forked from MGOPW/news.tskr.io
-
Notifications
You must be signed in to change notification settings - Fork 0
/
render.yaml
82 lines (77 loc) · 2.99 KB
/
render.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
#####
# Documentation
# Redwood: https://render.com/docs/deploy-redwood
# YAML (all config values): https://render.com/docs/yaml-spec
#####
services:
- name: news-tskr-io-web
type: web
env: static
buildCommand: yarn install && yarn rw deploy render web
staticPublishPath: ./web/dist
envVars:
- key: NODE_VERSION
value: 16
- key: SKIP_INSTALL_DEPS
value: true
- key: REDIS # this must match the name of the environment variable used in production.rb
fromService:
type: redis
name: cache
property: connectionString
routes:
- type: rewrite
source: /index.xml
destination: https://news-tskr-io-api.onrender.com/rss
- type: rewrite
source: /.redwood/functions/*
destination: https://news-tskr-io-api.onrender.com/*
- type: rewrite
source: /*
destination: /index.html
headers:
- path: /*
name: X-Frame-Options
value: DENY
- path: /*
name: X-XSS-Protection
value: "1; mode=block"
- path: /*
name: X-Content-Type-Options
value: "nosniff"
- path: /*
name: Strict-Transport-Security
value: "max-age=63072000; includeSubDomains; preload"
- path: /*
name: Referrer-Policy
value: "same-origin"
#Content-Security-Policy = "default-src 'none'; manifest-src 'self'; worker-src 'self'; connect-src 'self' ; img-src 'self'; script-src 'self' ; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'; base-uri 'self';"
- path: /*
name: Content-Security-Policy
value: "script-src 'self' https://monitoring.jace.pro/minneapolis.js; style-src 'unsafe-inline'; img-src https: data:; connect-src 'self' https://monitoring.jace.pro/api/collect; worker-src 'self'; frame-ancestors 'self'; base-uri 'self'; manifest-src 'self'"
# value: "script-src 'self' https://monitoring.jace.pro/minneapolis.js; style-src 'unsafe-inline'; img-src 'self' https://static.rainfocus.com; connect-src 'self' https://monitoring.jace.pro/api/collect; worker-src 'self'; frame-ancestors 'self'; base-uri 'self'; manifest-src 'self'"
# default-src 'none'; manifest-src 'self'; worker-src 'self'; connect-src 'self' https://monitoring.jace.pro/api/collect; img-src 'self'; script-src 'self' https://monitoring.jace.pro/minneapolis.js; style-src 'unsafe-inline' ; frame-ancestors 'self'; base-uri 'self';
- name: news-tskr-io-api
type: web
env: node
region: oregon
buildCommand: yarn && yarn rw build api
startCommand: yarn rw deploy render api
envVars:
- key: NODE_VERSION
value: 16
- key: DATABASE_URL
fromDatabase:
name: news-tskr-io-db
property: connectionString
- type: redis
name: cache
#ipAllowList: [] # only allow internal connections
plan: free # optional (defaults to starter)
maxmemoryPolicy: allkeys-lfu # optional (defaults to allkeys-lru). Rails recommends allkeys-lfu as a default.
ipAllowList:
- source: 0.0.0.0/0
description: public
databases:
- name: news-tskr-io-db
region: oregon