EvalLedger/render.yaml at main · biru-codeastromer/EvalLedger · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
# EvalLedger production deployment on Render free tier.
#
# This is an API-only deployment. No background worker is deployed.
# Contamination checks are disabled (WORKER_ENABLED=false).
# Artifact storage uses the local filesystem and is ephemeral across redeploys.

databases:
  - name: evalledger-db
    plan: free
    databaseName: evalledger
    user: evalledger
    postgresMajorVersion: "16"

services:
  - type: redis
    name: evalledger-redis
    plan: free
    maxmemoryPolicy: allkeys-lru
    ipAllowList: []

  - type: web
    name: evalledger-api
    runtime: docker
    plan: free
    dockerfilePath: ./backend/Dockerfile
    dockerContext: ./backend
    healthCheckPath: /health/live
    envVars:
      - key: APP_ENV
        value: production
      - key: APP_URL
        sync: false
      - key: FRONTEND_URL
        value: https://evalledger-frontend.vercel.app
      - key: DATABASE_URL
        fromDatabase:
          name: evalledger-db
          property: connectionString
      - key: REDIS_URL
        fromService:
          name: evalledger-redis
          type: redis
          property: connectionString
      - key: CELERY_BROKER_URL
        fromService:
          name: evalledger-redis
          type: redis
          property: connectionString
      - key: CELERY_RESULT_BACKEND
        fromService:
          name: evalledger-redis
          type: redis
          property: connectionString
      - key: JWT_SECRET_KEY
        generateValue: true
      - key: CORS_ORIGINS
        value: '["https://evalledger-frontend.vercel.app"]'
      # Artifact storage.  Default is ephemeral local filesystem.
      # To enable durable Cloudflare R2 storage:
      #   1. Create an R2 bucket in the Cloudflare dashboard.
      #   2. Create an R2 API token (Object Read & Write on the bucket).
      #   3. Enable a Public R2.dev subdomain (or add a custom domain) on the bucket.
      #   4. Change STORAGE_BACKEND to "s3" and fill in the four R2 variables below.
      # See docs/operations/deployment.md → "Durable artifact storage (Cloudflare R2)"
      - key: STORAGE_BACKEND
        value: local
      - key: STORAGE_BUCKET
        value: evalledger-artifacts
      # The four variables below are only required when STORAGE_BACKEND=s3.
      # Set them manually in the Render dashboard (never commit credentials).
      - key: STORAGE_S3_ENDPOINT_URL
        sync: false
      - key: STORAGE_S3_ACCESS_KEY_ID
        sync: false
      - key: STORAGE_S3_SECRET_ACCESS_KEY
        sync: false
      # Public domain for presigned download URLs, e.g. https://pub-<hash>.r2.dev
      - key: STORAGE_S3_PRESIGN_ENDPOINT
        sync: false
      - key: WORKER_ENABLED
        value: "false"
      # OAuth credentials — set these manually in the Render dashboard after deploy.
      # GitHub: https://github.com/settings/developers → OAuth Apps
      #   Callback URL: https://evalledger-api.onrender.com/auth/oauth/github/callback
      - key: GITHUB_CLIENT_ID
        sync: false
      - key: GITHUB_CLIENT_SECRET
        sync: false
      # Google: https://console.cloud.google.com/apis/credentials
      #   Callback URL: https://evalledger-api.onrender.com/auth/oauth/google/callback
      - key: GOOGLE_CLIENT_ID
        sync: false
      - key: GOOGLE_CLIENT_SECRET
        sync: false