render.yaml

# Render Blueprint — deploys BOTH tiers of the AI Workforce Platform.
# In Render: New + → Blueprint → connect this repo → Apply. Render reads this file.
# Free plan note: services sleep after ~15 min idle and wake on first request.

services:
  # ---- Backend: Spring Boot (Java 21) via Docker ----
  - type: web
    name: ai-workforce-backend
    runtime: docker
    rootDir: backend
    dockerfilePath: ./Dockerfile
    plan: free
    healthCheckPath: /api/health
    envVars:
      - key: JWT_SECRET
        generateValue: true            # Render generates a strong secret
      - key: ANTHROPIC_API_KEY
        sync: false                    # set this yourself in the dashboard (for AI replies)
      - key: CORS_ALLOWED_ORIGINS
        value: https://ai-workforce-frontend.onrender.com   # adjust if Render gives the frontend a different URL
      # Supabase (PostgreSQL) — durable shared DB. Set these in the dashboard.
      - key: SPRING_DATASOURCE_URL
        sync: false                    # jdbc:postgresql://aws-0-<region>.pooler.supabase.com:5432/postgres?sslmode=require
      - key: SPRING_DATASOURCE_USERNAME
        sync: false                    # postgres.<project-ref>
      - key: SPRING_DATASOURCE_PASSWORD
        sync: false                    # your Supabase DB password
      - key: SPRING_DATASOURCE_DRIVER_CLASS_NAME
        value: org.postgresql.Driver
      - key: SPRING_H2_CONSOLE_ENABLED
        value: "false"

  # ---- Frontend: Next.js 15 (Node) ----
  - type: web
    name: ai-workforce-frontend
    runtime: node
    rootDir: frontend
    plan: free
    buildCommand: npm ci && npm run build
    startCommand: npm start
    envVars:
      # Frontend talks to the backend. NEXT_PUBLIC_* is baked in at BUILD time,
      # so this must be set before the build (it is, via this blueprint).
      # Adjust if Render gives the backend a different URL than predicted.
      - key: NEXT_PUBLIC_API_URL
        value: https://ai-workforce-backend.onrender.com/api