FinTrack/render.yaml at master · fintrack-team/FinTrack · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# Render Blueprint — FinTrack API
# Render → New → Blueprint → select repo. Render provisions the service below.
# All secrets use `sync: false`: enter their values in the Render dashboard
# (Environment tab), never commit them here.
services:
  - type: web
    name: fintrack-api
    runtime: docker
    repo: https://github.com/fintrack-team/FinTrack
    branch: master
    region: frankfurt
    plan: free
    dockerfilePath: apps/api/Dockerfile
    dockerContext: .
    healthCheckPath: /api/health
    autoDeploy: true
    envVars:
      # ── Non-secret config ──────────────────────────────────────────────
      - key: NODE_ENV
        value: production
      - key: ENABLE_SWAGGER_IN_PROD
        value: "false"

      # ── Databases (external: Supabase / Upstash / Atlas ) ─────────
      - key: DATABASE_URL
        sync: false
      - key: DIRECT_URL
        sync: false
      - key: REDIS_URL
        sync: false
      - key: MONGO_URL
        sync: false

      # ── Secrets ────────────────────────────────────────────────────────
      - key: ACCESS_TOKEN_SECRET
        sync: false
      - key: CSRF_SECRET
        sync: false
      - key: API_KEY_ENCRYPTION_SECRET
        sync: false
      - key: TELEGRAM_BOT_TOKEN
        sync: false
      - key: GOOGLE_CLIENT_ID
        sync: false
      - key: GROQ_API_KEY_1
        sync: false

      # ── Frontend / CORS (set to your Vercel URL once web is deployed) ───
      - key: CORS_ORIGINS
        sync: false
      - key: FRONTEND_URL
        sync: false

      # ── Optional: Stripe donations (leave unset to disable; if enabled,
      #    SUCCESS_URL/CANCEL_URL are required — their localhost defaults
      #    break the checkout redirect in production) ───────────────────
      - key: STRIPE_SECRET_KEY
        sync: false
      - key: STRIPE_WEBHOOK_SECRET
        sync: false
      - key: STRIPE_DONATION_PRICE_ID
        sync: false
      - key: STRIPE_DONATION_SUCCESS_URL
        sync: false
      - key: STRIPE_DONATION_CANCEL_URL
        sync: false

      # ── Optional: email (verification + password reset) ───────────────
      # Sent via Brevo's HTTP API (443) because Render blocks outbound SMTP.
      # MAIL_FROM must be a verified sender in the Brevo dashboard.
      - key: BREVO_API_KEY
        sync: false
      - key: MAIL_FROM
        sync: false
      - key: EMAIL_VERIFICATION_BASE_URL
        sync: false
      - key: PASSWORD_RESET_BASE_URL
        sync: false