ProjectAchilles/render.yaml at main · Infrasecuritycode/ProjectAchilles · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
# Render Blueprint — ProjectAchilles
# Deploy: https://render.com/deploy?repo=<your-repo-url>
# Docs:   https://render.com/docs/blueprint-spec

services:
  # ─── Backend (Express + TypeScript) ──────────────────────────────────────────
  - type: web
    name: achilles-backend
    runtime: docker
    dockerfilePath: ./Dockerfile
    dockerContext: .
    rootDir: backend
    plan: starter  # minimum tier with persistent disk support
    healthCheckPath: /api/health
    buildFilter:
      paths:
        - src/**
        - package.json
        - package-lock.json
        - tsconfig.json
        - Dockerfile
    disk:
      name: achilles-data
      mountPath: /root/.projectachilles
      sizeGB: 5  # Bumped from 1 GB May-2026: agent build go-cache hit 681 MB
                 # alone, leaving no headroom for the Go toolchain auto-download.
    envVars:
      - key: NODE_ENV
        value: production
      - key: PORT
        value: "3000"
      - key: CLERK_PUBLISHABLE_KEY
        sync: false  # set manually in Render dashboard
      - key: CLERK_SECRET_KEY
        sync: false
      - key: SESSION_SECRET
        generateValue: true  # Render auto-generates a random 256-bit secret
      - key: ENCRYPTION_SECRET
        generateValue: true
      - key: CORS_ORIGIN
        sync: false  # https://<your-frontend>.onrender.com (full URL with scheme)
      - key: AGENT_SERVER_URL
        sync: false  # https://<your-backend>.onrender.com (full URL with scheme)
      - key: TESTS_REPO_URL
        sync: false
      - key: TESTS_REPO_BRANCH
        value: main
      - key: AGENT_REPO_URL
        sync: false  # https://github.com/your-org/ProjectAchilles.git (for agent builds)
      - key: AGENT_REPO_BRANCH
        value: main
      - key: GITHUB_TOKEN
        sync: false
      - key: ELASTICSEARCH_CLOUD_ID
        sync: false
      - key: ELASTICSEARCH_API_KEY
        sync: false

  # ─── Frontend (Vite + nginx) ─────────────────────────────────────────────────
  - type: web
    name: achilles-frontend
    runtime: docker
    dockerfilePath: ./Dockerfile
    dockerContext: .
    rootDir: frontend
    plan: starter
    buildFilter:
      paths:
        - src/**
        - public/**
        - package.json
        - package-lock.json
        - tsconfig.json
        - Dockerfile
        - nginx.conf
        - docker-entrypoint.sh
    envVars:
      - key: CLERK_PUBLISHABLE_KEY
        sync: false  # same publishable key as backend — set manually
      - key: VITE_API_URL
        sync: false  # https://<your-backend>.onrender.com (direct CORS, no nginx proxy)