file created during container startup.", "secret": false, "strategy": "default", "default": "/tmp/temporal-dynamicconfig.yaml" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "temporal-production" } }, "cli": "railway deploy --template temporal-production", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "2ea3c4d3-4d3d-4281-9954-7541a0372aa0", "serializedConfig": { "buckets": {}, "services": { "09741514-8885-4e2d-8533-b7e406fe42db": { "icon": "https://avatars.githubusercontent.com/u/56493103?s=200&v=4", "name": "temporal-ui", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ALWAYS", "restartPolicyMaxRetries": 10 }, "source": { "image": "temporalio/ui:2.53.3" }, "variables": { "TEMPORAL_ADDRESS": { "isOptional": false, "description": "Private gRPC endpoint used by the Web UI to query Temporal.", "defaultValue": "${{temporal-frontend.RAILWAY_PRIVATE_DOMAIN}}:7233" }, "TEMPORAL_UI_PORT": { "isOptional": false, "description": "Internal HTTP port on which the Temporal Web UI listens.", "defaultValue": "8080" }, "BOOTSTRAP_READY_HOST": { "isOptional": false, "description": "Railway dependency marker ensuring Namespace bootstrap is available first.", "defaultValue": "${{temporal-bootstrap.RAILWAY_PRIVATE_DOMAIN}}" }, "TEMPORAL_OPENAPI_ENABLED": { "isOptional": false, "description": "Enables the Temporal UI OpenAPI endpoint.", "defaultValue": "true" }, "TEMPORAL_DEFAULT_NAMESPACE": { "isOptional": false, "description": "Namespace selected automatically when users open the Web UI.", "defaultValue": "default" }, "TEMPORAL_NOTIFY_ON_NEW_VERSION": { "isOptional": false, "description": "Disables upstream version notification banners in the Web UI.", "defaultValue": "false" } } }, "249815e1-a680-446c-9463-d3920b131cad": { "icon": "https://avatars.githubusercontent.com/u/56493103?s=200&v=4", "name": "temporal-schema", "deploy": { "startCommand": "/bin/sh -c 'set -eu; until nc -z \"$POSTGRES_SEEDS\" \"$DB_PORT\"; do echo \"Waiting for PostgreSQL...\"; sleep 2; done; temporal-sql-tool --plugin postgres12 --ep \"$POSTGRES_SEEDS\" -u \"$POSTGRES_USER\" -p \"$DB_PORT\" --db \"$DBNAME\" create || true; temporal-sql-tool --plugin postgres12 --ep \"$POSTGRES_SEEDS\" -u \"$POSTGRES_USER\" -p \"$DB_PORT\" --db \"$DBNAME\" setup-schema -v 0.0 || true; temporal-sql-tool --plugin postgres12 --ep \"$POSTGRES_SEEDS\" -u \"$POSTGRES_USER\" -p \"$DB_PORT\" --db \"$DBNAME\" update-schema -d /etc/temporal/schema/postgresql/v12/temporal/versioned; temporal-sql-tool --plugin postgres12 --ep \"$POSTGRES_SEEDS\" -u \"$POSTGRES_USER\" -p \"$DB_PORT\" --db \"$VISIBILITY_DBNAME\" create || true; temporal-sql-tool --plugin postgres12 --ep \"$POSTGRES_SEEDS\" -u \"$POSTGRES_USER\" -p \"$DB_PORT\" --db \"$VISIBILITY_DBNAME\" setup-schema -v 0.0 || true; temporal-sql-tool --plugin postgres12 --ep \"$POSTGRES_SEEDS\" -u \"$POSTGRES_USER\" -p \"$DB_PORT\" --db \"$VISIBILITY_DBNAME\" update-schema -d /etc/temporal/schema/postgresql/v12/visibility/versioned; printf \"#!/bin/sh\\nprintf '\\''HTTP/1.1 200 OK\\\\r\\\\nContent-Length: 2\\\\r\\\\nConnection: close\\\\r\\\\n\\\\r\\\\nOK'\\''\\n\" >/tmp/health-handler.sh; chmod +x /tmp/health-handler.sh; echo \"Schema ready; serving healthcheck on port $PORT\"; exec nc -lk -s :: -p \"$PORT\" -e /tmp/health-handler.sh'", "healthcheckPath": "/healthz", "restartPolicyType": "ALWAYS", "restartPolicyMaxRetries": 10 }, "source": { "image": "temporalio/admin-tools:1.31.2" }, "variables": { "PORT": { "isOptional": false, "description": "Internal HTTP port used only for the Railway readiness health check.", "defaultValue": "8080" }, "DBNAME": { "isOptional": false, "description": "Database that stores Temporal Workflow state and event history.", "defaultValue": "temporal" }, "DB_PORT": { "isOptional": false, "description": "Internal PostgreSQL port used during schema initialization.", "defaultValue": "${{temporal-db.PGPORT}}" }, "POSTGRES_PWD": { "isOptional": false, "description": "PostgreSQL