render.yaml

# Render blueprint for the Forge AI API.
#
# The frontend deploys separately to Vercel (see vercel.json and
# docs/content/operate/deployment.md).
#
# WORKER_INLINE=true keeps the run worker and cron inside the API process, which
# is the correct single-node topology and needs no Redis. To scale out, add a
# Redis instance, set REDIS_URL on every service, then uncomment the worker
# service below and set WORKER_INLINE=false on the API.

services:
  - type: web
    name: forgeai-api
    runtime: node
    plan: free
    buildCommand: corepack enable && pnpm install --frozen-lockfile && pnpm db:generate && pnpm --filter @forgeai/api build
    startCommand: pnpm --filter @forgeai/api start
    healthCheckPath: /health
    envVars:
      - key: NODE_ENV
        value: production
      - key: WORKER_INLINE
        value: 'true'
      # Generated once by Render and kept stable across deploys.
      - key: JWT_ACCESS_SECRET
        generateValue: true
      - key: JWT_REFRESH_SECRET
        generateValue: true
      # Must be exactly 64 hex characters. Render's generateValue does not
      # guarantee that shape, so set it manually: openssl rand -hex 32
      - key: ENCRYPTION_KEY
        sync: false
      # Your managed Postgres connection string.
      - key: DATABASE_URL
        sync: false
      # The deployed frontend origin, exactly — no trailing slash.
      - key: WEB_ORIGIN
        sync: false

  # - type: worker
  #   name: forgeai-worker
  #   runtime: node
  #   plan: starter
  #   buildCommand: corepack enable && pnpm install --frozen-lockfile && pnpm db:generate && pnpm --filter @forgeai/api build
  #   startCommand: pnpm --filter @forgeai/api worker
  #   envVars:
  #     - key: DATABASE_URL
  #       sync: false
  #     - key: REDIS_URL
  #       sync: false