Migrate a Django App from Heroku to Render (and get it ready for prod)
Tags: webdev, django, cloud, tutorial
Published: 2022-07-01 19:12:51

**By Rosalind Benoit - June 27, 2022**

Picture this: you run a hefty Django app, an online store for your company. It’s a collection of services – an API, a shiny frontend, a database, an in-memory datastore, worker nodes, a GUI for admins, a bunch of scheduled jobs…the whole shebang – all tuned to perform quickly for your customers. You’re ready to kick into high gear as the busy season approaches and the team preps new product launches.

Then suddenly, your cloud provider is struggling with operational challenges. You can’t deploy updates. You’re channeling #HugOps, but your apps must continue to #JustWork.

{% embed https://twitter.com/nicksergeant/status/1527293265149513736?ref_src=twsrc%5Etfw %}

<br />

While our [migration guide](https://render.com/docs/migrate-from-heroku) explains the process for moving any kind of app over, I often like to have a detailed example to follow. As a Python developer and a former Drupal and Magento admin for a retail chain, I wanted to share a migration post that could help someone in a time of need like the one described above. With this guide, I will help you move your Django app to Render so that it's production-ready : ) If you’re looking to start fresh instead, check out our guide for quickly [deploying a new Django app](https://render.com/docs/deploy-django).

{% embed https://twitter.com/nicksergeant/status/1527307407466106880?ref_src=twsrc%5Etfw %}

<br />

This post will walk through a practical example of migrating an application from Heroku to Render using [Saleor](https://saleor.io/), a popular open-source e-commerce system. Based on Django and Python, Saleor has served high-volume companies in retail sectors like publishing and apparel since 2012 and is still growing rapidly. The latest major update introduces a modular front end powered by a GraphQL API and written with React and TypeScript.

## Why Saleor, Why Render?

Lots of Render users may encounter real-world use cases in which they need to deploy a full-featured storefront, and Saleor provides a flexible API-first solution. The framework appeals to us at Render because it’s developer-first, actively maintained, and receptive to community feedback and contribution.

You may wonder why you would want to migrate your Django app from Heroku to Render. Our [comparison page](https://render.com/render-vs-heroku-comparison) explains all the benefits you'll get – like private networking, HTTP/3, and DDoS protection, among many other things. Running a production-grade instance of Saleor on Heroku gets complicated really quickly. This guide explains how we addressed much of that complexity in the Render environment.

There is one more reason we chose the Saleor project for this guide. We often hear questions about Docker Compose from our users interested in taking advantage of [Render’s implementation of IaC](https://render.com/docs/infrastructure-as-code) (infrastructure-as-code). Within on of its repositories, the Saleor project maintains code and documentation for deploying all components of Saleor [using Docker Compose](https://github.com/saleor/saleor-platform/blob/main/docker-compose.yml). This guide will also discuss how we translated that `docker-compose.yml` into a Render Blueprint.


![A screenshot of the homepage of the Saleor Demo, an e-commerce site with Saleor-branded items for sale.](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/e7lxfp95c1w8nuq0oeby.png)

Before embarking on a migration, it helps to understand how some high-level concepts map from Heroku to Render. Check out the helpful [concept mapping](https://render.com/docs/migrate-from-heroku#concept-mapping) my coworker Chris put together.

## Deploy Saleor on Render

In the first part of this post, we’ll migrate a demo instance of Saleor from Heroku to Render. In the second half, we’ll productionalize Saleor on Render. If you want to follow along on our journey interactively, fork the [saleor repository](https://github.com/saleor/saleor).

We’ll start by creating a `render.yaml` file at the root of our repository. If our deployment is a Bob Ross creation, this is our blank canvas – the Blueprint that defines and integrates all the components of the working production application. You can certainly use the Render Dashboard to deploy services and databases individually, but we’ll codify the architecture in a `render.yaml` so we can:

- Reduce the chance of human error
- Reduce repetitive point-and-click configuration
- Define a source of truth for the architecture with version control and git blame

Saleor’s README invitation to deploy their demo on a Heroku instance acts as our entry point for this post. We’ll first walk through each stage of migrating the demo to Render, and then illustrate steps for making the Django app production-ready. Saleor consists of three components: the Saleor Core backend server, the Saleor Dashboard GUI, and the Saleor React Storefront. Here's a preview of the architecture we'll deploy:


![The Saleor architecture diagram](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/2gxk16djpkyd68tb4og8.png)

We’ll paint each happy little tree at a time 🌳, but you can peek at the final creation [on Github](https://github.com/render-examples/saleor). 

