{
  "manifest_version": "1.0.0",
  "template": {
    "id": "9ede46ca-63f2-4498-b37d-85da15c549e3",
    "slug": "vault-cortex",
    "name": "Vault Cortex",
    "description": "MCP server for your Obsidian vault: search, memory, tasks, files, OAuth 2.1",
    "url": "https://railway.com/deploy/vault-cortex",
    "upstream": {
      "image": "ghcr.io/aliasunder/vault-cortex:remote"
    }
  },
  "status": "unvalidated",
  "validated_at": null,
  "success_rate_30d": null,
  "services": [
    {
      "name": "vault-cortex",
      "source": {
        "image": "ghcr.io/aliasunder/vault-cortex:remote"
      },
      "needs_volume": true,
      "volume_mount_path": "/persist",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "vault-cortex",
      "description": "The port the image listens on. Leave as is.",
      "secret": false,
      "strategy": "default",
      "default": "8000"
    },
    {
      "key": "SYNC_MODE",
      "service": "vault-cortex",
      "description": "Sync direction: bidirectional, pull-only (server edits are kept locally but never uploaded), or mirror-remote (server edits are undone; the server is an exact copy)",
      "secret": false,
      "strategy": "default",
      "default": "bidirectional"
    },
    {
      "key": "VAULT_NAME",
      "service": "vault-cortex",
      "description": "Your vault's name, the same as it is in Obsidian",
      "secret": false,
      "strategy": "ask_user"
    },
    {
      "key": "DEVICE_NAME",
      "service": "vault-cortex",
      "description": "The device name Obsidian Sync shows for this container",
      "secret": false,
      "strategy": "default",
      "default": "vault-cortex"
    },
    {
      "key": "STORAGE_ROOT",
      "service": "vault-cortex",
      "description": "Where the volume is mounted — vault, search index, Sync device state, and logs live under it. Leave as is.",
      "secret": false,
      "strategy": "default",
      "default": "/persist"
    },
    {
      "key": "READONLY_MODE",
      "service": "vault-cortex",
      "description": "Set true to hide every tool that changes the vault — clients can only read and search",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "MCP_AUTH_TOKEN",
      "service": "vault-cortex",
      "description": "Generated for you — the token your MCP client enters on the consent page",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "MEMORY_ENABLED",
      "service": "vault-cortex",
      "description": "The About Me/ memory layer and its tools. Set false to hide them and skip creating the folder",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "TRUST_PROXY_HOPS",
      "service": "vault-cortex",
      "description": "Railway proxies between a visitor and the container, so the server sees the visitor's real address",
      "secret": false,
      "strategy": "default",
      "default": "2"
    },
    {
      "key": "CONFLICT_STRATEGY",
      "service": "vault-cortex",
      "description": "Obsidian Sync conflict resolution: merge integrates changes automatically; conflict writes a separate conflict file",
      "secret": false,
      "strategy": "default",
      "default": "merge"
    },
    {
      "key": "EMBEDDING_ENABLED",
      "service": "vault-cortex",
      "description": "Semantic search. Set false to skip the models and use keyword search only — fits in much less memory",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "FILE_TOOLS_ENABLED",
      "service": "vault-cortex",
      "description": "vault_read_file and vault_list_files. Set false when Obsidian Sync has attachment syncing off",
      "secret": false,
      "strategy": "default",
      "default": "true"
    },
    {
      "key": "RAILWAY_HEALTHCHECK_TIMEOUT_SEC",
      "service": "vault-cortex",
      "description": "How long Railway waits for the first health check — the first start downloads the vault and builds the index",
      "secret": false,
      "strategy": "default",
      "default": "900"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "vault-cortex"
      }
    },
    "cli": "railway deploy --template vault-cortex",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "9ede46ca-63f2-4498-b37d-85da15c549e3",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "6c7636d6-6e90-4a5e-8180-5d68f994d1b1": {
                  "icon": "https://raw.githubusercontent.com/aliasunder/vault-cortex/main/assets/icon-400.png",
                  "name": "vault-cortex",
                  "deploy": {
                    "healthcheckPath": "/healthz",
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "image": "ghcr.io/aliasunder/vault-cortex:remote"
                  },
                  "variables": {
                    "TZ": {
                      "isOptional": true,
                      "description": "Your timezone as an IANA name, like America/Toronto (list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List) — decides what \"today\" means for daily notes, task due dates, and memory timestamps. Leave empty for UTC",
                      "defaultValue": ""
                    },
                    "PORT": {
                      "isOptional": false,