password used by the Temporal schema tools.", "defaultValue": "${{temporal-db.PGPASSWORD}}" }, "SQL_PASSWORD": { "isOptional": false, "description": "SQL password alias required by the Temporal PostgreSQL tooling.", "defaultValue": "${{temporal-db.PGPASSWORD}}" }, "POSTGRES_USER": { "isOptional": false, "description": "PostgreSQL user used to create and upgrade Temporal schemas.", "defaultValue": "${{temporal-db.PGUSER}}" }, "POSTGRES_SEEDS": { "isOptional": false, "description": "Private PostgreSQL hostname used by the Temporal schema tools.", "defaultValue": "${{temporal-db.PGHOST}}" }, "VISIBILITY_DBNAME": { "isOptional": false, "description": "Database that stores Workflow list and visibility records.", "defaultValue": "temporal_visibility" } } }, "4379b473-9bdf-473c-8cc0-ac06effa66b7": { "icon": "https://avatars.githubusercontent.com/u/12955528?s=200&v=4", "name": "temporal-ui-auth", "deploy": { "startCommand": "/bin/sh -c 'set -eu; HASH=$(caddy hash-password --plaintext \"$UI_PASSWORD\"); printf \":%s {\\n handle /healthz {\\n respond \\\"OK\\\" 200\\n }\\n handle {\\n basic_auth {\\n %s %s\\n }\\n reverse_proxy %s\\n header {\\n X-Content-Type-Options nosniff\\n X-Frame-Options DENY\\n Referrer-Policy no-referrer\\n }\\n }\\n}\\n\" \"$PORT\" \"$UI_USERNAME\" \"$HASH\" \"$UI_UPSTREAM\" >/tmp/Caddyfile; exec caddy run --config /tmp/Caddyfile --adapter caddyfile'", "healthcheckPath": "/healthz", "restartPolicyType": "ALWAYS", "restartPolicyMaxRetries": 10 }, "source": { "image": "caddy:2.11.4-alpine" }, "variables": { "PORT": { "isOptional": false, "description": "HTTP port exposed by the authenticated Caddy gateway to Railway.", "defaultValue": "8080" }, "UI_PASSWORD": { "isOptional": false, "description": "Strong password generated automatically for Web UI access.", "defaultValue": "{{UI_PASSWORD}}" }, "UI_UPSTREAM": { "isOptional": false, "description": "Private upstream address of the Temporal Web UI service.", "defaultValue": "${{temporal-ui.RAILWAY_PRIVATE_DOMAIN}}:8080" }, "UI_USERNAME": { "isOptional": false, "description": "Username required to access the protected Temporal Web UI.", "defaultValue": "admin" } }, "networking": { "serviceDomains": { ":8080": { "port": 8080 } } } }, "50ce8b4f-ddea-4e57-b726-562502d7a4df": { "icon": "https://avatars.githubusercontent.com/u/56493103?s=200&v=4", "name": "temporal-bootstrap", "deploy": { "startCommand": "/bin/sh -c 'set -eu; until temporal operator cluster health --address \"$TEMPORAL_ADDRESS\" >/dev/null 2>&1; do echo \"Waiting for Temporal cluster...\"; sleep 3; done; if ! temporal operator namespace describe --address \"$TEMPORAL_ADDRESS\" --namespace \"$DEFAULT_NAMESPACE\" >/dev/null 2>&1; then temporal operator namespace create --address \"$TEMPORAL_ADDRESS\" --namespace \"$DEFAULT_NAMESPACE\" --retention \"$DEFAULT_NAMESPACE_RETENTION\"; fi; printf \"#!/bin/sh\\nprintf '\\''HTTP/1.1 200 OK\\\\r\\\\nContent-Length: 2\\\\r\\\\nConnection: close\\\\r\\\\n\\\\r\\\\nOK'\\''\\n\" >/tmp/health-handler.sh; chmod +x /tmp/health-handler.sh; echo \"Bootstrap ready; serving healthcheck on port $PORT\"; exec nc -lk -s :: -p \"$PORT\" -e /tmp/health-handler.sh'", "healthcheckPath": "/healthz", "restartPolicyType": "ALWAYS", "restartPolicyMaxRetries": 10 }, "source": { "image": "temporalio/admin-tools:1.31.2" }, "variables": { "PORT": { "isOptional": false, "description": "Internal HTTP port used only for the Railway readiness health check.", "defaultValue": "8080" }, "TEMPORAL_ADDRESS": { "isOptional": false, "description": "Private gRPC endpoint of the Temporal Frontend service.", "defaultValue": "${{temporal-frontend.RAILWAY_PRIVATE_DOMAIN}}:7233" }, "DEFAULT_NAMESPACE": { "isOptional": false, "description": "Namespace created automatically for application Workflows and