Deployment

# Required: OpenAI API Configuration
OPENAI_API_KEY=sk-proj-...
OPENAI_REALTIME_MODEL=gpt-realtime
OPENAI_REALTIME_VOICE=marin
OPENAI_REALTIME_INSTRUCTIONS=You are a helpful assistant.

# Optional: Language & Voice Customization
OPENAI_REALTIME_LANGUAGE=English
OPENAI_REALTIME_VOICE_ACCENT=neutral American English
OPENAI_REALTIME_VOICE_TONE=friendly and professional

# Session Configuration
OPENAI_REALTIME_CLIENT_SECRET_TTL=600

# Functions Configuration
NAVAI_FUNCTIONS_FOLDERS=dist/ai/...

# Security: NEVER allow frontend API key in production
NAVAI_ALLOW_FRONTEND_API_KEY=false

# CORS: Specify exact production origins
NAVAI_CORS_ORIGIN=https://yourdomain.com,https://app.yourdomain.com

# Server Configuration
PORT=3000
NODE_ENV=production

# Backend API URL (production)
NAVAI_API_URL=https://api.yourdomain.com

# Functions and Routes
NAVAI_FUNCTIONS_FOLDERS=src/ai/functions-modules
NAVAI_ROUTES_FILE=src/ai/routes.ts

# Optional: Model override
NAVAI_REALTIME_MODEL=gpt-realtime

import cors from "cors";
import express from "express";

const app = express();

// Production: Specific origins only
const allowedOrigins = [
  "https://yourdomain.com",
  "https://app.yourdomain.com",
  "https://www.yourdomain.com"
];

app.use(cors({
  origin: (origin, callback) => {
    // Allow requests with no origin (mobile apps, Postman, etc.)
    if (!origin) return callback(null, true);
    
    if (allowedOrigins.includes(origin)) {
      callback(null, true);
    } else {
      callback(new Error('Not allowed by CORS'));
    }
  },
  credentials: true
}));

NAVAI_CORS_ORIGIN=https://yourdomain.com,https://app.yourdomain.com

import rateLimit from "express-rate-limit";

// Limit client secret creation
const clientSecretLimiter = rateLimit({
  windowMs: 15 * 60 * 1000, // 15 minutes
  max: 100, // Limit each IP to 100 requests per windowMs
  message: "Too many requests, please try again later."
});

app.post("/navai/realtime/client-secret", clientSecretLimiter, ...);

// Limit function execution
const functionLimiter = rateLimit({
  windowMs: 1 * 60 * 1000, // 1 minute
  max: 300, // 300 requests per minute
  message: "Too many function calls, please slow down."
});

app.post("/navai/functions/execute", functionLimiter, ...);

FROM node:20-alpine

WORKDIR /app

# Copy package files
COPY package*.json ./
RUN npm ci --only=production

# Copy application
COPY . .

# Build if needed
RUN npm run build

# Expose port
EXPOSE 3000

# Start server
CMD ["npm", "start"]

# Short TTL (10 min) - More secure, more frequent renewals
OPENAI_REALTIME_CLIENT_SECRET_TTL=600

# Medium TTL (1 hour) - Balanced
OPENAI_REALTIME_CLIENT_SECRET_TTL=3600

# Long TTL (2 hours) - Max allowed by OpenAI
OPENAI_REALTIME_CLIENT_SECRET_TTL=7200

version: '3.8'
services:
  navai-backend:
    image: navai-backend:latest
    deploy:
      replicas: 3
    environment:
      - OPENAI_API_KEY=${OPENAI_API_KEY}
      - NAVAI_CORS_ORIGIN=${NAVAI_CORS_ORIGIN}
    ports:
      - "3000"
  
  nginx:
    image: nginx:alpine
    ports:
      - "443:443"
    depends_on:
      - navai-backend

upstream navai_backend {
    server backend1:3000;
    server backend2:3000;
    server backend3:3000;
}

server {
    listen 443 ssl;
    server_name api.yourdomain.com;
    
    ssl_certificate /path/to/cert.pem;
    ssl_certificate_key /path/to/key.pem;
    
    location / {
        proxy_pass http://navai_backend;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
}

import express from "express";
import morgan from "morgan";
import { registerNavaiExpressRoutes } from "@navai/voice-backend";

const app = express();

// Request logging
app.use(morgan('combined'));

// Health check endpoint
app.get('/health', (req, res) => {
  res.json({ 
    ok: true, 
    timestamp: new Date().toISOString(),
    uptime: process.uptime()
  });
});

// Metrics endpoint
app.get('/metrics', (req, res) => {
  res.json({
    memory: process.memoryUsage(),
    uptime: process.uptime(),
    // Add custom metrics
  });
});

registerNavaiExpressRoutes(app);

// Error tracking
app.use((err, req, res, next) => {
  console.error('Error:', {
    message: err.message,
    stack: err.stack,
    url: req.url,
    method: req.method,
    timestamp: new Date().toISOString()
  });
  
  // Send to error tracking service (Sentry, etc.)
  
  res.status(500).json({ error: 'Internal server error' });
});