                      "description": "The port the image listens on. Leave as is.",
                      "defaultValue": "8000"
                    },
                    "SYNC_MODE": {
                      "description": "Sync direction: bidirectional, pull-only (server edits are kept locally but never uploaded), or mirror-remote (server edits are undone; the server is an exact copy)",
                      "defaultValue": "bidirectional"
                    },
                    "VAULT_NAME": {
                      "isOptional": false,
                      "description": "Your vault's name, the same as it is in Obsidian",
                      "defaultValue": "{{VAULT_NAME}}"
                    },
                    "DEVICE_NAME": {
                      "isOptional": false,
                      "description": "The device name Obsidian Sync shows for this container",
                      "defaultValue": "vault-cortex"
                    },
                    "STORAGE_ROOT": {
                      "isOptional": false,
                      "description": "Where the volume is mounted — vault, search index, Sync device state, and logs live under it. Leave as is.",
                      "defaultValue": "/persist"
                    },
                    "READONLY_MODE": {
                      "description": "Set true to hide every tool that changes the vault — clients can only read and search",
                      "defaultValue": "false"
                    },
                    "MCP_AUTH_TOKEN": {
                      "isOptional": false,
                      "description": "Generated for you — the token your MCP client enters on the consent page",
                      "defaultValue": "{{MCP_AUTH_TOKEN}}"
                    },
                    "MEMORY_ENABLED": {
                      "description": "The About Me/ memory layer and its tools. Set false to hide them and skip creating the folder",
                      "defaultValue": "true"
                    },
                    "VAULT_PASSWORD": {
                      "isOptional": true,
                      "description": "Only if your vault uses end-to-end encryption; otherwise leave empty",
                      "defaultValue": ""
                    },
                    "SYNC_FILE_TYPES": {
                      "isOptional": true,
                      "description": "Attachment types to sync: image, audio, video, pdf, unsupported — the same toggles as Obsidian's Sync → Selective sync. **Leave Empty** to keep the Sync client's default",
                      "defaultValue": ""
                    },
                    "TRUST_PROXY_HOPS": {
                      "isOptional": false,
                      "description": "Railway proxies between a visitor and the container, so the server sees the visitor's real address",
                      "defaultValue": "2"
                    },
                    "CONFLICT_STRATEGY": {
                      "description": "Obsidian Sync conflict resolution: merge integrates changes automatically; conflict writes a separate conflict file",
                      "defaultValue": "merge"
                    },
                    "EMBEDDING_ENABLED": {
                      "description": "Semantic search. Set false to skip the models and use keyword search only — fits in much less memory",
                      "defaultValue": "true"
                    },
                    "FILE_TOOLS_ENABLED": {
                      "description": "vault_read_file and vault_list_files. Set false when Obsidian Sync has attachment syncing off",
                      "defaultValue": "true"
                    },
                    "OBSIDIAN_AUTH_TOKEN": {
                      "isOptional": true,
                      "description": "Obsidian Sync login token. Leave empty to sign in through the /setup page after deploy, or paste a token from `npx vault-cortex@latest get-sync-token`",
                      "defaultValue": ""
                    },
                    "SYNC_EXCLUDED_FOLDERS": {
                      "isOptional": true,
                      "description": "Folders to leave out of sync, comma-separated — the same list as Obsidian's Sync → Excluded folders. **Leave Empty** to exclude nothing",
                      "defaultValue": ""
                    },
                    "RAILWAY_HEALTHCHECK_TIMEOUT_SEC": {
                      "isOptional": false,
                      "description": "How long Railway waits for the first health check — the first start downloads the vault and builds the index",
                      "defaultValue": "900"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:8000": {
                        "port": 8000
                      }
                    }
                  },
                  "volumeMounts": {
                    "6c7636d6-6e90-4a5e-8180-5d68f994d1b1": {
                      "mountPath": "/persist"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "vault-cortex",
      "method": "GET",
      "path": "/healthz",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-09-04T13:32:45.587Z",
  "generator_version": "0.1.0"
}