Workers.", "defaultValue": "default" }, "DEFAULT_NAMESPACE_RETENTION": { "isOptional": false, "description": "Time completed Workflow histories are retained before automatic deletion.", "defaultValue": "72h" } } }, "5d027a0f-2594-4299-89bf-2ea257a4cf24": { "icon": "https://avatars.githubusercontent.com/u/56493103?s=200&v=4", "name": "temporal-system-worker", "deploy": { "startCommand": "/bin/sh -c \"set -eu; printf '{}\\n' > \\\"\\$DYNAMIC_CONFIG_FILE_PATH\\\"; BIND_ON_IP=\\$(getent hosts \\$(hostname) | awk 'NR==1 {print \\$1}'); export BIND_ON_IP; export TEMPORAL_BROADCAST_ADDRESS=\\$BIND_ON_IP; exec temporal-server start --service worker\"", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "temporalio/server:1.31.2" }, "variables": { "DB": { "isOptional": false, "description": "Temporal persistence plugin for PostgreSQL-compatible schemas.", "defaultValue": "postgres12" }, "DBNAME": { "isOptional": false, "description": "Database containing Workflow state and event history.", "defaultValue": "temporal" }, "DB_PORT": { "isOptional": false, "description": "Internal PostgreSQL service port.", "defaultValue": "${{temporal-db.PGPORT}}" }, "ENABLE_ES": { "isOptional": false, "description": "Uses PostgreSQL advanced visibility instead of Elasticsearch.", "defaultValue": "false" }, "LOG_LEVEL": { "isOptional": false, "description": "Temporal server logging level suitable for normal production operation.", "defaultValue": "info" }, "POSTGRES_PWD": { "isOptional": false, "description": "PostgreSQL password shared by the Temporal server roles.", "defaultValue": "${{temporal-db.PGPASSWORD}}" }, "POSTGRES_USER": { "isOptional": false, "description": "PostgreSQL user shared by the Temporal server roles.", "defaultValue": "${{temporal-db.PGUSER}}" }, "SQL_MAX_CONNS": { "isOptional": false, "description": "Maximum persistence database connections opened by each server process.", "defaultValue": "10" }, "POSTGRES_SEEDS": { "isOptional": false, "description": "Private hostname of the Railway PostgreSQL service.", "defaultValue": "${{temporal-db.PGHOST}}" }, "SCHEMA_READY_HOST": { "isOptional": false, "description": "Railway dependency marker ensuring schema initialization is available first.", "defaultValue": "${{temporal-schema.RAILWAY_PRIVATE_DOMAIN}}" }, "SQL_VIS_MAX_CONNS": { "isOptional": false, "description": "Maximum visibility database connections opened by each server process.", "defaultValue": "5" }, "VISIBILITY_DBNAME": { "isOptional": false, "description": "Database containing Workflow visibility and list data.", "defaultValue": "temporal_visibility" }, "NUM_HISTORY_SHARDS": { "isOptional": false, "description": "Number of History shards created for the cluster. Cannot be changed after initialization.", "defaultValue": "512" }, "SQL_MAX_IDLE_CONNS": { "isOptional": false, "description": "Maximum idle persistence connections retained by each server process.", "defaultValue": "10" }, "SQL_VIS_MAX_IDLE_CONNS": { "isOptional": false, "description": "Maximum idle visibility connections retained by each server process.", "defaultValue": "5" }, "DYNAMIC_CONFIG_FILE_PATH": { "isOptional": false, "description": "Runtime path for the Dynamic Config file created during container startup.", "defaultValue": "/tmp/temporal-dynamicconfig.yaml" } } }, "7933cbbe-1831-480e-b552-8e3eb8558a12": { "icon": "https://avatars.githubusercontent.com/u/177543?s=200&v=4", "name": "temporal-db", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "ghcr.io/railwayapp-templates/postgres-ssl:18" }, "variables": { "PGDATA": { "isOptional": false, "description": "Directory inside the persistent volume where PostgreSQL stores its database files.", "defaultValue": "/var/lib/postgresql/data/pgdata" }, "PGHOST": { "isOptional": false, "description": "Railway private hostname used by services in the same project.", "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}" }, "PGPORT": { "isOptional": false, "description": "Internal