Part One: [Migrate a Django App from Heroku to Render](#migrate-a-django-app-from-heroku-to-render)

1. [Create a Web Service for the API](#create-a-web-service)
1. [Add a Database](#add-a-database)
1. [Add Redis](#add-redis)
1. [Add Build Steps](#add-build-steps)
1. [Add a Frontend React App](#add-a-react-storefront)
1. [Add a Static Dashboard](#add-a-dashboard)

Part Two: [Productionalize a Django App on Render](#productionalizing-a-django-app-on-render)

1. [Add a Secret File](#add-a-secret-file)
1. [Add a Background Worker](#add-background-worker)
1. [Add a Cron Job](#add-cron-job)
1. [Update Build Steps](#update-build-script)
1. [Add Runtime Steps](#add-runtime-script)
1. [Add a Message Broker](#add-cloudamqp)
1. [DRY It Up](#dry-it-up)
1. [Help! (a Helper File for Derived Variables)](#help-a-helper-file-for-derived-variables)
1. [Next Steps](#next-steps)

<info-block>

**A note on using other application manifests to generate Blueprints:**

If your application has been deployed on Heroku or with an infrastructure provisioning tool, you likely have other infrastructure-as-code files, like a `Procfile` or `docker-compose.yml`, to refer to while setting up a deployment to Render. These files can act as useful tools for creating Blueprints. This post will reference several alternative application manifests to demonstrate how they were used.

The saleor and saleor-dashboard repositories both contain `app.json` files for Heroku deployment. The Saleor project also includes the saleor-platform repository, which combines the Saleor API, saleor-dashboard, and the react-storefront. Both saleor-platform and the Heroku deployments are intended for local development and demo purposes and do not reflect productionalized Saleor environments. Still, we’ll use `app.json` and Docker Compose files  as guides for getting started with a Blueprint that describes the Saleor services and their attributes. These resources are particularly helpful in pointing us to the environment variables and commands necessary to build and run an app.

</info-block>

## Migrate a Django App from Heroku to Render

To begin, we will deploy the Saleor Core API server using Render’s native Python environment. We maintain [native environments](https://render.com/docs/native-environments) to make deploying to production similar in complexity to running code locally. Like Buildpacks in Heroku, they provide common language runtimes and minimize the need to provision utilities used to build and deploy; native environments aim to provide more control and customization capability while requiring fewer steps to use and understand than Buildpacks. Let’s jump in to creating a `render.yaml` to set up our demo Django app!

### Create a Web Service

We’ll begin by defining a Web Service for the Django app’s GraphQL API in a brand new `render.yaml`. This service is described in an [`app.json file`](https://github.com/saleor/saleor/blob/main/app.json) and corresponds to the [`api` service](https://github.com/saleor/saleor-platform/blob/main/docker-compose.yml#L4-L33) in the saleor-platform `docker-compose.yml`.

```yaml
services:
  - name: saleor
    type: web
    env: python
    repo: https://github.com/render-examples/saleor
    buildCommand: pip3 install -r requirements.txt && python manage.py migrate --no-input
    startCommand: ALLOWED_HOSTS=".onrender.com" gunicorn --bind :$PORT --workers 4 --worker-class uvicorn.workers.UvicornWorker saleor.asgi:application
    envVars:
      - key: DJANGO_SETTINGS_MODULE
        value: saleor.settings
      - key: DEBUG
        value: True
      - key: NPM_CONFIG_PRODUCTION
        value: false
      - key: DEFAULT_FROM_EMAIL
        value: noreply@example.com
      - key: ENABLE_ACCOUNT_CONFIRMATION_BY_EMAIL
        value: False
      - key: SECRET_KEY
        generateValue: true
      - key: PYTHON_VERSION
        value: 3.9.0
```

Let’s make sure each line is clear.

