{
  "manifest_version": "1.0.0",
  "template": {
    "id": "596a5361-6ebd-465f-9ba8-472ee7257a5e",
    "slug": "wealthfolio",
    "name": "Wealthfolio",
    "description": "Personal finance and investment tracking with persistent SQLite storage.",
    "url": "https://railway.com/deploy/wealthfolio",
    "upstream": {
      "image": "wealthfolio/wealthfolio@sha256:f24c607692c1b494a477382aa3dfedc11ede1b433768b66546940c8f6b8a474f"
    }
  },
  "status": "unvalidated",
  "validated_at": null,
  "success_rate_30d": null,
  "services": [
    {
      "name": "Wealthfolio",
      "source": {
        "image": "wealthfolio/wealthfolio@sha256:f24c607692c1b494a477382aa3dfedc11ede1b433768b66546940c8f6b8a474f"
      },
      "needs_volume": true,
      "volume_mount_path": "/data",
      "http": true
    }
  ],
  "required_inputs": [
    {
      "key": "PORT",
      "service": "Wealthfolio",
      "description": "Directs Railway health checks and HTTP routing to Wealthfolio's fixed listen port.",
      "secret": false,
      "strategy": "default",
      "default": "8088"
    },
    {
      "key": "WF_DB_PATH",
      "service": "Wealthfolio",
      "description": "Stores the SQLite database on the attached persistent volume.",
      "secret": false,
      "strategy": "default",
      "default": "/data/wealthfolio.db"
    },
    {
      "key": "WF_SECRET_KEY",
      "service": "Wealthfolio",
      "description": "Generates exactly 32 ASCII characters, including one non-Base64 prefix so Wealthfolio uses its raw-key fallback. Keep this value stable; rotation can make stored secrets unreadable.",
      "secret": true,
      "strategy": "generate",
      "generate": "random_base64_32"
    },
    {
      "key": "WF_LISTEN_ADDR",
      "service": "Wealthfolio",
      "description": "Binds the web server to every container interface on the documented port.",
      "secret": false,
      "strategy": "default",
      "default": "0.0.0.0:8088"
    },
    {
      "key": "WF_MCP_ENABLED",
      "service": "Wealthfolio",
      "description": "Keeps Wealthfolio's external MCP endpoint disabled by default.",
      "secret": false,
      "strategy": "default",
      "default": "false"
    },
    {
      "key": "RAILWAY_RUN_UID",
      "service": "Wealthfolio",
      "description": "Allows the upstream container to write to Railway's root-owned /data volume.",
      "secret": false,
      "strategy": "default",
      "default": "0"
    },
    {
      "key": "WF_COOKIE_SECURE",
      "service": "Wealthfolio",
      "description": "Marks the session cookie Secure when Railway forwards HTTPS.",
      "secret": false,
      "strategy": "default",
      "default": "auto"
    },
    {
      "key": "WF_AUTH_PASSWORD_HASH",
      "service": "Wealthfolio",
      "description": "Argon2id PHC hash for the web password. Generate locally with the immutable upstream guide: https://github.com/wealthfolio/wealthfolio/blob/633d3a1be7a87e40fbb2d5d335bd60ba4219718b/README.md#password-authentication",
      "secret": true,
      "strategy": "generate",
      "generate": "strong_password"
    },
    {
      "key": "WF_CORS_ALLOW_ORIGINS",
      "service": "Wealthfolio",
      "description": "Restricts credentialed browser requests to the generated Railway origin.",
      "secret": false,
      "strategy": "railway_provided",
      "railway_source": "railway_domain"
    },
    {
      "key": "WF_REQUEST_TIMEOUT_MS",
      "service": "Wealthfolio",
      "description": "Uses the upstream production request timeout of 30 seconds.",
      "secret": false,
      "strategy": "default",
      "default": "30000"
    },
    {
      "key": "WF_AUTH_TOKEN_TTL_MINUTES",
      "service": "Wealthfolio",
      "description": "Sets authenticated web-session lifetime to 60 minutes.",
      "secret": true,
      "strategy": "default",
      "default": "60"
    }
  ],
  "deploy": {
    "mcp": {
      "server": "railway",
      "tool": "deploy_template",
      "args": {
        "template_code": "wealthfolio"
      }
    },
    "cli": "railway deploy --template wealthfolio",
    "api": {
      "method": "POST",
      "path": "/graphql/v2",
      "body": {
        "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }",
        "variables": {
          "input": {
            "templateId": "596a5361-6ebd-465f-9ba8-472ee7257a5e",
            "serializedConfig": {
              "buckets": {},
              "services": {
                "8eb31701-e27b-464a-841a-a59362bcf56b": {