PostgreSQL server port.", "defaultValue": "5432" }, "PGUSER": { "isOptional": false, "description": "Standard PostgreSQL client alias for the configured database user.", "defaultValue": "${{POSTGRES_USER}}" }, "PGDATABASE": { "isOptional": false, "description": "Standard PostgreSQL client alias for the default database name.", "defaultValue": "${{POSTGRES_DB}}" }, "PGPASSWORD": { "isOptional": false, "description": "Standard PostgreSQL client alias for the generated database password.", "defaultValue": "${{POSTGRES_PASSWORD}}" }, "POSTGRES_DB": { "isOptional": false, "description": "Default PostgreSQL database created when the service initializes.", "defaultValue": "railway" }, "DATABASE_URL": { "isOptional": false, "description": "Private PostgreSQL connection URL for services in the same Railway project.", "defaultValue": "postgresql://${{PGUSER}}:${{POSTGRES_PASSWORD}}@${{RAILWAY_PRIVATE_DOMAIN}}:5432/${{PGDATABASE}}" }, "POSTGRES_USER": { "isOptional": false, "description": "PostgreSQL superuser created during first initialization.", "defaultValue": "postgres" }, "SSL_CERT_DAYS": { "isOptional": false, "description": "Compatibility value for the Railway PostgreSQL SSL image; leave unchanged.", "defaultValue": "820" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Strong PostgreSQL password generated independently for every deployment.", "defaultValue": "{{POSTGRES_PASSWORD}}" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": false, "description": "Graceful shutdown window before Railway terminates the previous PostgreSQL deployment.", "defaultValue": "60" } }, "volumeMounts": { "7933cbbe-1831-480e-b552-8e3eb8558a12": { "mountPath": "/var/lib/postgresql/data" } } }, "c6fa457a-3112-487e-8a2f-b251b98f672e": { "icon": "https://avatars.githubusercontent.com/u/56493103?s=200&v=4", "name": "temporal-matching", "deploy": { "startCommand": "/bin/sh -c \"set -eu; printf '{}\\n' > \\\"\\$DYNAMIC_CONFIG_FILE_PATH\\\"; BIND_ON_IP=\\$(getent hosts \\$(hostname) | awk 'NR==1 {print \\$1}'); export BIND_ON_IP; export TEMPORAL_BROADCAST_ADDRESS=\\$BIND_ON_IP; exec temporal-server start --service matching\"", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "temporalio/server:1.31.2" }, "variables": { "DB": { "isOptional": false, "description": "Temporal persistence plugin for PostgreSQL-compatible schemas.", "defaultValue": "postgres12" }, "DBNAME": { "isOptional": false, "description": "Database containing Workflow state and event history.", "defaultValue": "temporal" }, "DB_PORT": { "isOptional": false, "description": "Internal PostgreSQL service port.", "defaultValue": "${{temporal-db.PGPORT}}" }, "ENABLE_ES": { "isOptional": false, "description": "Uses PostgreSQL advanced visibility instead of Elasticsearch.", "defaultValue": "false" }, "LOG_LEVEL": { "isOptional": false, "description": "Temporal server logging level suitable for normal production operation.", "defaultValue": "info" }, "POSTGRES_PWD": { "isOptional": false, "description": "PostgreSQL password shared by the Temporal server roles.", "defaultValue": "${{temporal-db.PGPASSWORD}}" }, "POSTGRES_USER": { "isOptional": false, "description": "PostgreSQL user shared by the Temporal server roles.", "defaultValue": "${{temporal-db.PGUSER}}" }, "SQL_MAX_CONNS": { "isOptional": false, "description": "Maximum persistence database connections opened by each server process.", "defaultValue": "10" }, "POSTGRES_SEEDS": { "isOptional": false, "description": "Private hostname of the Railway PostgreSQL service.", "defaultValue": "${{temporal-db.PGHOST}}" }, "SCHEMA_READY_HOST": { "isOptional": false, "description": "Railway dependency marker ensuring schema initialization is available first.", "defaultValue": "${{temporal-schema.RAILWAY_PRIVATE_DOMAIN}}" }, "SQL_VIS_MAX_CONNS": { "isOptional": false, "description": "Maximum visibility database connections opened