- `name` is a name for our service to make it easy to find on the Render Dashboard. It’s interchangeable with the `name` in `app.json` and is also used to generate an .onrender.com URL.
- `type` tells Render that we’d like to create a Web Service. When we’re deploying an API, the type may be either `web` or `pserv` (Private Service), depending on the use case.
- `env` specifies that we’d like to use Render’s native Python environment. This environment includes OS packages that common Python libraries need in addition to Python 3 specific environment variables.
- `repo` specifies which repository we'll deploy from; update this if you're deploying your own fork of Saleor Core.
- `buildCommand` tells Render which commands or files to run to build the Django app. Read more about [`render-build.sh`](#add-build-steps) below. Heroku buildpacks often handle build elements behind the scenes, but Render encourages being more transparent and provides more control. Use the `RUN` commands from builds described in Dockerfiles as a guide for build commands to include in a blueprint.
- `startCommand` tells Render which commands or files to run to start the Django app. This command is [specified in the `Procfile`](https://github.com/saleor/saleor/blob/main/Procfile#L2) for a Heroku build. We'll prepend the command with the [`ALLOWED_HOSTS`](https://docs.djangoproject.com/en/3.0/ref/settings/#allowed-hosts) environment variable. Referencing the standard `RENDER_EXTERNAL_HOSTNAME` variable will add our API's hostname to the [list of allowed hosts](https://github.com/saleor/saleor/blob/main/saleor/settings.py#L408).
- `DJANGO_SETTINGS_MODULE` is an environment variable that [Django requires](https://docs.djangoproject.com/en/4.0/topics/settings/#envvar-DJANGO_SETTINGS_MODULE) to determine which settings to use.
- `DEBUG` is an environment variable that Django requires, and should never be set to `TRUE` in [production deployments](https://render.com/docs/deploy-django#go-production-ready). We’ll use `DEBUG=True` for our first demo deployment.
- `DEFAULT_FROM_EMAIL` is an environment variable that Saleor uses to set a [default email address for outgoing email](https://docs.saleor.io/docs/2.11/developer/running-saleor/configuration#default_from_email).
- `ENABLE_ACCOUNT_CONFIRMATION_BY_EMAIL` is an environment variable that Saleor uses to control whether new account registration should require email confirmation.
- `SECRET_KEY` is an environment variable that Django requires to [provide cryptographic signing](https://docs.djangoproject.com/en/3.0/ref/settings/#secret-key).
- `PYTHON_VERSION` is an environment variable used to [customize the Python version](https://render.com/docs/python-version) for a project on Render if a version other than Render’s current default of 3.7 is required.

### Add a Database

Now we need a PostgreSQL database for the app. Let's add that to our `render.yaml`.

```yaml
# …snip…
databases:
  - name: saleor-db
    ipAllowList: [] # only allow connections from services in this Render account
```

That was simple, but how do we connect this database to the Web Service?

```yaml{23-26}
services:
  - name: saleor
    type: web
    env: python
    repo: https://github.com/render-examples/saleor
    buildCommand: pip3 install -r requirements.txt && python manage.py migrate --no-input
    startCommand: ALLOWED_HOSTS=".onrender.com" gunicorn --bind :$PORT --workers 4 --worker-class uvicorn.workers.UvicornWorker saleor.asgi:application
    envVars:
      - key: DJANGO_SETTINGS_MODULE
        value: saleor.settings
      - key: DEBUG
        value: True
      - key: NPM_CONFIG_PRODUCTION
        value: false
      - key: DEFAULT_FROM_EMAIL
        value: noreply@example.com
      - key: ENABLE_ACCOUNT_CONFIRMATION_BY_EMAIL
        value: False
      - key: SECRET_KEY
        generateValue: true
      - key: PYTHON_VERSION
        value: 3.9.0
      - key: DATABASE_URL
        fromDatabase:
          name: saleor-db
          property: connectionString

databases:
  - name: saleor-db
    ipAllowList: [] # only allow internal connections
```

The highlighted lines create an environment variable whose value is the connection string for the database.

### Add Redis

This Django app uses Redis for [caching](https://docs.djangoproject.com/en/4.0/topics/cache/#redis), so let's add Redis.

```yaml
services:
  # …snip…
  - name: saleor-redis
    type: redis
    ipAllowList: [] # only allow connections from services in this Render account
```

