render.yaml

# =============================================================================
# Render Blueprint - PostBot SaaS Production Deployment
# =============================================================================
# 
# Architecture:
#   - PostgreSQL Database (managed)
#   - Redis Cache & Message Broker (managed)
#   - Backend API (FastAPI + Gunicorn)
#   - Celery Worker (background tasks)
#   - Celery Beat (scheduled task scheduler)
#   - Frontend (Next.js Standalone)
#
# Deploy with: https://render.com/deploy
# 
# IMPORTANT: After deployment, manually set secrets in Render Dashboard:
#   - All API keys (Paystack, OpenAI, Anthropic, Groq, LinkedIn, Clerk)
#   - Database URLs are auto-populated by Render
# =============================================================================

# =============================================================================
# DATABASES
# =============================================================================
databases:
  - name: postbot-db
    databaseName: postbot
    user: postbot
    plan: free  # Upgrade to starter/standard for production
    region: oregon

# =============================================================================
# SERVICES
# =============================================================================
services:
  # ---------------------------------------------------------------------------
  # Redis - Message Broker & Cache
  # ---------------------------------------------------------------------------
  - type: redis
    name: postbot-redis
    plan: free  # Upgrade to starter for production
    region: oregon
    maxmemoryPolicy: allkeys-lru
    ipAllowList: []  # Allow all IPs (internal only)

  # ---------------------------------------------------------------------------
  # Backend API Service (FastAPI)
  # ---------------------------------------------------------------------------
  - type: web
    name: postbot-api
    runtime: docker
    region: oregon
    plan: free  # Upgrade to starter for production
    dockerfilePath: ./backend/Dockerfile
    dockerContext: .
    healthCheckPath: /health
    envVars:
      # Python Configuration
      - key: PYTHON_VERSION
        value: "3.11"
      - key: ENVIRONMENT
        value: production
      - key: DEV_MODE
        value: "false"
      - key: BACKEND_URL
        sync: false
      - key: FRONTEND_URL
        sync: false
      - key: FRONTEND_DOMAIN
        sync: false
      - key: CORS_ORIGINS
        sync: false
      - key: SSL_VERIFY
        value: "true"
      - key: AUTH_REQUEST_TIMEOUT
        value: "15"
      
      # Database (auto-populated by Render)
      - key: DATABASE_URL
        fromDatabase:
          name: postbot-db
          property: connectionString
      
      # Redis (auto-populated by Render)
      - key: REDIS_URL
        fromService:
          name: postbot-redis
          type: redis
          property: connectionString
      
      # LinkedIn OAuth
      - key: LINKEDIN_CLIENT_ID
        sync: false
      - key: LINKEDIN_CLIENT_SECRET
        sync: false
      
      # GitHub Integration
      - key: GITHUB_CLIENT_ID
        sync: false
      - key: GITHUB_CLIENT_SECRET
        sync: false
      - key: GITHUB_USERNAME
        sync: false
      - key: GITHUB_TOKEN
        sync: false
      
      # Clerk Authentication
      - key: CLERK_ISSUER
        sync: false
      - key: CLERK_SECRET_KEY
        sync: false
      - key: CLERK_WEBHOOK_SECRET
        sync: false
      
      # AI Providers
      - key: GROQ_API_KEY
        sync: false
      - key: OPENAI_API_KEY
        sync: false
      - key: ANTHROPIC_API_KEY
        sync: false
      - key: MISTRAL_API_KEY
        sync: false
      
      # Paystack Payments
      - key: PAYSTACK_SECRET_KEY
        sync: false
      - key: PAYSTACK_PUBLIC_KEY
        sync: false
      - key: PAYSTACK_WEBHOOK_SECRET
        sync: false
      - key: PAYSTACK_PLAN_PRO_MONTHLY
        sync: false
      - key: PAYSTACK_PLAN_PRO_YEARLY
        sync: false
      - key: PAYSTACK_SUCCESS_URL
        sync: false
      - key: PAYSTACK_CANCEL_URL
        sync: false
      - key: PAYSTACK_MANAGE_SUBSCRIPTION_URL
        sync: false