by each server process.", "defaultValue": "5" }, "VISIBILITY_DBNAME": { "isOptional": false, "description": "Database containing Workflow visibility and list data.", "defaultValue": "temporal_visibility" }, "NUM_HISTORY_SHARDS": { "isOptional": false, "description": "Number of History shards created for the cluster. Cannot be changed after initialization.", "defaultValue": "512" }, "SQL_MAX_IDLE_CONNS": { "isOptional": false, "description": "Maximum idle persistence connections retained by each server process.", "defaultValue": "10" }, "SQL_VIS_MAX_IDLE_CONNS": { "isOptional": false, "description": "Maximum idle visibility connections retained by each server process.", "defaultValue": "5" }, "DYNAMIC_CONFIG_FILE_PATH": { "isOptional": false, "description": "Runtime path for the Dynamic Config file created during container startup.", "defaultValue": "/tmp/temporal-dynamicconfig.yaml" } } }, "e24d465c-4794-4d56-8399-cf07a7112ccc": { "icon": "https://avatars.githubusercontent.com/u/56493103?s=200&v=4", "name": "temporal-history", "deploy": { "startCommand": "/bin/sh -c \"set -eu; printf '{}\\n' > \\\"\\$DYNAMIC_CONFIG_FILE_PATH\\\"; BIND_ON_IP=\\$(getent hosts \\$(hostname) | awk 'NR==1 {print \\$1}'); export BIND_ON_IP; export TEMPORAL_BROADCAST_ADDRESS=\\$BIND_ON_IP; exec temporal-server start --service history\"", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "temporalio/server:1.31.2" }, "variables": { "DB": { "isOptional": false, "description": "Temporal persistence plugin for PostgreSQL-compatible schemas.", "defaultValue": "postgres12" }, "DBNAME": { "isOptional": false, "description": "Database containing Workflow state and event history.", "defaultValue": "temporal" }, "DB_PORT": { "isOptional": false, "description": "Internal PostgreSQL service port.", "defaultValue": "${{temporal-db.PGPORT}}" }, "ENABLE_ES": { "isOptional": false, "description": "Uses PostgreSQL advanced visibility instead of Elasticsearch.", "defaultValue": "false" }, "LOG_LEVEL": { "isOptional": false, "description": "Temporal server logging level suitable for normal production operation.", "defaultValue": "info" }, "POSTGRES_PWD": { "isOptional": false, "description": "PostgreSQL password shared by the Temporal server roles.", "defaultValue": "${{temporal-db.PGPASSWORD}}" }, "POSTGRES_USER": { "isOptional": false, "description": "PostgreSQL user shared by the Temporal server roles.", "defaultValue": "${{temporal-db.PGUSER}}" }, "SQL_MAX_CONNS": { "isOptional": false, "description": "Maximum persistence database connections opened by each server process.", "defaultValue": "10" }, "POSTGRES_SEEDS": { "isOptional": false, "description": "Private hostname of the Railway PostgreSQL service.", "defaultValue": "${{temporal-db.PGHOST}}" }, "SCHEMA_READY_HOST": { "isOptional": false, "description": "Railway dependency marker ensuring schema initialization is available first.", "defaultValue": "${{temporal-schema.RAILWAY_PRIVATE_DOMAIN}}" }, "SQL_VIS_MAX_CONNS": { "isOptional": false, "description": "Maximum visibility database connections opened by each server process.", "defaultValue": "5" }, "VISIBILITY_DBNAME": { "isOptional": false, "description": "Database containing Workflow visibility and list data.", "defaultValue": "temporal_visibility" }, "NUM_HISTORY_SHARDS": { "isOptional": false, "description": "Number of History shards created for the cluster. Cannot be changed after initialization.", "defaultValue": "512" }, "SQL_MAX_IDLE_CONNS": { "isOptional": false, "description": "Maximum idle persistence connections retained by each server process.", "defaultValue": "10" }, "SQL_VIS_MAX_IDLE_CONNS": { "isOptional": false, "description": "Maximum idle visibility connections retained by each server process.", "defaultValue": "5" }, "DYNAMIC_CONFIG_FILE_PATH": { "isOptional": false, "description": "Runtime path for the Dynamic Config file created during