And similar to the database, we now need to tell the API how to access the Redis instance.

```yaml{25-29}
services:
  - name: saleor
    type: web
      env: python
      repo: https://github.com/render-examples/saleor
      buildCommand: pip3 install -r requirements.txt && python manage.py migrate --no-input
      startCommand: ALLOWED_HOSTS=".onrender.com" gunicorn --bind :$PORT --workers 4 --worker-class uvicorn.workers.UvicornWorker saleor.asgi:application
      envVars:
      - key: DJANGO_SETTINGS_MODULE
        value: saleor.settings
      - key: DEBUG
          value: True
      - key: NPM_CONFIG_PRODUCTION
          alue: false
      - key: DEFAULT_FROM_EMAIL
        value: noreply@example.com
      - key: ENABLE_ACCOUNT_CONFIRMATION_BY_EMAIL
        value: False
      - key: SECRET_KEY
        generateValue: true
      - key: DATABASE_URL
        fromDatabase:
          name: saleor-db
          property: connectionString
      - key: REDIS_URL
        fromService:
          type: redis
          name: saleor-redis
          property: connectionString
      - key: PYTHON_VERSION
        value: 3.9.0

databases:
    - name: saleor-db
      ipAllowList: [] # only allow internal connections
```

The highlighted lines create an environment variable whose value is the connection string for the Redis instance.

### Add Build Steps

When Django apps are built and deployed, a few extra commands are commonly run to install dependencies and perform database migrations. Let’s create a `render-build.sh` file in the root directory of our project. You can use this type of file to run any build steps your Django app requires.

```bash
#!/usr/bin/env bash
set -e # exit on error

pip3 install -r requirements.txt

python manage.py migrate --no-input
```

The value of `buildCommand` in the `render.yaml` should be the path to the `render-build.sh` file. With a build script in place, we can deploy the API, database, and Redis instance to ensure everything works as expected so far. Deploy the repository containing your `render.yaml` as a Blueprint on Render. When it's done, go to the `/graphql`/ path of your API's .onrender.com URL to see the GraphQL API Playground.

### Add a Dashboard

With the API for our Django app scaffolded, we’re ready to define a frontend service to consume it. The Saleor platform deployed on Heroku includes the [saleor-dashboard](https://github.com/saleor/saleor-dashboard), so we’ll define this in our Blueprint next. It is a single-page Node.js dashboard app, [defined in an `app.json` file](https://github.com/saleor/saleor-dashboard/blob/main/app.json) for Heroku deployment, and uses Heroku’s static buildpack.
When we migrate `saleor-dashboard` to Render, we’ll use Render’s [static environment](https://render.com/docs/static-sites). This component of our infrastructure will run for free, since Static Sites are always free on Render, and Render will serve it over a global CDN with fully managed TLS certificates. Let’s add to our `render.yaml`.

```yaml
# …snip…
  - name: saleor-dashboard
    type: web
    env: static
    repo: https://github.com/saleor/saleor-dashboard
    buildCommand: npm install && API_URI="$TEMP_API_URI/graphql/" npm run build
    staticPublishPath: ./build/
    envVars:
      - key: TEMP_API_URI
        fromService:
          name: saleor
          type: web
          envVarKey: RENDER_EXTERNAL_URL
      - key: APP_MOUNT_URI
        value: /dashboard/
      - key: STATIC_URL
        value: /dashboard/
    routes:
      - type: rewrite
        source: /
        destination: /dashboard/index.html
```

We’ve added the commands for installing dependencies and building the app to add to our `buildCommand`. The dashboard requires the `API_URI` environment variable to build successfully. To avoid hard-coding, we'll derive a temporary environment variable from our API service using the `fromService` attribute, and build our final `API_URI` as part of our `buildCommand`.

The [Dockerfile](https://github.com/saleor/saleor-dashboard/blob/main/Dockerfile) provides insight into the `staticPublishPath` required for this project; we see a `COPY` of the static contents to the /build/ directory, relative to the working directory. We also see the environment variables required to run the app in the Dockerfile, including the URI for our Saleor API and the URL where the dashboard should be mounted and served.

To translate the configuration found in [static.json](https://github.com/saleor/saleor-dashboard/blob/main/static.json) and the [NGINX configuration file](https://github.com/saleor/saleor-dashboard/blob/main/nginx/default.conf) to Render, we add a `rewrite` to route `/` requests to `/dashboard/index.html`. When we push these `render.yaml` changes, Render will automatically create the new Static Site. 

### Add a React Storefront

If I’m comparing this project to a painting, it's time we added something pretty. The final frontend piece of the Saleor platform, the storefront, is deployed to Heroku as part of the Saleor demo in its [original version](https://github.com/saleor/saleor-storefront) of the storefront. This storefront is now deprecated because in 2021, the Saleor project added a new storefront service built with Next.js, TypeScript, and Tailwind CSS. The original `saleor-storefront` can be migrated from Heroku similarly to the API and Dashboard projects, but Heroku deployment hasn’t been added to the new `react-storefront` repository. The more modern react-storefront contains a [development Dockerfile](https://github.com/saleor/react-storefront/blob/main/Dockerfile.dev) that provides clues to deployment requirements. In this guide, we’ll deploy the `react-storefront` as the final component of our demo Saleor instance.

