render.yaml

# HAIP — Render Blueprint (one-click cloud demo)
#
# ⚠️  DEMO ONLY — NOT A SECURE PRODUCTION TEMPLATE. ⚠️
# This blueprint runs with AUTH_ENABLED=false + HAIP_ALLOW_INSECURE=true + mock
# payments so the public demo is browsable with zero setup. That means EVERY API
# endpoint (incl. /api/v1/connect/*) is reachable WITHOUT authentication. Do NOT
# point real guest/PII or live payments at a deployment using these values.
# For a real deployment: remove HAIP_ALLOW_INSECURE, set AUTH_ENABLED=true with a
# configured Keycloak, set STRIPE_MODE=live/test with real keys, and set a strong
# CONNECT_API_KEY. (The API refuses to boot production-like with auth off UNLESS
# HAIP_ALLOW_INSECURE=true — so removing that line is the intended hardening step.)
#
# Deploy a fully-working HAIP demo (API + dashboard + AI agents, seeded) with no
# local setup. Render provisions Postgres + Redis, builds the Docker image, runs
# migrate+seed via preDeployCommand, then serves the app.
#
# Use the "Deploy to Render" button in the README, or:
#   render blueprint launch   (Render CLI)
#
# Note: plan names/tiers change over time — adjust `plan:` values to match the
# tiers available in your Render account if a deploy is rejected.

services:
  - type: web
    name: haip-demo
    runtime: docker
    dockerfilePath: ./apps/api/Dockerfile
    dockerContext: .
    plan: starter
    healthCheckPath: /api/v1/health
    # Push schema + seed the demo hotel before each deploy goes live.
    # Idempotent (schema IF NOT EXISTS; seed skips if property 'TGH' exists),
    # so redeploys are safe. Runs in the built image (compiled dist, no tsx).
    preDeployCommand: 'node packages/database/dist/push-schema.js && node packages/database/dist/seed.js'
    envVars:
      - key: NODE_ENV
        value: production
      - key: SERVE_DASHBOARD
        value: 'true'
      - key: PORT
        value: '3000'
      - key: AUTH_ENABLED
        value: 'false'
      - key: STRIPE_MODE
        value: mock
      # This is the intentional public demo: it runs with auth off and mock
      # payments. The API refuses to boot in production with that config UNLESS
      # this opt-in is set — which prevents an accidental insecure real deployment
      # while keeping the demo green.
      - key: HAIP_ALLOW_INSECURE
        value: 'true'
      - key: DATABASE_URL
        fromDatabase:
          name: haip-postgres
          property: connectionString
      - key: REDIS_URL
        fromService:
          type: redis
          name: haip-redis
          property: connectionString

  - type: redis
    name: haip-redis
    plan: free
    maxmemoryPolicy: noeviction
    ipAllowList: [] # only reachable from services in this blueprint

databases:
  - name: haip-postgres
    plan: free