Secrets-App/render.yaml at main · Avaneesh40585/Secrets-App · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
databases:
  - name: secrets-db
    databaseName: secrets_production
    user: secrets_user
    region: oregon
    plan: free

services:
  - type: web
    name: secrets-app
    runtime: node
    region: oregon
    plan: free
    branch: main

    buildCommand: npm ci && node db/seed.js
    startCommand: npm start
    healthCheckPath: /
    autoDeploy: true
    pullRequestPreviewsEnabled: true

    envVars:
      - key: NODE_VERSION
        value: "20"
      - key: NODE_ENV
        value: production
      - key: PORT
        value: "10000"

      # Database connection — all properties sourced from the managed database
      - key: PG_HOST
        fromDatabase:
          name: secrets-db
          property: host
      - key: PG_PORT
        fromDatabase:
          name: secrets-db
          property: port
      - key: PG_DATABASE
        fromDatabase:
          name: secrets-db
          property: database
      - key: PG_USER
        fromDatabase:
          name: secrets-db
          property: user
      - key: PG_PASSWORD
        fromDatabase:
          name: secrets-db
          property: password

      # Session secret — generated once at first deploy, stable across restarts
      - key: SESSION_SECRET
        generateValue: true

      # Google OAuth — set manually in the Render dashboard after deploy
      - key: GOOGLE_CLIENT_ID
        sync: false
      - key: GOOGLE_CLIENT_SECRET
        sync: false
      - key: GOOGLE_CALLBACK_URL
        value: "https://secrets-app-c07z.onrender.com/auth/google/secrets"