Note that we can deploy the react-storefront on Render as-is using the Dockerfile. However, since Render provides an HTTP proxy for all Web Services, using nginx as defined in the Dockerfile is redundant. Instead, we can define our service more simply and use Render’s native NodeJS environment. We’ll use [`docker-compose.yml`](https://github.com/saleor/saleor-platform/blob/main/docker-compose.yml#L35-L53), the Dockerfile, and the [`package.json` file](https://github.com/saleor/react-storefront/blob/main/package.json) as starting points. Let’s add a storefront to our `render.yaml`.

```yaml
# …snip…
  - name: saleor-storefront
    type: web
    env: node
    repo: https://github.com/saleor/react-storefront
    buildCommand: >
      pnpm install
      && NEXT_PUBLIC_API_URI=$TEMP_NEXT_PUBLIC_API_URL/graphql/ pnpm run build
      && pnpm run postbuild
    startCommand: NEXT_PUBLIC_API_URI=$TEMP_NEXT_PUBLIC_API_URL/graphql/ pnpm start
    envVars:
      - key: TEMP_NEXT_PUBLIC_API_URL
        fromService:
          name: saleor
          type: web
          envVarKey: RENDER_EXTERNAL_URL
      - key: NEXT_PUBLIC_IMAGE_CONVERSION_FORMATS
        value: image/avif,image/webp
```

The build command is [defined in the Dockerfile](https://github.com/saleor/react-storefront/blob/main/Dockerfile.dev#L13). The `docker-compose.yml` and the Dockerfile only define `RUN` commands for a development instance, but we’ll run the `build`, `start`, and `postbuild` scripts defined in the [package.json](https://github.com/saleor/react-storefront/blob/main/package.json#L8-L19) using [pnpm run](https://pnpm.io/cli/run) commands.

The `environment:` clause of the [`docker-compose.yml`](https://github.com/saleor/saleor-platform/blob/main/docker-compose.yml#L51-L53) provides clues to the minimum environment variables required for react-storefront to run. `NEXT_PUBLIC_API_URI` is required to define the location of the GraphQL API, and we’ve set this to our Saleor API instance’s public URI with `/graphql/` added per [react-storefront docs](https://github.com/saleor/react-storefront/blob/main/docs/configuration.md). In our testing, the only other environment variable required for successful deployment was `NEXT_PUBLIC_IMAGE_CONVERSION_FORMATS`.

🎇 Get excited! 🎆 With a Dashboard and Storefront added to our Blueprint, we are ready to deploy our demo instance of Saleor. Pushing these changes will automatically deploy the storefront. Try it out if you're following along in your own repository.

## Productionalizing a Django App on Render

As I mentioned earlier, while the deploy-to-Heroku resources that Saleor provides are suitable for a demo application, we would need to modify them to deploy a production-grade instance of the Saleor platform to Heroku. Instead, we’ll walk through productionalizing our Django e-commerce app on Render. We’ll now frame and hang our painting – or maybe you prefer imagining the addition of a majestic mountain or waterfall. Either way, now that we’re beyond Heroku, keep reading to tap some handy Render features, add power, and DRY it up. We'll finish with a hardened Saleor instance impervious to "happy accidents."

### Add a Secret File

A production-grade instance of Saleor needs an [RSA private key](https://docs.saleor.io/docs/3.x/developer/running-saleor/configuration#rsa_private_key). Render’s Secret Files can help us securely store this key. To begin, we need to generate a key in the specified PEM format. We can do this locally: `ssh-keygen -t rsa -b 4096 -m PEM`

When generating the key, we should give it a unique name like `saleor-key` to avoid overwriting any existing SSH keys. No passphrase is required. With the newly-generated private key copied to the clipboard, we can navigate to our Saleor Core (API) Web Service in the Render Dashboard and create a Secret File. In __Environment__ > __Secret Files__, we can add a Secret File by providing the filename as the key and pasting the private key into Contents.


![A screenshot of the secret file dialog in The Render Dashboard, found in Environment > Secret Files](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/db6u1lynf8hh9yke00zg.png)

Now our private key is accessible at the absolute path `/etc/secrets/saleor-key`.

