molecule-core/render.yaml
Hongming Wang d8026347e5 chore: open-source restructure — rename dirs, remove internal files, scrub secrets
Renames:
- platform/ → workspace-server/ (Go module path stays as "platform" for
  external dep compat — will update after plugin module republish)
- workspace-template/ → workspace/

Removed (moved to separate repos or deleted):
- PLAN.md — internal roadmap (move to private project board)
- HANDOFF.md, AGENTS.md — one-time internal session docs
- .claude/ — gitignored entirely (local agent config)
- infra/cloudflare-worker/ → Molecule-AI/molecule-tenant-proxy
- org-templates/molecule-dev/ → standalone template repo
- .mcp-eval/ → molecule-mcp-server repo
- test-results/ — ephemeral, gitignored

Security scrubbing:
- Cloudflare account/zone/KV IDs → placeholders
- Real EC2 IPs → <EC2_IP> in all docs
- CF token prefix, Neon project ID, Fly app names → redacted
- Langfuse dev credentials → parameterized
- Personal runner username/machine name → generic

Community files:
- CONTRIBUTING.md — build, test, branch conventions
- CODE_OF_CONDUCT.md — Contributor Covenant 2.1

All Dockerfiles, CI workflows, docker-compose, railway.toml, render.yaml,
README, CLAUDE.md updated for new directory names.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-18 00:24:44 -07:00

82 lines
3.0 KiB
YAML

# Render deployment configuration for Molecule AI
# Deploy with one click: https://render.com/deploy
#
# This file provisions:
# - platform (Go API server)
# - canvas (Next.js frontend)
# - postgres (managed Postgres 16)
# - redis (managed Redis 7)
#
# Required: set SECRETS_ENCRYPTION_KEY in the Render dashboard after first deploy.
# Generate: openssl rand -base64 32
services:
# ── Go Platform API ────────────────────────────────────────────────────────
- type: web
name: molecule-platform
runtime: docker
dockerfilePath: ./workspace-server/Dockerfile
dockerContext: ./platform
plan: starter
healthCheckPath: /health
envVars:
- key: PORT
value: "8080"
- key: DATABASE_URL
fromDatabase:
name: molecule-postgres
property: connectionString
- key: REDIS_URL
fromService:
name: molecule-redis
type: redis
property: connectionString
- key: PLATFORM_URL
# Set this to your platform's public Render URL after first deploy,
# e.g. https://molecule-platform.onrender.com
value: "https://molecule-platform.onrender.com"
- key: CORS_ORIGINS
# Set to your canvas public URL after first deploy
value: "https://molecule-canvas.onrender.com"
- key: RATE_LIMIT
value: "500"
- key: SECRETS_ENCRYPTION_KEY
# REQUIRED: set this in Render dashboard → Environment
# Generate: openssl rand -base64 32
generateValue: true
- key: ACTIVITY_RETENTION_DAYS
value: "7"
# ── Next.js Canvas ─────────────────────────────────────────────────────────
- type: web
name: molecule-canvas
runtime: docker
dockerfilePath: ./canvas/Dockerfile
dockerContext: ./canvas
plan: starter
healthCheckPath: /
envVars:
- key: NEXT_PUBLIC_PLATFORM_URL
fromService:
name: molecule-platform
type: web
property: host
envVarKey: NEXT_PUBLIC_PLATFORM_URL
- key: NEXT_PUBLIC_WS_URL
# Render web services are HTTPS/WSS by default
value: "wss://molecule-platform.onrender.com/ws"
# ── Redis ──────────────────────────────────────────────────────────────────
- type: redis
name: molecule-redis
plan: starter
maxmemoryPolicy: noeviction
databases:
# ── Postgres 16 ────────────────────────────────────────────────────────────
- name: molecule-postgres
plan: starter
databaseName: molecule
user: molecule
postgresMajorVersion: 16