                  "icon": "https://raw.githubusercontent.com/wealthfolio/wealthfolio/633d3a1be7a87e40fbb2d5d335bd60ba4219718b/assets/brand/icon.png",
                  "name": "Wealthfolio",
                  "deploy": {
                    "startCommand": null,
                    "healthcheckPath": "/api/v1/healthz",
                    "restartPolicyType": "ON_FAILURE",
                    "restartPolicyMaxRetries": 5
                  },
                  "source": {
                    "image": "wealthfolio/wealthfolio@sha256:f24c607692c1b494a477382aa3dfedc11ede1b433768b66546940c8f6b8a474f"
                  },
                  "variables": {
                    "PORT": {
                      "isOptional": false,
                      "description": "Directs Railway health checks and HTTP routing to Wealthfolio's fixed listen port.",
                      "defaultValue": "8088"
                    },
                    "WF_DB_PATH": {
                      "isOptional": false,
                      "description": "Stores the SQLite database on the attached persistent volume.",
                      "defaultValue": "/data/wealthfolio.db"
                    },
                    "WF_SECRET_KEY": {
                      "isOptional": false,
                      "description": "Generates exactly 32 ASCII characters, including one non-Base64 prefix so Wealthfolio uses its raw-key fallback. Keep this value stable; rotation can make stored secrets unreadable.",
                      "defaultValue": "{{WF_SECRET_KEY}}"
                    },
                    "WF_LISTEN_ADDR": {
                      "isOptional": false,
                      "description": "Binds the web server to every container interface on the documented port.",
                      "defaultValue": "0.0.0.0:8088"
                    },
                    "WF_MCP_ENABLED": {
                      "isOptional": false,
                      "description": "Keeps Wealthfolio's external MCP endpoint disabled by default.",
                      "defaultValue": "false"
                    },
                    "RAILWAY_RUN_UID": {
                      "isOptional": false,
                      "description": "Allows the upstream container to write to Railway's root-owned /data volume.",
                      "defaultValue": "0"
                    },
                    "WF_COOKIE_SECURE": {
                      "isOptional": false,
                      "description": "Marks the session cookie Secure when Railway forwards HTTPS.",
                      "defaultValue": "auto"
                    },
                    "WF_AUTH_PASSWORD_HASH": {
                      "isOptional": false,
                      "description": "Argon2id PHC hash for the web password. Generate locally with the immutable upstream guide: https://github.com/wealthfolio/wealthfolio/blob/633d3a1be7a87e40fbb2d5d335bd60ba4219718b/README.md#password-authentication",
                      "defaultValue": "{{WF_AUTH_PASSWORD_HASH}}"
                    },
                    "WF_CORS_ALLOW_ORIGINS": {
                      "isOptional": false,
                      "description": "Restricts credentialed browser requests to the generated Railway origin.",
                      "defaultValue": "https://${{RAILWAY_PUBLIC_DOMAIN}}"
                    },
                    "WF_REQUEST_TIMEOUT_MS": {
                      "isOptional": false,
                      "description": "Uses the upstream production request timeout of 30 seconds.",
                      "defaultValue": "30000"
                    },
                    "WF_AUTH_TOKEN_TTL_MINUTES": {
                      "isOptional": false,
                      "description": "Sets authenticated web-session lifetime to 60 minutes.",
                      "defaultValue": "60"
                    }
                  },
                  "networking": {
                    "serviceDomains": {
                      "<hasDomain>": {}
                    }
                  },
                  "volumeMounts": {
                    "8eb31701-e27b-464a-841a-a59362bcf56b": {
                      "mountPath": "/data"
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "post_deploy": {
    "healthcheck": {
      "service": "Wealthfolio",
      "method": "GET",
      "path": "/api/v1/healthz",
      "expect_status": 200
    }
  },
  "resources": {
    "expected_services": 1,
    "needs_volume": true
  },
  "generated_at": "2026-09-07T23:54:17.958Z",
  "generator_version": "0.1.0"
}