      # Images / Media
      - key: UNSPLASH_ACCESS_KEY
        sync: false
      
      # Email (Optional)
      - key: SMTP_SERVER
        sync: false
      - key: SMTP_PORT
        sync: false
      - key: SMTP_USERNAME
        sync: false
      - key: SMTP_PASSWORD
        sync: false
      - key: FROM_EMAIL
        sync: false
      - key: ADMIN_EMAIL
        sync: false
      
      # Security
      - key: SECRET_KEY
        generateValue: true
      - key: ENCRYPTION_KEY
        generateValue: true

  # ---------------------------------------------------------------------------
  # Celery Worker (Background Tasks)
  # ---------------------------------------------------------------------------
  - type: worker
    name: postbot-worker
    runtime: docker
    region: oregon
    plan: free  # Upgrade to starter for production
    dockerfilePath: ./backend/Dockerfile
    dockerContext: .
    # Override the CMD to run Celery worker
    dockerCommand: celery -A services.celery_app worker --loglevel=info --concurrency=2
    envVars:
      - key: ENVIRONMENT
        value: production

      # Database
      - key: DATABASE_URL
        fromDatabase:
          name: postbot-db
          property: connectionString
      
      # Redis
      - key: REDIS_URL
        fromService:
          name: postbot-redis
          type: redis
          property: connectionString
      
      # LinkedIn OAuth (for posting)
      - key: LINKEDIN_CLIENT_ID
        sync: false
      - key: LINKEDIN_CLIENT_SECRET
        sync: false
      
      # GitHub Integration
      - key: GITHUB_USERNAME
        sync: false
      
      # AI Providers (for post generation)
      - key: GROQ_API_KEY
        sync: false
      - key: OPENAI_API_KEY
        sync: false
      - key: ANTHROPIC_API_KEY
        sync: false
      - key: MISTRAL_API_KEY
        sync: false

      # Network / OAuth
      - key: SSL_VERIFY
        value: "true"
      - key: AUTH_REQUEST_TIMEOUT
        value: "15"
      
      # Security
      - key: SECRET_KEY
        sync: false
      - key: ENCRYPTION_KEY
        sync: false

  # ---------------------------------------------------------------------------
  # Celery Beat (Task Scheduler)
  # ---------------------------------------------------------------------------
  - type: worker
    name: postbot-beat
    runtime: docker
    region: oregon
    plan: free  # Upgrade to starter for production
    dockerfilePath: ./backend/Dockerfile
    dockerContext: .
    # Override the CMD to run Celery beat scheduler
    dockerCommand: celery -A services.celery_app beat --loglevel=info
    envVars:
      - key: ENVIRONMENT
        value: production

      # Database (for reading scheduled tasks)
      - key: DATABASE_URL
        fromDatabase:
          name: postbot-db
          property: connectionString
      
      # Redis (for task queue)
      - key: REDIS_URL
        fromService:
          name: postbot-redis
          type: redis
          property: connectionString

  # ---------------------------------------------------------------------------
  # Frontend (Next.js Standalone)
  # ---------------------------------------------------------------------------
  - type: web
    name: postbot-web
    runtime: docker
    region: oregon
    plan: free  # Upgrade to starter for production
    dockerfilePath: ./web/Dockerfile
    dockerContext: ./web
    healthCheckPath: /
    envVars:
      # Node Configuration
      - key: NODE_ENV
        value: production
      
      # API URL (set after backend deploys)
      - key: NEXT_PUBLIC_API_URL
        sync: false
      
      # Clerk Authentication (public key)
      - key: NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY
        sync: false
      - key: CLERK_SECRET_KEY
        sync: false
      
      # OAuth Redirect URI
      - key: NEXT_PUBLIC_REDIRECT_URI
        sync: false

      # Site URL (used for SEO/canonical URLs)
      - key: NEXT_PUBLIC_SITE_URL
        sync: false
      
      # Paystack (for client-side checkout, if used)
      - key: NEXT_PUBLIC_PAYSTACK_PUBLIC_KEY
        sync: false
      - key: NEXT_PUBLIC_PAYSTACK_MONTHLY_CHECKOUT_URL
        sync: false
      - key: NEXT_PUBLIC_PAYSTACK_YEARLY_CHECKOUT_URL
        sync: false