{
  "manifest_version": "1.0.0",
  "template": {
    "id": "1b7e587e-3abc-4ce1-847a-2e92899eb1d8",
    "slug": "vaultwarden-5",
    "name": "Vaultwarden",
    "description": "Vaultwarden — self-hosted Bitwarden-compatible password manager server",
    "url": "https://railway.com/deploy/vaultwarden-5",
    "upstream": {
      "repo_url": "https://github.com/INAPP-Mobile/vaultwarden"
    }
  },
  "services": [
    {
      "name": "vaultwarden",
      "source": {
        "repo": "https://github.com/INAPP-Mobile/vaultwarden"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "vaultwarden",
      "description": "Port Vaultwarden listens on (Railway-injected, keep at 8080)",
      "secret": false,
      "strategy": "default",
      "default": "8080"
    },
    {
      "key": "ADMIN_TOKEN",
      "service": "vaultwarden",
      "description": "Token to access the admin panel at /admin. Auto-generated on deploy.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "DATA_FOLDER",
      "service": "vaultwarden",
      "description": "Folder for the database and data files. Must match the volume mount path (/data) so data persists.",
      "secret": false,
      "strategy": "default",
      "default": "/data"
    },
    {
      "key": "ROCKET_ADDRESS",
      "service": "vaultwarden",
      "description": "Bind address for the web server (0.0.0.0 = all interfaces)",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0"
    },
    {
      "key": "SIGNUPS_VERIFY",
      "service": "vaultwarden",
      "description": "Require email verification on signup. Default false for one-click deployment.",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "DISABLE_ADMIN_TOKEN",
      "service": "vaultwarden",
      "description": "Set to true to disable the admin panel. Default false = admin panel enabled.",
      "secret": true,
      "strategy": "default",
      "default": "false"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "vaultwarden-5"
      }
    },
    "cli": "railway deploy --template vaultwarden-5",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "1b7e587e-3abc-4ce1-847a-2e92899eb1d8",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "2c9c8b58-8a08-4cbd-9994-29ff317e9273": {
                  "icon": null,
                  "name": "vaultwarden",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": null,
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 10
                  },
                  "source": {
                    "repo": "https://github.com/INAPP-Mobile/vaultwarden",
                    "rootDirectory": null
                  },
                  "variables": {
                    "PORT": {
                      "description": "Port Vaultwarden listens on (Railway-injected, keep at 8080)",
                      "defaultValue": "8080"
                    },
                    "IP_HEADER": {
                      "isOptional": true,
                      "description": "HTTP header used to determine the client IP (e.g. X-Real-IP). Leave empty to use the connection IP.",
                      "defaultValue": ""
                    },
                    "ADMIN_TOKEN": {
                      "description": "Token to access the admin panel at /admin. Auto-generated on deploy.",
                      "defaultValue": "{{ADMIN_TOKEN}}"
                    },
                    "DATA_FOLDER": {
                      "description": "Folder for the database and data files. Must match the volume mount path (/data) so data persists.",
                      "defaultValue": "/data"
                    },
                    "DATABASE_URL": {
                      "isOptional": true,
                      "description": "Database connection string. Leave empty to use the bundled SQLite database.",
                      "defaultValue": ""
                    },
                    "HIBP_API_KEY": {
                      "isOptional": true,
                      "description": "Have I Been Pwned API key for breach checking. Optional — leave empty to skip checks.",
                      "defaultValue": ""
                    },
                    "ROCKET_ADDRESS": {
                      "description": "Bind address for the web server (0.0.0.0 = all interfaces)",
                      "defaultValue": "0.0.0.0"
                    },
                    "SIGNUPS_VERIFY": {
                      "description": "Require email verification on signup. Default false for one-click deployment.",
                      "defaultValue": "false"
                    },
                    "DISABLE_ADMIN_TOKEN": {
                      "description": "Set to true to disable the admin panel. Default false = admin panel enabled.",
                      "defaultValue": "false"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>:8080": {
                        "port": 8080
                      }
                    }
                  },
                  "volumeMounts": {
                    "2c9c8b58-8a08-4cbd-9994-29ff317e9273": {
                      "mountPath": "/data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {},
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-09-21T22:14:44.200Z",
  "generator_version": "0.1.0",
  "status": "validated",
  "validated_at": "2026-09-20T08:15:21.292Z",
  "success_rate_30d": 1,
  "validation": {
    "last_run_id": "run_b95cb85a35f641279eba",
    "checks": [
      {
        "name": "workflow_completed",
        "passed": true
      },
      {
        "name": "all_services_deployed",
        "passed": true
      },
      {
        "name": "stays_up",
        "passed": true
      }
    ],
    "typical_ready_seconds": 89,
    "typical_build_seconds": 11,
    "typical_start_seconds": 10,
    "slowest_service": "vaultwarden"
  }
}