1dcdba04a6
Allows for the creation of user accounts. A few notes on the specifics: - Experiments are the main access control objects. If you can view an experiment, you can view all its prompts/scenarios/evals. If you can edit it, you can edit or delete all of those as well. - Experiments are owned by Organizations in the database. Organizations can have multiple members and members can have roles of ADMIN, MEMBER or VIEWER. - Organizations can either be "personal" or general. Each user has a "personal" organization created as soon as they try to create an experiment. There's currently no UI support for creating general orgs or adding users to them; they're just in the database to future-proof all the ACL logic. - You can require that a user is signed-in to see a route using the `protectedProcedure` helper. When you use `protectedProcedure`, you also have to call `ctx.markAccessControlRun()` (or delegate to a function that does it for you; see accessControl.ts). This is to remind us to actually check for access control when we define a new endpoint.
39 lines
987 B
YAML
39 lines
987 B
YAML
databases:
|
|
- name: querykey-prod
|
|
databaseName: querykey_prod
|
|
user: querykey
|
|
plan: starter
|
|
|
|
services:
|
|
- type: web
|
|
name: querykey-prod-web
|
|
env: docker
|
|
dockerfilePath: Dockerfile
|
|
dockerContext: .
|
|
plan: standard
|
|
domains:
|
|
- app.openpipe.ai
|
|
envVars:
|
|
- key: NODE_ENV
|
|
value: production
|
|
- key: DATABASE_URL
|
|
fromDatabase:
|
|
name: querykey-prod
|
|
property: connectionString
|
|
- fromGroup: querykey-prod
|
|
- key: NEXT_PUBLIC_SOCKET_URL
|
|
value: https://querykey-prod-wss.onrender.com
|
|
# Render support says we need to manually set this because otherwise
|
|
# sometimes it checks a different random port that NextJS opens for
|
|
# liveness and the liveness check fails.
|
|
- key: PORT
|
|
value: 10000
|
|
|
|
- type: web
|
|
name: querykey-prod-wss
|
|
env: docker
|
|
dockerfilePath: Dockerfile
|
|
dockerContext: .
|
|
plan: free
|
|
dockerCommand: pnpm tsx src/wss-server.ts
|