Skip to content

render.md

Latest commit

 

History

History
44 lines (36 loc) · 2.29 KB

render.md

File metadata and controls

44 lines (36 loc) · 2.29 KB
Raw

Deploy to Render

Status: spec validated, deploy not exercised. render.yaml passes render blueprints validate semantics offline against Render's published JSON schema (https://render.com/schema/render.yaml.json, checked with ajv; a wrong plan or field name fails the check) — the Render CLI itself needs a workspace login to run the command. No Render account was available, so the button and the deploy were not run.

What runs where: one web service built from the Dockerfile (runtime: docker), a 1 GB persistent disk at /data for the session map (OPENMUSE_STATE_DIR=/data), the health check on /api/health. Disks need a paid instance (plan: starter); a free instance would have no disk and would spin down.

Render is the one host that generates secret values: render.yaml marks OPENMUSE_OWNER_SECRET, OPENMUSE_COOKIE_SECRET and OPENMUSE_AGENT_SECRET generateValue: true (a base64 256-bit value each), and prompts only for OPENCOMPUTER_API_KEY and OPENCOMPUTER_PROJECT_ID (sync: false). The app registers the generated agent secret with the platform when you sign in.

Steps

  1. Locally, once: npm ci && npx opencomputer login && npm run setup -- --target render (links or creates the project and prints its id).

  2. Click the button. The repository is private: install Render's GitHub App on it first (Render's docs: public repos work out of the box, private GitHub repos need the app).

    Deploy to Render

    Paste OPENCOMPUTER_API_KEY and OPENCOMPUTER_PROJECT_ID when prompted. Render prompts for sync: false values only when the Blueprint is first created.

  3. When the service is live, copy its URL (https://openmuse-<suffix>.onrender.com) and run npm run setup -- --origin <that URL> locally: it deploys the agents pinned to that origin.

  4. Read OPENMUSE_OWNER_SECRET in the service's Environment tab in the Render dashboard; open the URL and sign in with it. The sign-in registers the installation secret for the origin.

Rotation: change OPENMUSE_OWNER_SECRET and OPENMUSE_COOKIE_SECRET in the dashboard; every existing login stops working. Render does not regenerate generateValue variables on later Blueprint syncs.