ficecal/render.yaml at develop · duksh/ficecal · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
# render.yaml — FiceCal v2 Render.com service definitions
# Docs: https://render.com/docs/render-yaml-ref
#
# Deploy: connect duksh/ficecal repo in Render dashboard → "Apply from render.yaml"
# Secrets (AWS keys, etc.) must be added manually in the Render dashboard — never here.

services:
  - type: web
    name: ficecal-mcp
    runtime: node
    region: oregon
    branch: develop
    buildCommand: >-
      corepack enable &&
      pnpm install --frozen-lockfile &&
      pnpm -r run --if-present build &&
      cd services/mcp &&
      pnpm build
    startCommand: node services/mcp/dist/server.js
    healthCheckPath: /mcp/v1/health
    envVars:
      - key: NODE_ENV
        value: production
      - key: INGEST_MODE
        value: fixture
      - key: LOG_LEVEL
        value: info
      - key: CORS_ORIGIN
        value: https://duksh.github.io
      - key: MCP_CATALOG_REFRESH_INTERVAL_MS
        value: "21600000"
    # PORT and HOST are injected automatically by Render — do not add them here.
    #
    # ── Live billing env vars — add these manually in the Render dashboard ──────
    # These are NOT committed here because they contain secrets or account IDs.
    #
    # Global live-billing switch (set to "1" to enable all live adapters):
    #   FICECAL_LIVE_BILLING=1
    #
    # AWS Cost Explorer (live adapter — requires IAM ce:GetCostAndUsage):
    #   AWS_ACCESS_KEY_ID
    #   AWS_SECRET_ACCESS_KEY
    #   AWS_REGION          (default: us-east-1)
    #   AWS_ACCOUNT_ID      (optional, cosmetic — avoids an STS call)
    #
    # GCP BigQuery Billing Export (live adapter — requires bigquery.jobs.create +
    #   bigquery.tables.getData on the billing export table):
    #   GCP_BILLING_PROJECT_ID     — GCP project containing the billing dataset
    #   GCP_BILLING_DATASET        — BigQuery dataset name (default: billing_export)
    #   GCP_BILLING_TABLE          — table name (default: gcp_billing_export_v1)
    #   GOOGLE_APPLICATION_CREDENTIALS — path to service account JSON (optional;
    #                                    uses ADC / Workload Identity if not set)
    #
    # Azure Cost Management (live adapter — requires Cost Management Reader RBAC
    #   role on the subscription):
    #   AZURE_SUBSCRIPTION_ID  — Azure subscription ID
    #   AZURE_TENANT_ID        — Azure AD tenant ID
    #   AZURE_CLIENT_ID        — service principal app (client) ID
    #   AZURE_CLIENT_SECRET    — service principal client secret