### Add a Background Worker

In processing web requests to your Django app, it’s often useful to offload tasks to an asynchronous background worker. Our Heroku instance of Saleor used a `celeryworker` dyno, and we can provision a similar celery worker on Render. Let’s add a celery worker to our `render.yaml`.

```yaml
# …snip…
- type: worker
  name: saleor-worker
  env: python
  repo: https://github.com/render-examples/saleor
  plan: standard
  buildCommand: ./render-build.sh
  startCommand: celery -A saleor --app=saleor.celeryconf:app worker --loglevel=info -E
  envVars:
    - key: DATABASE_URL
      fromDatabase:
        name: saleor-db
        property: connectionString
    - key: REDIS_URL
      fromService:
        type: redis
        name: saleor-redis
        property: connectionString
    - key: PYTHON_VERSION
      value: 3.9.0
    - key: DJANGO_SETTINGS_MODULE
      value: saleor.settings
    - key: DEBUG
      value: True
    - key: NPM_CONFIG_PRODUCTION
      value: false
    - key: DEFAULT_FROM_EMAIL
      value: noreply@example.com
    - key: ENABLE_ACCOUNT_CONFIRMATION_BY_EMAIL
      value: False
    - key: SECRET_KEY
      generateValue: true
```

The `plan: standard` attribute is set because the celery worker requires more memory than what's availabe in free plans. Also, adding the same environment variables that our API process uses creates some duplication in our `render.yaml`, which we’ll also address in a [later section](#dry-it-up).

### Add a Cron Job

Saleor runs a command periodically to update currency exchange rates for sellers doing business internationally. Saleor’s demo app uses the Heroku Scheduler to run this daily. We can use a Cron Job to keep the exchange rates up to date. Let’s create a Render Cron Job to run the `python manage.py update_exchange_rates --all` command at 1 AM every day.

```yaml
# …snip…
- type: cron
  name: exchange-rates
  env: python
  schedule: "0 1 * * *"
  startCommand: python manage.py update_exchange_rates --all
  buildCommand: ./render-build.sh
  repo: https://github.com/render-examples/saleor
  envVars:
    - key: DJANGO_SETTINGS_MODULE
      value: saleor.settings
    - key: DEBUG
      value: True
    - key: NPM_CONFIG_PRODUCTION
      value: false
    - key: DEFAULT_FROM_EMAIL
      value: noreply@example.com
    - key: ENABLE_ACCOUNT_CONFIRMATION_BY_EMAIL
      value: False
    - key: SECRET_KEY
      generateValue: true
    - key: PYTHON_VERSION
      value: 3.9.0
    - key: DATABASE_URL
      fromDatabase:
        name: saleor-db
        property: connectionString
    - key: REDIS_URL
      fromService:
        type: redis
        name: saleor-redis
        property: connectionString
    - key: OPENEXCHANGERATES_API_KEY
      sync: false
```

You may notice that the definition of the Cron Job looks very similar to that of the Web Service for our API. A Render Cron Job is not tied to a parent app or Web Service like Heroku’s Scheduler add-on. It is defined on its own. A Cron Job builds and runs code from any repository on a specified schedule, whereas the Heroku Scheduler can only execute a command using an existing deployed app. In this case, similarly to the background worker, the Cron Job needs to use many of the same environment variables as its fellow services, and we’ll address that duplication [below](#dry-it-up).

A few other things to note about this Cron Job definition:
- The `schedule` property; `schedule` is a cron expression that defines when to run the job – in this case, we’re running it every day at 1 am UTC.
- The `OPENEXCHANGERATES_API_KEY` is required to get exchange rates from the Open Exchange Rates API. You’ll need to sign up for a free Open Exchange Rates account to enable the integration. The value for your `OPENEXCHANGERATES_API_KEY` should be your Open Exchange Rates app ID. Read more in the [Saleor documentation](https://docs.saleor.io/docs/2.11/developer/running-saleor/background-tasks#fetching-currency-conversion-rates). Because this value should probably be kept secret, you should define it with the placeholder `sync: false` so that you can add teh value securely in the dashboard.

With that, our Cron Job is in place to keep prices in local currencies updated, and we are fleshing out a promising landscape.

### Update Build Script

Now, let’s update our build script to support the secret key and services we’ve added to get our instance of Saleor ready for production.

```bash
#!/usr/bin/env bash
set -e # exit on error

export RSA_PRIVATE_KEY=$(cat /etc/secrets/saleor-key)

pip3 install -r requirements.txt

if [ "$RENDER_SERVICE_TYPE" = "web" ]; then
  python manage.py migrate --no-input
fi
```

First, we set the `RSA_PRIVATE_KEY` environment variable to make it available in the build context.

