render.yaml

services:
  # BullMQ + cache — noeviction prevents silent job loss. Change existing instance in Dashboard if already provisioned.
  - type: keyvalue
    name: taskmaster-redis
    plan: starter
    region: oregon
    maxmemoryPolicy: noeviction
    ipAllowList: []

  # Production API — sync env vars from Dashboard if service already exists manually
  - type: web
    name: CoreKnot-api
    runtime: node
    region: oregon
    plan: starter
    rootDir: Taskmaster/server
    buildCommand: cd ../.. && bash scripts/render-build.sh api
    startCommand: npm start
    healthCheckPath: /api/health
    autoDeploy: false
    branch: main
    envVars:
      - key: HUSKY
        value: "0"
      - key: NODE_ENV
        value: production
      - key: COREKNOT_DEPLOY_TIER
        value: production
      - key: PLATFORM_TENANT_SLUG
        value: tsc
      - key: WEBHOOK_TENANT_ID
        sync: false
      - key: JSON_BODY_LIMIT
        value: 50mb
      # Explicit prod-preview mode: PR previews may hit this API unless VITE_API_URL points to staging.
      - key: CORS_ALLOW_VERCEL_PREVIEWS
        value: "true"
      - key: LOG_LEVEL
        value: warn
      - key: COREKNOT_LIGHTWEIGHT
        value: "true"
      - key: MONGODB_URI_PROD
        sync: false
      - key: ARTIST_PATH_GOOGLE_SHEET_ID
        value: 1UQ6zbfazKUCg6tsWCLLIclpvQlWpPj4sugwCtfXmtxA
      - key: GOOGLE_SERVICE_ACCOUNT_EMAIL
        sync: false
      - key: GOOGLE_PRIVATE_KEY
        sync: false
      - key: HOLYSHEET_ARTIST_PATH_API_KEY
        sync: false
      - key: JWT_SECRET
        sync: false
      - key: ENCRYPTION_KEY
        sync: false
      - key: REDIS_URL
        fromService:
          name: taskmaster-redis
          type: keyvalue
          property: connectionString
      - key: SUPABASE_SECONDARY_ENABLED
        value: "true"
      - key: SUPABASE_PG_MODE
        value: rest
      - key: SUPABASE_URL
        sync: false
      - key: SUPABASE_SERVICE_ROLE_KEY
        sync: false
      - key: SUPABASE_SECRET_KEY
        sync: false
      - key: SUPABASE_DB_URL
        sync: false
      - key: SUPABASE_BACKUP_BUCKET
        value: taskmaster-backups
      # URL vars — set real values from .cursor/production-hosts.local.json (derived.*)
      - key: TRACKING_BASE_URL
        value: https://YOUR-PRODUCTION-API
      - key: SERVER_URL
        value: https://YOUR-PRODUCTION-API
      - key: APP_BASE_URL
        value: https://YOUR-PRODUCTION-API
      - key: FRONTEND_URL
        value: https://YOUR-PRODUCTION-FRONTEND
      - key: CLIENT_URL
        value: https://YOUR-PRODUCTION-FRONTEND
      # Dashboard campaign-metrics widget proxies /api/mail/stats here (API host, not Vercel UI).
      - key: AUTO_MAILER_API_URL
        sync: false
      - key: UPLOADTHING_TOKEN
        sync: false
      - key: UPLOADTHING_SECRET
        sync: false
      - key: VAPID_PUBLIC_KEY
        sync: false
      - key: VAPID_PRIVATE_KEY
        sync: false
      - key: VAPID_SUBJECT
        sync: false

