mirror of
https://github.com/temetro/temetro.git
synced 2026-07-26 11:58:14 +00:00
Khalid Abdi
f10d01546b
Scan-to-connect only worked on the same Wi-Fi because the QR carried a LAN relay URL. Give the relay a public address two ways: - `npm run dev:tunnel` (scripts/dev-tunnel.mjs) opens a cloudflared tunnel to localhost:4000 and starts the backend with PUBLIC_RELAY_URL set to the public https URL, so the QR carries it and a phone on any network connects. - Deploy configs for Fly.io (fly.toml), Render (render.yaml), and Railway (railway.json), all building the existing Dockerfile. Also harden resolveRelayUrl to honor x-forwarded-proto so the derived QR URL is https behind a TLS proxy (iOS ATS requires wss). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
49 lines
1.5 KiB
YAML
49 lines
1.5 KiB
YAML
# Render Blueprint for the temetro backend + wallet relay.
|
|
#
|
|
# Render discovers render.yaml at the repo root, so for this monorepo either set
|
|
# the service's Root Directory to `backend/` in the dashboard, or copy this file
|
|
# to the repo root and prefix the paths with `backend/`.
|
|
#
|
|
# After the first deploy, set the public URL env vars (Render → service →
|
|
# Environment): PUBLIC_RELAY_URL and BETTER_AUTH_URL to https://<service>.onrender.com,
|
|
# and FRONTEND_URL to your frontend origin. PUBLIC_RELAY_URL is what gets baked
|
|
# into the wallet-import QR, so it must be the public https URL.
|
|
|
|
databases:
|
|
- name: temetro-db
|
|
databaseName: temetro
|
|
user: temetro
|
|
plan: free
|
|
postgresMajorVersion: "17"
|
|
|
|
services:
|
|
- type: web
|
|
name: temetro-backend
|
|
runtime: docker
|
|
dockerfilePath: ./Dockerfile
|
|
dockerContext: .
|
|
plan: free
|
|
healthCheckPath: /health
|
|
envVars:
|
|
- key: DATABASE_URL
|
|
fromDatabase:
|
|
name: temetro-db
|
|
property: connectionString
|
|
- key: NODE_ENV
|
|
value: production
|
|
- key: PORT
|
|
value: "4000"
|
|
# Generated once and kept stable by Render (no on-disk volume needed).
|
|
- key: BETTER_AUTH_SECRET
|
|
generateValue: true
|
|
- key: AI_CREDENTIALS_KEY
|
|
generateValue: true
|
|
# Set these to your public URLs after the first deploy (sync:false = enter
|
|
# in the dashboard, not committed).
|
|
- key: PUBLIC_RELAY_URL
|
|
sync: false
|
|
- key: BETTER_AUTH_URL
|
|
sync: false
|
|
- key: FRONTEND_URL
|
|
sync: false
|