render.yaml

# Render Blueprint. In Render: New → Blueprint → pick this repo.
# It creates the web service, attaches the disk, and asks for the secrets.
services:
  - type: web
    name: simple-lms
    runtime: docker
    dockerfilePath: ./Dockerfile
    plan: starter                 # 512 MB / 0.5 CPU
    region: ohio                  # change if your clients need data elsewhere
    healthCheckPath: /api/health
    autoDeploy: true              # redeploy when main is pushed

    disk:
      name: lms-data
      mountPath: /data            # the database and every SCORM package
      sizeGB: 10

    envVars:
      - key: SESSION_SECRET
        generateValue: true       # Render generates it once and keeps it
      - key: LMS_DATA_DIR
        value: /data
      - key: TZ
        value: America/New_York

      # Nightly off-site backup. Runs inside this service because Render cron
      # jobs run in a separate container and cannot see this disk.
      - key: BACKUP_HOUR_UTC
        value: "7"                # 07:00 UTC ≈ 2–3am US Eastern
      - key: BACKUP_RETAIN_DAYS
        value: "30"
      - key: B2_BUCKET
        sync: false               # you fill these in, they are never in git
      - key: B2_KEY_ID
        sync: false
      - key: B2_APP_KEY
        sync: false

      # Email reminders. Without these nothing is sent and reminders are
      # recorded as suppressed, so switching it on later does not fire a backlog.
      - key: APP_URL
        sync: false               # e.g. https://training.example.org
      - key: MAIL_FROM
        sync: false               # e.g. Training <training@example.org>
      - key: RESEND_API_KEY
        sync: false
      - key: MAIL_REPLY_TO
        sync: false               # a mailbox someone reads — replies to a
                                  # notifications. address go nowhere otherwise
      - key: NOTIFY_HOUR_UTC
        value: "13"