kitchenmate/render.yaml at main · zduey/kitchenmate · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
# Render Blueprint - Infrastructure as Code
# https://render.com/docs/blueprint-spec
services:
  - type: web
    name: kitchenmate
    runtime: docker
    dockerfilePath: ./apps/kitchen_mate/Dockerfile
    dockerContext: .
    repo: https://github.com/zduey/kitchenmate
    branch: main
    healthCheckPath: /health
    autoDeploy: false  # Deploy via GitHub Actions after CI passes
    disk:
      name: kitchenmate-data
      mountPath: /data
      sizeGB: 1
    envVars:
      - key: CACHE_DB_PATH
        value: /data/kitchenmate.db
      - key: ANTHROPIC_API_KEY
        sync: false  # Set manually in Render dashboard (secret)
      - key: PRO_USER_IDS
        sync: false  # Comma-separated Supabase user IDs with Pro tier access
      - key: CORS_ORIGINS
        sync: false  # Set manually in Render dashboard
      # Multi-tenant mode (Supabase authentication)
      # SUPABASE_URL is used by both backend (JWKS verification) and frontend (auth client)
      - key: SUPABASE_URL
        sync: false  # Set manually in Render dashboard (enables multi-tenant)
      - key: SUPABASE_ANON_KEY
        sync: false  # Set manually in Render dashboard (frontend auth client)
      # File storage
      - key: STORAGE_BACKEND
        value: s3
      - key: STORAGE_PUBLIC_BASE_URL
        sync: false  # Optional: public R2 bucket URL (omit to use presigned URLs)
      - key: S3_BUCKET
        sync: false  # Set manually in Render dashboard (secret)
      - key: S3_ACCESS_KEY_ID
        sync: false  # Set manually in Render dashboard (secret)
      - key: S3_SECRET_ACCESS_KEY
        sync: false  # Set manually in Render dashboard (secret)
      - key: S3_REGION
        value: us-east-1
      - key: S3_ENDPOINT_URL
        sync: false  # Required for R2/MinIO: e.g. https://<account>.r2.cloudflarestorage.com