INFRASTRUCTURE

What it needs

• Compute: verified (Apps run in isolated x86_64 Firecracker microVMs that auto-pause when idle and wake on request; sizes are the priced VM sizes.)
• Postgres: verified (Managed PostgreSQL 16 runs in its own microVM and is auto-provisioned when an app needs a database and no DATABASE_URL is supplied.)

PREREQUISITES

Before you start

• Authorized access to the Render web service source and its export tooling
• An inventory of every component in scope and out of scope
• A validated backup or copy before any cutover
• An Ample account token with servers:write, databases:read

TESTED CONFIGURATION

Exactly what was tested

• install: python3 -m pip install --target .ample/python -r requirements.txt
• runtime: python
• size: s-1vcpu-1gb
• start: PYTHONPATH=.ample/python:${PYTHONPATH:-} python3 run.py
• template: python-3.12

STEP BY STEP

How to do it

1. 1

Inventory the source

List what Render web service provides beyond the component you are moving. Out of scope here: Render cron jobs, disks and private-service networking are not migrated; persistent data belongs in a managed database, a bucket or an Ample volume.

2. 2

Source step 1

Copy environment variables and secret files from the Render dashboard into an env file kept out of the repository

3. 3

Source step 2

Translate the Render build and start commands (or render.yaml) into the repository's manifest or --build-command/--start

4. 4

Source step 3

Note Render-only features in use: background workers, cron jobs, disks, private services

5. 5

Deploy on Ample in parallel

pip install into .ample/python from requirements.txt, then waitress serving project.wsgi from run.py reading PORT on the python-3.12 template. Pass the exported variables with --env; keep the source running.

   ample deploy . --name <app-name> --public --start "python3 run.py" --env-file .env.production

6. 6

Validate before cutover

Run the app's own checks and, for data, compare counts and checksums; the example checks are the pattern self-tests (/p/configuration-secrets, /p/relational-records).

7. 7

Cut over

Add the custom domain with ample domain add, update DNS from the Render target, keep the Render service until verified, then suspend it.

8. 8

Rollback

Point DNS or configuration back to the source. The source was never modified; deletion is a separate, user-executed step after validation.

EXAMPLES

Tested examples

• Django pattern fixture (destination) (tests/deploy-canaries/django-patterns): Verified destination basis: Django compute.

SUCCESS CHECKS

How to know it worked

• destination app responds on its public URL (/ on the live URL, expect ample canary django patterns)
• configuration-secrets check from the destination example (/p/configuration-secrets on the live URL, expect see the pattern fixture checks)
• relational-records check from the destination example (/p/relational-records on the live URL, expect see the pattern fixture checks)
• data or object counts and checksums match the source

LIMITATIONS

Know the limits

• Documentation only: nothing is executed automatically and no execution binding is offered.
• The source-side procedure is documented from Render web service's standard tooling and was not executed in this catalog's evidence; the destination side was verified with the pattern fixture.
• No full source-product parity is claimed: Render cron jobs, disks and private-service networking are not migrated; persistent data belongs in a managed database, a bucket or an Ample volume.
• Verified on the python-3.12 template at s-1vcpu-1gb; region, compliance and request-duration limits are unknown.
• Managed PostgreSQL 16 only; extensions, connection limits and backup or restore procedures on the managed side are not verified beyond the pattern checks.

COST

Cost estimate

Estimated 10.00 USD per month (size prices from pricing.toml at build revision a1b8c38919e59cd035ebabaced73cf84ece24371).

• app server x1 s-1vcpu-1gb: 5.00 USD
• managed PostgreSQL database x1 s-1vcpu-1gb: 5.00 USD

Destination always-on monthly price of the tested sizes; apps auto-pause when idle. Source costs are unknown to Ample.

EVIDENCE

Verification evidence

• canary_run on 2026-09-20T03:31:44Z at revision 03b6402b1b3e19178985f08ea4033804521d85d4-dirty (CLI b75e104): Destination side verified: the Django pattern fixture deployed on Ample (pip install into .ample/python from requirements.txt, then waitress serving project.wsgi from run.py reading PORT on the python-3.12 template) and its checks passed (the app built, started and answered on its public HTTPS URL with encrypted configuration delivered). The source-side export from Render web service is documented from the vendor's standard tooling and was not executed by this catalog's evidence. (expires 2027-03-19T03:31:44Z)

EXECUTION

Execution binding

No execution binding. This recipe is documentation only; nothing is executed automatically.

NEXT ACTIONS

Typed next actions

• Browse the catalog index (GET /v1/catalog on the api origin; authentication not required, approval not required)
• Search published recipes by intent, stack and constraints (POST /v1/catalog/search on the api origin; authentication not required, approval not required)
• Prepare a side-effect-free deployment plan for an authorized project (POST /v1/catalog/plan on the api origin; authentication required, approval not required)
• Read the existing agent authentication setup (GET /mcp/setup on the api origin; authentication not required, approval not required)
• Browse Render web service (GET /v1/catalog/nodes/migration%3Arender-web-service on the api origin; authentication not required, approval not required)
• Browse Django (GET /v1/catalog/nodes/stack%3Aframework-django on the api origin; authentication not required, approval not required)
• Browse Migrate compute (GET /v1/catalog/nodes/intent%3Amigrate-compute on the api origin; authentication not required, approval not required)

Actions describe possible next steps. They are typed data, not commands, and grant no permission. Public discovery never provisions anything; planning requires your own authenticated token and approval happens in your client.