render/render.yaml at main · ardi-zanki/render · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
# Render.com Blueprint — RenderAI (same Docker image as the VPS path).
# Database = Neon (set DATABASE_URL as a secret). The worker is mandatory:
# without it, render jobs stay "queued" (deployment PRD §13).
#
# First deploy: fill all sync:false secrets, then run migrations + seed once
# from a Render Shell (see DEPLOYMENT.md).

envVarGroups:
  - name: renderai-shared
    envVars:
      - key: NODE_ENV
        value: production
      - key: RATE_LIMIT_DRIVER
        value: database
      - key: RATE_LIMIT_ENABLED
        value: "true"
      - key: STORAGE_PROVIDER
        value: r2
      - key: EMAIL_PROVIDER
        value: resend
      - key: PAYMENT_PROVIDER
        value: midtrans
      - key: AI_PROVIDER
        value: fal
      - key: RENDER_PROCESSING_MODE
        value: worker
      - key: JOB_LOCK_TIMEOUT_SECONDS
        value: "300"
      - key: FAL_RENDER_MODEL
        value: fal-ai/flux-2-pro/edit
      - key: FAL_STYLE_TRANSFER_MODEL
        value: fal-ai/uso
      - key: FAL_UPSCALE_MODEL
        value: fal-ai/aura-sr
      - key: FAL_START_TIMEOUT_SECONDS
        value: "300"
      - key: JWT_ISSUER
        value: renderai
      - key: JWT_AUDIENCE
        value: renderai-app
      - key: SESSION_DEFAULT_MAX_AGE
        value: "604800"
      - key: SESSION_REMEMBER_ME_MAX_AGE
        value: "2592000"
      - key: ADMIN_SESSION_MAX_AGE
        value: "43200"
      - key: SENSITIVE_ACTION_MAX_AGE
        value: "900"
      - key: SUPPORT_EMAIL
        value: support@renderai.id
      - key: MIDTRANS_IS_PRODUCTION
        value: "true"
      # Secrets — set these in the Render dashboard (Neon DB URL + credentials):
      - key: DATABASE_URL
        sync: false
      - key: APP_URL
        sync: false
      - key: BETTER_AUTH_URL
        sync: false
      - key: BETTER_AUTH_SECRET
        sync: false
      - key: JWT_SECRET
        sync: false
      - key: FAL_KEY
        sync: false
      - key: MIDTRANS_SERVER_KEY
        sync: false
      - key: MIDTRANS_CLIENT_KEY
        sync: false
      - key: RESEND_API_KEY
        sync: false
      - key: EMAIL_FROM
        sync: false
      - key: R2_ACCOUNT_ID
        sync: false
      - key: R2_ACCESS_KEY_ID
        sync: false
      - key: R2_SECRET_ACCESS_KEY
        sync: false
      - key: R2_BUCKET_NAME
        sync: false
      # Comma-separated app origins applied by `pnpm cors:setup`.
      - key: R2_CORS_ORIGINS
        sync: false
      - key: GOOGLE_CLIENT_ID
        sync: false
      - key: GOOGLE_CLIENT_SECRET
        sync: false

services:
  - type: web
    name: renderai-web
    runtime: docker
    region: singapore
    plan: starter
    dockerfilePath: ./Dockerfile
    healthCheckPath: /api/health
    autoDeploy: true
    envVars:
      - fromGroup: renderai-shared

  - type: worker
    name: renderai-worker
    runtime: docker
    region: singapore
    plan: starter
    dockerfilePath: ./Dockerfile
    dockerCommand: pnpm worker
    autoDeploy: true
    envVars:
      - fromGroup: renderai-shared