{
  "manifest_version": "1.0.0",
  "template": {
    "id": "ad8534ce-8149-439b-b68f-4176c324da16",
    "slug": "tsidp",
    "name": "tsidp",
    "description": "A simple OIDC / OAuth Identity Provider (IdP) server for your tailnet.",
    "url": "https://railway.com/deploy/tsidp",
    "upstream": {
      "image": "ghcr.io/tailscale/tsidp:latest"
    }
  },
  "services": [
    {
      "name": "tsidp",
      "source": {
        "image": "ghcr.io/tailscale/tsidp:latest"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": false
    }
  ],
  "required_inputs": [
    {
      "key": "TS_STATE_DIR",
      "service": "tsidp",
      "description": "Directory path to save tsnet and tsidp state. Template defaults to /data.",
      "secret": false,
      "strategy": "default",
      "default": "/data"
    },
    {
      "key": "TAILSCALE_USE_WIP_CODE",
      "service": "tsidp",
      "description": "Needs to be set until version 1.0",
      "secret": false,
      "strategy": "default",
      "default": "1"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "tsidp"
      }
    },
    "cli": "railway deploy --template tsidp",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "ad8534ce-8149-439b-b68f-4176c324da16",
            "serializedConfig": {
              "services": {
                "47a3ab9c-d800-491b-9365-eb379f60afe9": {
                  "icon": null,
                  "name": "tsidp",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null
                  },
                  "source": {
                    "image": "ghcr.io/tailscale/tsidp:latest"
                  },
                  "variables": {
                    "TSIDP_LOG": {
                      "isOptional": true,
                      "description": "Set logging level: debug, info, warn, error",
                      "defaultValue": ""
                    },
                    "TSIDP_PORT": {
                      "isOptional": true,
                      "description": "Port to listen on. Defaults to 443.",
                      "defaultValue": ""
                    },
                    "TS_AUTHKEY": {
                      "isOptional": true,
                      "description": "RECOMMENDED — Key for registering a tsidp as a new node on your tailnet. If omitted a link will be printed to manually register.",
                      "defaultValue": ""
                    },
                    "TS_HOSTNAME": {
                      "isOptional": true,
                      "description": "hostname on tailnet. Will become <hostname>.your-tailnet.ts.net Defaults to idp",
                      "defaultValue": ""
                    },
                    "TS_STATE_DIR": {
                      "isOptional": true,
                      "description": "Directory path to save tsnet and tsidp state. Template defaults to /data.",
                      "defaultValue": "/data"
                    },
                    "TSIDP_ENABLE_STS": {
                      "isOptional": true,
                      "description": "Enable OAuth token exchange using RFC 8693.",
                      "defaultValue": ""
                    },
                    "TSIDP_USE_FUNNEL": {
                      "isOptional": true,
                      "description": "Use Tailscale Funnel to make tsidp available on the public internet so it works with SaaS products.",
                      "defaultValue": ""
                    },
                    "TAILSCALE_USE_WIP_CODE": {
                      "isOptional": false,
                      "description": "Needs to be set until version 1.0",
                      "defaultValue": "1"
                    }
                  },
                  "volumeMounts": {
                    "47a3ab9c-d800-491b-9365-eb379f60afe9": {
                      "mountPath": "/data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-09-20T10:14:37.339Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-09-18T19:30:22.960Z",
  "success_rate_30d": 0.6,
  "validation": {
    "last_run_id": "run_454ba9de9fa44b3bb46b",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 61,
    "typical_build_seconds": 0,
    "typical_start_seconds": 0,
    "slowest_service": "tsidp"
  }
}