MindMama/render.yaml at main · kenza-borja/MindMama · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
# Render Blueprint: deploys the AI orchestrator and the Node API together.
#
# The web app is NOT here - it is a static export that goes to Vercel or
# Netlify. See docs/DEPLOY.md.
#
# Values marked `sync: false` are not stored in this file and must be entered
# in the Render dashboard. Never commit secrets here.

services:
  - type: web
    name: mindmama-ai
    runtime: python
    plan: free
    rootDir: .
    buildCommand: pip install -r requirements.txt
    startCommand: uvicorn ai.app.main:app --host 0.0.0.0 --port $PORT
    envVars:
      # These pins predate Python 3.13; match the version the project is
      # developed against rather than taking Render's newer default.
      - key: PYTHON_VERSION
        value: "3.12.10"
      - key: GROQ_API_KEY
        sync: false
      - key: GROQ_MODEL
        sync: false
      # Shared secret the Node API must present. mindmama-api reads it from
      # here via fromService.
      - key: AI_API_KEY
        generateValue: true

  - type: web
    name: mindmama-api
    runtime: node
    plan: free
    rootDir: backend
    buildCommand: npm install
    startCommand: npm start
    # Exempt from the API key check so Render can tell the service is alive.
    healthCheckPath: /health
    envVars:
      # Render generates this once; copy it into the web app's
      # EXPO_PUBLIC_API_KEY so the two agree.
      - key: API_KEY
        generateValue: true
      # Internal URL of the AI service above.
      - key: AI_URL
        sync: false
      # Pulled from mindmama-ai so the two always match without a manual copy.
      - key: AI_API_KEY
        fromService:
          type: web
          name: mindmama-ai
          envVarKey: AI_API_KEY
      # The service account JSON, base64 encoded. Raw JSON loses its braces
      # or newlines in dashboard paste boxes; base64 is a single safe token.
      # Generate with: npm run encode-key -- path\to\serviceAccount.json
      - key: FIREBASE_SERVICE_ACCOUNT_B64
        sync: false
      # The deployed web app's origin, e.g. https://mindmama.vercel.app
      - key: ALLOWED_ORIGINS
        sync: false