container startup.", "defaultValue": "/tmp/temporal-dynamicconfig.yaml" } } }, "f2d7f72a-a424-4a27-9801-3ab44913fcca": { "icon": "https://avatars.githubusercontent.com/u/56493103?s=200&v=4", "name": "temporal-frontend", "deploy": { "startCommand": "/bin/sh -c \"set -eu; printf '{}\\n' > \\\"\\$DYNAMIC_CONFIG_FILE_PATH\\\"; BIND_ON_IP=\\$(getent hosts \\$(hostname) | awk 'NR==1 {print \\$1}'); export BIND_ON_IP; export TEMPORAL_BROADCAST_ADDRESS=\\$BIND_ON_IP; exec temporal-server start --service frontend\"", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "temporalio/server:1.31.2" }, "variables": { "DB": { "isOptional": false, "description": "Temporal persistence plugin for PostgreSQL-compatible schemas.", "defaultValue": "postgres12" }, "DBNAME": { "isOptional": false, "description": "Database containing Workflow state and event history.", "defaultValue": "temporal" }, "DB_PORT": { "isOptional": false, "description": "Internal PostgreSQL service port.", "defaultValue": "${{temporal-db.PGPORT}}" }, "ENABLE_ES": { "isOptional": false, "description": "Uses PostgreSQL advanced visibility instead of Elasticsearch.", "defaultValue": "false" }, "LOG_LEVEL": { "isOptional": false, "description": "Temporal server logging level suitable for normal production operation.", "defaultValue": "info" }, "POSTGRES_PWD": { "isOptional": false, "description": "PostgreSQL password shared by the Temporal server roles.", "defaultValue": "${{temporal-db.PGPASSWORD}}" }, "POSTGRES_USER": { "isOptional": false, "description": "PostgreSQL user shared by the Temporal server roles.", "defaultValue": "${{temporal-db.PGUSER}}" }, "SQL_MAX_CONNS": { "isOptional": false, "description": "Maximum persistence database connections opened by each server process.", "defaultValue": "10" }, "POSTGRES_SEEDS": { "isOptional": false, "description": "Private hostname of the Railway PostgreSQL service.", "defaultValue": "${{temporal-db.PGHOST}}" }, "SCHEMA_READY_HOST": { "isOptional": false, "description": "Railway dependency marker ensuring schema initialization is available first.", "defaultValue": "${{temporal-schema.RAILWAY_PRIVATE_DOMAIN}}" }, "SQL_VIS_MAX_CONNS": { "isOptional": false, "description": "Maximum visibility database connections opened by each server process.", "defaultValue": "5" }, "VISIBILITY_DBNAME": { "isOptional": false, "description": "Database containing Workflow visibility and list data.", "defaultValue": "temporal_visibility" }, "NUM_HISTORY_SHARDS": { "isOptional": false, "description": "Number of History shards created for the cluster. Cannot be changed after initialization.", "defaultValue": "512" }, "SQL_MAX_IDLE_CONNS": { "isOptional": false, "description": "Maximum idle persistence connections retained by each server process.", "defaultValue": "10" }, "SQL_VIS_MAX_IDLE_CONNS": { "isOptional": false, "description": "Maximum idle visibility connections retained by each server process.", "defaultValue": "5" }, "DYNAMIC_CONFIG_FILE_PATH": { "isOptional": false, "description": "Runtime path for the Dynamic Config file created during container startup.", "defaultValue": "/tmp/temporal-dynamicconfig.yaml" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "temporal-ui-auth", "method": "GET", "path": "/healthz", "expect_status": 200 } }, "resources": { "expected_services": 9, "needs_volume": true }, "generated_at": "2026-09-20T22:14:37.505Z", "generator_version": "0.1.0", "status": "validated", "validated_at": "2026-09-19T13:32:31.413Z", "success_rate_30d": 1, "validation": { "last_run_id": "run_aeaa79767b1b48daa64d", "checks": [ { "name": "workflow_completed", "passed": true }, { "name": "all_services_deployed", "passed": true }, { "name": "healthcheck", "passed": true }, { "name": "stays_up", "passed": true } ], "typical_ready_seconds": 89, "typical_build_seconds": 0, "typical_start_seconds": 10, "slowest_service": "temporal-ui-auth" } }