{
  "manifest_version": "1.0.0",
  "template": {
    "id": "1e7a868e-ab24-44f9-99ce-0536f637fedb",
    "slug": "unkey-template",
    "name": "unkey-template",
    "description": "Template for a self-hosted Unkey instance.",
    "url": "https://railway.com/deploy/unkey-template"
  },
  "services": [
    {
      "name": "unkey-vault",
      "source": {
        "repo": "https://github.com/toxzak-svg/railway-unkey"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "Redis",
      "source": {
        "image": "redis:8.2.1"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "tcp_ports": [
        6379
      ],
      "http": false
    },
    {
      "name": "unkey-api",
      "source": {
        "repo": "https://github.com/toxzak-svg/railway-unkey"
      },
      "needs_volume": false,
      "http": false
    },
    {
      "name": "clickhouse",
      "source": {
        "repo": "https://github.com/toxzak-svg/railway-unkey"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/clickhouse",
      "http": false
    },
    {
      "name": "MySQL",
      "source": {
        "image": "mysql:9.4"
      },
      "needs_volume": true,
      "volume_mount_path": "/var/lib/mysql",
      "tcp_ports": [
        3306
      ],
      "http": false
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "unkey-vault",
      "description": "Provide a value for PORT.",
      "secret": false,
      "strategy": "default",
      "default": "8060"
    },
    {
      "key": "VAULT_TOKEN",
      "service": "unkey-vault",
      "description": "Provide a value for VAULT_TOKEN.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "VAULT_MASTER_KEYS",
      "service": "unkey-vault",
      "description": "Provide a value for VAULT_MASTER_KEYS.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDISHOST",
      "service": "Redis",
      "description": "Provide a value for REDISHOST.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "REDISPORT",
      "service": "Redis",
      "description": "Provide a value for REDISPORT.",
      "secret": false,
      "strategy": "default",
      "default": "6379"
    },
    {
      "key": "REDISUSER",
      "service": "Redis",
      "description": "Provide a value for REDISUSER.",
      "secret": false,
      "strategy": "default",
      "default": "default"
    },
    {
      "key": "REDIS_URL",
      "service": "Redis",
      "description": "Connection string for connecting to redis using the private network",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDISPASSWORD",
      "service": "Redis",
      "description": "Provide a value for REDISPASSWORD.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "REDIS_PASSWORD",
      "service": "Redis",
      "description": "Provide a value for REDIS_PASSWORD.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "REDIS_PUBLIC_URL",
      "service": "Redis",
      "description": "Connection string for connecting to redis externally",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "PORT",
      "service": "unkey-api",
      "description": "Provide a value for PORT.",
      "secret": false,
      "strategy": "default",
      "default": "7070"
    },
    {
      "key": "REDIS_URL",
      "service": "unkey-api",
      "description": "Provide a value for REDIS_URL.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "VAULT_URL",
      "service": "unkey-api",
      "description": "Provide a value for VAULT_URL.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "VAULT_TOKEN",
      "service": "unkey-api",
      "description": "Provide a value for VAULT_TOKEN.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DATABASE_HOST",
      "service": "unkey-api",
      "description": "Provide a value for DATABASE_HOST.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DATABASE_NAME",
      "service": "unkey-api",
      "description": "Provide a value for DATABASE_NAME.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DATABASE_PORT",
      "service": "unkey-api",
      "description": "Provide a value for DATABASE_PORT.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "CLICKHOUSE_URL",
      "service": "unkey-api",
      "description": "Provide a value for CLICKHOUSE_URL.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "CLICKHOUSE_USER",
      "service": "unkey-api",
      "description": "Provide a value for CLICKHOUSE_USER.",
      "secret": false,
      "strategy": "default",
      "default": "default"
    },
    {
      "key": "DATABASE_PASSWORD",
      "service": "unkey-api",
      "description": "Provide a value for DATABASE_PASSWORD.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "DATABASE_USERNAME",
      "service": "unkey-api",
      "description": "Provide a value for DATABASE_USERNAME.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "CLICKHOUSE_PASSWORD",
      "service": "unkey-api",
      "description": "Provide a value for CLICKHOUSE_PASSWORD.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "CLICKHOUSE_USER",
