render.yaml

services:
  - type: kv
    name: trdrhub-redis
    plan: free  # Use 'starter' or 'standard' for production
    region: oregon
    maxmemoryPolicy: allkeys-lru

  - type: web
    name: trdrhub-api
    env: python
    plan: standard
    region: singapore
    rootDir: apps/api
    buildCommand: pip install --upgrade pip && pip install -r requirements.txt
    startCommand: uvicorn main:app --host 0.0.0.0 --port $PORT
    # preDeployCommand runs BEFORE the new container goes live. If the
    # migration fails (or applies to the wrong DB), the deploy aborts and
    # the previous container keeps serving — no broken-schema window.
    # Was postDeployCommand, but that runs AFTER traffic switches over,
    # which let the 2026-04-22 workflow_type drift hit prod for hours.
    preDeployCommand: alembic upgrade head
    autoDeploy: true
    healthCheckPath: /healthz
    envVars:
      - key: ENVIRONMENT
        value: production
      # Redis connection: After creating Key Value Store, copy REDIS_URL from the
      # Key Value Store service and add it manually to this web service's environment variables
      # Example:
      # - key: REDIS_URL
      #   value: redis://red-xxxxx:6379  # Copy from Key Value Store service
      #   sync: false
      # Map secrets via Render Environment Groups or manual entries:
      # - fromGroup: trdrhub-api-secrets