Senzen/render.yaml at main · Long104/Senzen · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
# =============================================================
# Senzen — Render Blueprint
# =============================================================
# Render reads this file when you connect the repo (Dashboard →
# New → Blueprint → select this repo). It creates:
#   • senzen-api   — Go/Fiber backend, free plan
#
# Free plan = 512 MB RAM, 0.1 vCPU, sleeps after 15 min idle.
# Auto-deploys on every push to main.
#
# NOTE on routing: This service runs at
#   https://senzen-api.onrender.com
# but is exposed publicly as
#   https://senzen.pantorn.site/api/...
# via a Vercel catch-all rewrite (see frontend/vercel.json).
# No DNS record for the backend exists — Vercel proxies the
# path. No custom domain is configured on Render.
#
# Sensitive env vars are marked `sync: false` — you set the
# values once in the Render dashboard, and they stay out of git.
# =============================================================

services:
  - type: web
    name: senzen-api
    runtime: go
    plan: free
    region: singapore

    rootDir: backend
    buildCommand: go build -ldflags="-s -w" -o main .
    startCommand: ./main
    healthCheckPath: /api/health
    autoDeploy: true

    # ─────────────────────────────────────────────────────────
    # Public env vars (committed, no secrets)
    # ─────────────────────────────────────────────────────────
    envVars:
      - key: PORT
        value: "10000" # Render sets this; pinned for clarity
      - key: DB_PORT
        value: "5432"
      - key: DB_USER
        value: postgres.bqkveselhvqmknnvwgfx
      - key: DB_NAME
        value: postgres
      - key: FRONTEND_URL
        value: https://senzen.pantorn.site
      - key: BACKEND_URL
        # Public URL the user sees — used by OAuth providers as the
        # callback redirect base. Vercel rewrites /google_callback to
        # Render's /api/google_callback server-side.
        value: https://senzen.pantorn.site
      - key: GO_ENV
        value: production

    # ─────────────────────────────────────────────────────────
    # Secrets — set values in the Render dashboard, NOT here
    # ─────────────────────────────────────────────────────────
      - key: DB_HOST
        sync: false
      - key: DB_PASSWORD
        sync: false
      - key: jwtSecretKey
        generateValue: true
      - key: GOOGLE_CLIENT_ID
        sync: false
      - key: GOOGLE_CLIENT_SECRET
        sync: false
      - key: GITHUB_CLIENT_ID
        sync: false
      - key: GITHUB_CLIENT_SECRET
        sync: false