      "service": "clickhouse",
      "description": "Provide a value for CLICKHOUSE_USER.",
      "secret": false,
      "strategy": "default",
      "default": "default"
    },
    {
      "key": "CLICKHOUSE_PASSWORD",
      "service": "clickhouse",
      "description": "Generate once. Same value as vault.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT",
      "service": "clickhouse",
      "description": "Provide a value for CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT.",
      "secret": false,
      "strategy": "default",
      "default": "1"
    },
    {
      "key": "MYSQLHOST",
      "service": "MySQL",
      "description": "Railway Private Domain Name.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "MYSQLPORT",
      "service": "MySQL",
      "description": "MySQL port.",
      "secret": false,
      "strategy": "default",
      "default": "3306"
    },
    {
      "key": "MYSQLUSER",
      "service": "MySQL",
      "description": "MySQL user, used for the Data panel.",
      "secret": false,
      "strategy": "default",
      "default": "root"
    },
    {
      "key": "MYSQL_URL",
      "service": "MySQL",
      "description": "URL to connect to MySQL.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_private_domain"
    },
    {
      "key": "MYSQLDATABASE",
      "service": "MySQL",
      "description": "Default database, used for Data panel.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MYSQLPASSWORD",
      "service": "MySQL",
      "description": "Root password, used for Data panel.",
      "secret": true,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MYSQL_DATABASE",
      "service": "MySQL",
      "description": "Database to be created on image startup.",
      "secret": false,
      "strategy": "default",
      "default": "railway"
    },
    {
      "key": "MYSQL_PUBLIC_URL",
      "service": "MySQL",
      "description": "URL to connect to MySQL DB, used for Data panel.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "reference_variable"
    },
    {
      "key": "MYSQL_ROOT_PASSWORD",
      "service": "MySQL",
      "description": "Root password for MySQL DB.",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "unkey-template"
      }
    },
    "cli": "railway deploy --template unkey-template",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "1e7a868e-ab24-44f9-99ce-0536f637fedb",
            "serializedConfig": {
              "services": {
                "21a495bf-6b5e-425e-ba59-b507a36583fe": {
                  "name": "unkey-vault",
                  "source": {
                    "repo": "toxzak-svg/railway-unkey",
                    "branch": null,
                    "rootDirectory": "/vault"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "8060"
                    },
                    "VAULT_TOKEN": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "${{REPLACEME_SECRET}}"
                    },
                    "VAULT_MASTER_KEYS": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "${{REPLACEME_SECRET_64}}"
                    }
                  }
                },
                "2eb13268-d977-4d6a-8ee2-637c8dd69730": {
                  "icon": "https://cdn.sanity.io/images/sy1jschh/production/0ce0bfdcfbdbf69662b1116671f97c2dd788b655-157x157.svg",
                  "name": "Redis",
                  "deploy": {
                    "startCommand": "/bin/sh -c \"rm -rf $RAILWAY_VOLUME_MOUNT_PATH/lost+found/ && exec docker-entrypoint.sh redis-server --requirepass $REDIS_PASSWORD --save 60 1 --dir $RAILWAY_VOLUME_MOUNT_PATH\""
                  },
                  "source": {
                    "image": "redis:8.2.1"
                  },
                  "variables": {
                    "REDISHOST": {
                      "isOptional": false,
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "REDISPORT": {
                      "isOptional": false,
                      "defaultValue": "6379"
                    },
                    "REDISUSER": {
                      "isOptional": false,
                      "defaultValue": "default"
                    },
                    "REDIS_URL": {
                      "isOptional": false,
                      "description": "Connection string for connecting to redis using the private network",
                      "defaultValue": "redis://${{ REDISUSER }}:${{ REDIS_PASSWORD }}@${{ REDISHOST }}:${{ REDISPORT }}"
                    },
                    "REDISPASSWORD": {
                      "isOptional": false,
                      "defaultValue": "${{REDIS_PASSWORD}}"
                    },
                    "REDIS_PASSWORD": {
                      "isOptional": false,
                      "defaultValue": "{{REDIS_PASSWORD}}"
                    },
                    "REDIS_PUBLIC_URL": {