We also add logic that checks the [standard Render environment variable](https://render.com/docs/environment-variables) `RENDER_SERVICE_TYPE` to ensure that database migration only runs for the Web Service. This change helps us to avoid a race condition which would prevent one of the services from deploying successfully.

### Add Runtime Script

Next, we’ll replace our original `startCommand:` in the Python services with a start script to accommodate our more complex deployment. We’ll use a subcommand to address the cases of starting the celery worker and cron job.

```bash
#!/usr/bin/env bash
set -e # exit on error

export RSA_PRIVATE_KEY=$(cat /etc/secrets/saleor-key)


subcommand=$1
case $subcommand in
  server)
    gunicorn --bind :$PORT --workers 4 --worker-class uvicorn.workers.UvicornWorker saleor.asgi:application
    ;;
  worker)
    celery -A saleor --app=saleor.celeryconf:app worker --loglevel=info -E
    ;;
  cron)
    python3 manage.py update_exchange_rates --all
    ;;
  *)
    echo "Unknown subcommand"
    ;;
esac
```

We explicitly set the `RSA_PRIVATE_KEY` environment variable since it is also required in Saleor’s run context. We also need a subcommand to tell the script to start either the web server or the celery worker. To finish this step, we’ll update the `startCommand` value for our Python services in `render.yaml` to reference the new start script; for our API, we’ll use `./render-start.sh server`, for our worker, `./render-start.sh worker`, and for our cron job, `./render-start.sh cron`.

### Add CloudAMQP

The Heroku deployment of Saleor uses CloudAMQP as an add-on for message brokering. To use CloudAMQP with our Render deployment, we first create a free [CloudAMQP](https://www.cloudamqp.com/) instance and note the URL.

![A screenshot of the CloudAMQP dashboard, indicating the URL that should be used as an environment variable.](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/uw5g8vkgypzgofqjf69j.png)

Then we set the value of the `CLOUDAMQP_URL` environment variable to the URL provided by the CloudAMQP dashboard.

```yaml
# …snip…
- type: worker
  name: celery-worker
  env: python
  repo: https://github.com/render-examples/saleor
  plan: standard
  buildCommand: ./render-build.sh
  startCommand: ./render-start.sh worker
  envVars:
    # …snip…
    - key: CLOUDAMQP_URL
      sync: false
```

### DRY It Up

As I mentioned previously, there’s some duplication in the `render.yaml` between the Python services. On Render, we can add a happy little cloud to our environment – an [Environment Group](https://render.com/docs/configure-environment-variables#2-environment-groups) – to reduce some of this duplication. An Environment Group is a set of environment variables maintained in one place and shared with multiple services. Let’s move the `SECRET_KEY`, `PYTHON_VERSION`, `DJANGO_SETTINGS_MODULE`, `DEBUG`, `NPM_CONFIG_PRODUCTION`, `DEFAULT_FROM_EMAIL`, and `ENABLE_ACCOUNT_CONFIRMATION_BY_EMAIL` environment variables to an Environment Group. We're also going to add `ALLOWED_CLIENT_HOSTS`, which is required when we flip `DEBUG` from `True` to `False` in the next section.

```yaml
# …snip…
envVarGroups:
  - name: saleor-settings
    envVars:
      - key: PYTHON_VERSION
        value: 3.9.0
      - key: DJANGO_SETTINGS_MODULE
        value: saleor.settings
      - key: DEBUG
        value: True
      - key: NPM_CONFIG_PRODUCTION
        value: false
      - key: DEFAULT_FROM_EMAIL
        value: noreply@example.com
      - key: ENABLE_ACCOUNT_CONFIRMATION_BY_EMAIL
        value: False
      - key: SECRET_KEY
        generateValue: true
      - key: ALLOWED_CLIENT_HOSTS
        value: .onrender.com # If using custom domains, change this to a comma-separated list of your storefront and dashboard hostnames
```

Now we can remove the definition of those environment variables from the Python services and add the following property to their envVars objects:
`- fromGroup: saleor-settings`

To make the most of our environment group, note that we can also add our `saleor-key` secret file to our environment group so it’s accessible from each service’s environment. We need to do this in the Dashboard after the Environment Group creation is complete.

