Adds a Render Blueprint (render.yaml) and supporting pieces so nanobot can
be deployed to Render in one click, with persistent memory across deploys.
- render.yaml: web service + 1GB persistent disk mounted at
/home/nanobot/.nanobot. Prompts for ANTHROPIC_API_KEY and
NANOBOT_WEB_TOKEN at deploy time (sync: false).
- render-config.json: committed gateway config that wires secrets via
${VAR} placeholders (resolved at runtime). Nothing secret is committed.
- entrypoint.sh: adds a branch gated on RENDER=true that copies the config
onto the mounted disk, chowns the root-owned mount, and drops to the
non-root nanobot user via setpriv. Local (non-Render) path is unchanged.
- Dockerfile: COPY render-config.json; USER nanobot -> USER root so the
entrypoint can chown the freshly-mounted disk before dropping privileges;
add PYTHONUNBUFFERED/PYTHONFAULTHANDLER for diagnosable crash output.
- README.md: Deploy to Render button + section.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
34 lines
592 B
JSON
34 lines
592 B
JSON
{
|
|
"agents": {
|
|
"defaults": {
|
|
"model": "anthropic/claude-opus-4-8",
|
|
"provider": "auto"
|
|
}
|
|
},
|
|
"providers": {
|
|
"anthropic": {
|
|
"apiKey": "${ANTHROPIC_API_KEY}"
|
|
}
|
|
},
|
|
"gateway": {
|
|
"host": "127.0.0.1",
|
|
"port": 18790
|
|
},
|
|
"channels": {
|
|
"websocket": {
|
|
"enabled": true,
|
|
"host": "0.0.0.0",
|
|
"port": 8765,
|
|
"token": "${NANOBOT_WEB_TOKEN}",
|
|
"websocketRequiresToken": true
|
|
}
|
|
},
|
|
"tools": {
|
|
"restrictToWorkspace": true,
|
|
"webuiAllowRemotePackageInstall": false,
|
|
"my": {
|
|
"allowSet": false
|
|
}
|
|
}
|
|
}
|