                      "description": "Connection string for connecting to redis externally",
                      "defaultValue": "redis://default:${{ REDIS_PASSWORD }}@${{ RAILWAY_TCP_PROXY_DOMAIN }}:${{ RAILWAY_TCP_PROXY_PORT }}"
                    }
                  },
                  "networking": {
                    "tcpProxies": {
                      "6379": {}
                    }
                  },
                  "volumeMounts": {
                    "2eb13268-d977-4d6a-8ee2-637c8dd69730": {
                      "mountPath": "/data"
                    }
                  },
                  "haTemplateCode": "redis-ha",
                  "haConversionConfig": {
                    "edge": {
                      "label": "Reverse Proxies",
                      "options": [
                        1,
                        2
                      ],
                      "nodeLabel": "HAProxy",
                      "description": "HAProxy instances routing writes to the primary",
                      "defaultValue": 2
                    },
                    "replica": {
                      "label": "Redis Replicas",
                      "options": [
                        2,
                        3,
                        4,
                        5
                      ],
                      "nodeLabel": "Redis",
                      "description": "Nodes running Redis + colocated Sentinel",
                      "defaultValue": 2
                    },
                    "internal": null,
                    "description": "This will convert your Redis instance to an HA cluster with Sentinel failover and HAProxy routing to the primary."
                  }
                },
                "4d4c6e78-395b-4438-93a8-a8ae31e3234f": {
                  "name": "unkey-api",
                  "source": {
                    "repo": "toxzak-svg/railway-unkey",
                    "branch": null,
                    "rootDirectory": "/api"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "7070"
                    },
                    "REDIS_URL": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "${{Redis.REDIS_URL}}"
                    },
                    "VAULT_URL": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "http://${{unkey-vault.RAILWAY_PRIVATE_DOMAIN}}:8060"
                    },
                    "VAULT_TOKEN": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "${{unkey-vault.VAULT_TOKEN}}"
                    },
                    "DATABASE_HOST": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "${{MySQL.MYSQLHOST}}"
                    },
                    "DATABASE_NAME": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "${{MySQL.MYSQLDATABASE}}"
                    },
                    "DATABASE_PORT": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "${{MySQL.MYSQLPORT}}"
                    },
                    "CLICKHOUSE_URL": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "http://default:${{unkey-vault.VAULT_TOKEN}}@${{clickhouse.RAILWAY_PRIVATE_DOMAIN}}:8123"
                    },
                    "CLICKHOUSE_USER": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "default"
                    },
                    "DATABASE_PASSWORD": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "${{MySQL.MYSQLPASSWORD}}"
                    },
                    "DATABASE_USERNAME": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "${{MySQL.MYSQLUSER}}"
                    },
                    "CLICKHOUSE_PASSWORD": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "${{unkey-api.VAULT_TOKEN}}"
                    }
                  }
                },
                "e6e3ceb6-bae9-48c3-b835-65a1e5658cb8": {
                  "name": "clickhouse",
                  "source": {
                    "repo": "toxzak-svg/railway-unkey",
                    "branch": null,
                    "rootDirectory": "/clickhouse"
                  },
                  "variables": {
                    "CLICKHOUSE_USER": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "default"
                    },
                    "CLICKHOUSE_PASSWORD": {
                      "isOptional": false,
                      "description": "Generate once. Same value as vault.",
                      "defaultValue": "${{unkey-vault.VAULT_TOKEN}}"
                    },
                    "CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT": {
                      "isOptional": false,
                      "description": "",
                      "defaultValue": "1"
                    }
                  },
                  "volumeMounts": {
                    "e6e3ceb6-bae9-48c3-b835-65a1e5658cb8": {
                      "mountPath": "/var/lib/clickhouse"
                    }
                  }
                },
                "f1f73cd8-850f-4b75-a7ce-fcf4e178a94a": {