### Help! (a Helper File for Derived Variables)

Our repetition of the `RSA_PRIVATE_KEY` export is another source of duplication in our deployment code. In addition to `RSA_PRIVATE_KEY`, Django apps and Saleor in particular also require a few other security-focused environment variables to run in production: the aforementioned [`ALLOWED_HOSTS`](https://docs.djangoproject.com/en/3.0/ref/settings/#allowed-hosts), used to thwart HTTP Host header attacks, and [`ALLOWED_CLIENT_HOSTS`](https://docs.saleor.io/docs/3.x/developer/running-saleor/configuration#allowed_client_hosts), used to restrict API access to the target clients you define. To continue our DRYing kick and make these parameters centrally available, we can use a helper script and source it in both our `render-build.sh` and `render-start.sh` scripts. Let’s create a helper script.

```bash
#!/usr/bin/env bash
set -e # exit on error

export RSA_PRIVATE_KEY=$(cat /etc/secrets/saleor-key)
export ALLOWED_HOSTS=$RENDER_EXTERNAL_HOSTNAME
```

Now we can replace the `export` lines in both `render-build.sh` and `render-start.sh` with `source helpers/variables.sh` and add any other programmatically derived environment variables to `helpers/variables.sh` in future. 

To complete our de-duplication effort, we should add our `RSA_PRIVATE_KEY` to the Environment Group we created so it's shared among our Environment Group. We can do this in the Dashboard in __Env Groups__ > __saleor__ > __Secret Files__.

Drumroll, please: our happy little services, scripts, and tools now depict a complete landscape. With our production-ready environment variables now available in both the build and start contexts for all of our services, we are ready to flip the switch on our Saleor services in `render.yaml` to `DEBUG=False`, sync our Blueprint, and deploy!!


![A screenshot of an item detail page in the Saleor Demo, with a Saleor-branded shirt for sale.](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/reaqiy2j6dv1jqwvw992.png)

## Next Steps

Bob Ross warned us, “If you do too much, it’s going to lose its effectiveness." At Render, we do a lot so that _you_ can do just enough to build great things. If you're thinking about migrating your Django project to Render, you’re considering how to translate each component to the new environment, and the amount of work required. This post aims to provide good coverage of those tasks, but there is always room for growth : ) We’ll keep building, and in the meantime, we (and your fellow developers) would love to see _your_ solutions for the following next steps:

- You may [deploy RabbitMQ](https://render.com/docs/deploy-rabbitmq) as a Private Service on Render instead of using an external RabbitMQ-as-a-service provider. A version of this project with a RabbitMQ instance added to the Blueprint would remove the need to sign up and pay the bill for another service. If you extend the project as such, please post in [Render-Examples on the Render Community Site](https://community.render.com/c/render-examples/12) to share your work.
- At Render, when we think about what to paint in our next masterpiece, we always start with user feedback. Unsurprisingly, object storage is one of our most common [product requests](https://feedback.render.com/features/p/cloud-object-storage) (upvote plz!) While we work on that, you can [use S3](https://docs.saleor.io/docs/3.x/developer/running-saleor/s3) to store and serve static files for your Saleor instance.
- If you’re migrating an existing Django application from Heroku to Render, you likely have data in a database that you’ll need to export and import. We heard from readers and Render users that a detailed guide for these steps would provide critical context to support real migrations. Given their importance, we will dedicate a full blog post to those steps. Look out for a language and framework-agnostic guide to the data export and migration process in an upcoming post. Feel free to share about your own experience with data migration.
- This post touches on translating `app.json` and `docker-compose.yml` files to `render.yaml`, but there’s more to say on the subject. We dream of [automating this](https://render.canny.io/features/p/support-docker-compose) for our users. In the meantime, our community would love to read about your translation tricks.

I can’t wait to hear from you about whether this guide helped you migrate your application. If you’ve considered moving a Django app over from Heroku, or if you use Saleor or another open source e-commerce platform on Render, we’d love to see what you’ve built out. Post on your channel of choice, reach out on our [community site](https://community.render.com/), or [hop into my DMs](https://twitter.com/dnilas0r) with your big ideas, or the unvarnished truth. We’re joined at the hip with our developer community and trust me, we want to hear from you!

---
Rosalind Benoit leads Developer Marketing at Render. She enjoys cycling, rock climbing, and Haruki Murakami novels. You can contact Rosalind at [@dnilas0r](https://twitter.com/dnilas0r) or rosalind@render.com.