  - type: cron
    name: CoreKnot-daily-backup
    schedule: "31 18 * * *"
    rootDir: Taskmaster/server
    buildCommand: cd ../.. && bash scripts/render-build.sh api
    startCommand: node scripts/runDailyBackup.js
    envVars:
      - key: NODE_ENV
        value: production
      - key: BACKUP_ENABLED
        value: "true"
      - key: BACKUP_RETENTION_COUNT
        value: "2"
      - key: MONGODB_BACKUP_DB
        value: taskmaster_backups
      # Required — copy same value from CoreKnot API web service (Dashboard → Environment)
      - key: MONGODB_URI_PROD
        sync: false
      - key: RESEND_API_KEY
        sync: false
      - key: ADMIN_EMAIL
        sync: false
      - key: BACKUP_FROM_EMAIL
        value: noreply@theshakticollective.in
      - key: SUPABASE_SECONDARY_ENABLED
        value: "true"
      - key: SUPABASE_PG_MODE
        value: rest
      - key: SUPABASE_URL
        sync: false
      - key: SUPABASE_SECRET_KEY
        sync: false
      - key: SUPABASE_BACKUP_BUCKET
        value: taskmaster-backups
      - key: BACKUP_DESTINATION
        value: supabase
  - type: cron
    name: CoreKnot-subscription-reminders
    schedule: "30 3 * * *"
    rootDir: Taskmaster/server
    buildCommand: cd ../.. && bash scripts/render-build.sh api
    startCommand: node scripts/runSubscriptionReminders.js
    envVars:
      - key: NODE_ENV
        value: production
      - key: SUBSCRIPTION_REMINDERS_ENABLED
        value: "true"

  # --- Staging mirror (empty taskmaster_staging DB; no crons) ---
  - type: keyvalue
    name: taskmaster-redis-staging
    plan: starter
    region: oregon
    maxmemoryPolicy: noeviction
    ipAllowList: []

  - type: web
    name: coreknot-api-staging
    runtime: node
    region: oregon
    plan: free
    rootDir: Taskmaster/server
    buildCommand: cd ../.. && bash scripts/render-build.sh api
    startCommand: npm start
    healthCheckPath: /api/health
    autoDeploy: false
    branch: staging
    envVars:
      - key: HUSKY
        value: "0"
      - key: NODE_ENV
        value: production
      - key: COREKNOT_DEPLOY_TIER
        value: staging
      - key: PLATFORM_TENANT_SLUG
        value: tsc
      - key: WEBHOOK_TENANT_ID
        sync: false
      - key: JSON_BODY_LIMIT
        value: 50mb
      - key: CORS_ALLOW_VERCEL_PREVIEWS
        value: "true"
      - key: LOG_LEVEL
        value: info
      - key: COREKNOT_LIGHTWEIGHT
        value: "true"
      - key: MONGODB_URI
        sync: false
      - key: JWT_SECRET
        sync: false
      - key: ENCRYPTION_KEY
        sync: false
      - key: REDIS_URL
        fromService:
          name: taskmaster-redis-staging
          type: keyvalue
          property: connectionString
      - key: SUPABASE_SECONDARY_ENABLED
        value: "true"
      - key: SUPABASE_PG_MODE
        value: rest
      - key: SUPABASE_URL
        sync: false
      - key: SUPABASE_SERVICE_ROLE_KEY
        sync: false
      - key: SUPABASE_SECRET_KEY
        sync: false
      - key: SUPABASE_DB_URL
        sync: false
      - key: TRACKING_BASE_URL
        value: https://coreknot-api-staging.onrender.com
      - key: SERVER_URL
        value: https://coreknot-api-staging.onrender.com
      - key: APP_BASE_URL
        value: https://coreknot-api-staging.onrender.com
      - key: FRONTEND_URL
        value: https://taskmaster-sand.vercel.app
      - key: CLIENT_URL
        value: https://taskmaster-sand.vercel.app
      - key: NEST_SYNC_URL
        value: https://coreknot-nest-staging.onrender.com
      - key: UPLOADTHING_TOKEN
        sync: false
      - key: UPLOADTHING_SECRET
        sync: false

  - type: web
    name: coreknot-nest-staging
    runtime: node
    region: oregon
    plan: free
    rootDir: nestjs-server
    buildCommand: cd .. && bash scripts/render-build.sh nest
    startCommand: npm run start:prod
    healthCheckPath: /api/health
    autoDeploy: false
    branch: staging
    envVars:
      - key: HUSKY
        value: "0"
      - key: NODE_ENV
        value: production
      - key: PORT
        value: "5001"
      - key: COREKNOT_DEPLOY_TIER
        value: staging
      - key: DATABASE_URL
        sync: false
      - key: JWT_SECRET
        sync: false
      - key: REDIS_URL
        fromService:
          name: taskmaster-redis-staging
          type: keyvalue
          property: connectionString
      - key: FRONTEND_URL
        value: https://taskmaster-sand.vercel.app