                  "icon": "https://devicons.railway.app/i/mysql.svg",
                  "name": "MySQL",
                  "build": {},
                  "deploy": {
                    "startCommand": "docker-entrypoint.sh mysqld --innodb-use-native-aio=0 --disable-log-bin --performance_schema=0 --innodb-buffer-pool-size=1G",
                    "healthcheckPath": null,
                    "requiredMountPath": "/var/lib/mysql"
                  },
                  "source": {
                    "image": "mysql:9.4"
                  },
                  "variables": {
                    "MYSQLHOST": {
                      "isOptional": false,
                      "description": "Railway Private Domain Name.",
                      "defaultValue": "${{RAILWAY_PRIVATE_DOMAIN}}"
                    },
                    "MYSQLPORT": {
                      "isOptional": false,
                      "description": "MySQL port.",
                      "defaultValue": "3306"
                    },
                    "MYSQLUSER": {
                      "isOptional": false,
                      "description": "MySQL user, used for the Data panel.",
                      "defaultValue": "root"
                    },
                    "MYSQL_URL": {
                      "isOptional": false,
                      "description": "URL to connect to MySQL.",
                      "defaultValue": "mysql://${{ MYSQLUSER }}:${{ MYSQL_ROOT_PASSWORD }}@${{ RAILWAY_PRIVATE_DOMAIN }}:3306/${{ MYSQL_DATABASE }}"
                    },
                    "MYSQLDATABASE": {
                      "isOptional": false,
                      "description": "Default database, used for Data panel.",
                      "defaultValue": "${{ MYSQL_DATABASE }}"
                    },
                    "MYSQLPASSWORD": {
                      "isOptional": false,
                      "description": "Root password, used for Data panel.",
                      "defaultValue": "${{ MYSQL_ROOT_PASSWORD }}"
                    },
                    "MYSQL_DATABASE": {
                      "isOptional": false,
                      "description": "Database to be created on image startup.",
                      "defaultValue": "railway"
                    },
                    "MYSQL_PUBLIC_URL": {
                      "description": "URL to connect to MySQL DB, used for Data panel.",
                      "defaultValue": "mysql://${{ MYSQLUSER }}:${{ MYSQL_ROOT_PASSWORD }}@${{ RAILWAY_TCP_PROXY_DOMAIN }}:${{ RAILWAY_TCP_PROXY_PORT }}/${{ MYSQL_DATABASE }}"
                    },
                    "MYSQL_ROOT_PASSWORD": {
                      "isOptional": false,
                      "description": "Root password for MySQL DB.",
                      "defaultValue": "{{MYSQL_ROOT_PASSWORD}}"
                    }
                  },
                  "networking": {
                    "tcpProxies": {
                      "3306": {}
                    },
                    "serviceDomains": {}
                  },
                  "volumeMounts": {
                    "f1f73cd8-850f-4b75-a7ce-fcf4e178a94a": {
                      "mountPath": "/var/lib/mysql"
                    }
                  },
                  "haTemplateCode": "mysql-ha",
                  "haConversionConfig": {
                    "edge": {
                      "label": "Reverse Proxies",
                      "options": [
                        1,
                        2
                      ],
                      "nodeLabel": "HAProxy",
                      "description": "HAProxy instances routing writes to the primary",
                      "defaultValue": 2
                    },
                    "replica": {
                      "label": "MySQL Replicas",
                      "options": [
                        2,
                        4,
                        6,
                        8
                      ],
                      "nodeLabel": "MySQL",
                      "description": "Requires odd count for quorum",
                      "defaultValue": 2
                    },
                    "internal": null,
                    "description": "This will convert your MySQL instance to an HA cluster with Group Replication failover and HAProxy routing to the primary.",
                    "supportedImageMajorVersions": [
                      8,
                      9
                    ]
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 5,
    "needs_volume": true
  },
  "generated_at": "2026-09-20T10:14:37.339Z",
  "generator_version": "0.1.0",
  "status": "degraded",
  "validated_at": "2026-09-20T15:19:01.095Z",
  "success_rate_30d": 0,
  "validation": {
    "last_run_id": "run_aca25013bb874b2ea1bb",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": false,
        "detail": "BUILDING,QUEUED,FAILED,SUCCESS,SUCCESS"
      }
    ]
  }
}