feat(api): production security, cors hardening, latency optimizations, postman artifacts & frontend documentation

2026-08-31 13:48:54 +05:30
parent 4e21d617ce
commit e91cdbae6e
48 changed files with 3742 additions and 65 deletions
@@ -1,18 +1,39 @@
-APP_NAME=AI Patient Onboarding
-APP_ENV=development
-APP_VERSION=1.0.0
+# Application Environment Configuration Example
+APP_NAME="AI Patient Onboarding API"
+APP_ENV="development" # Options: development, testing, production
+APP_VERSION="1.0.0"
+DEBUG="false"
+LOG_LEVEL="INFO"

-# 1. OpenAI API (Optional / Backup model)
-OPENAI_API_KEY=your_openai_api_key_here
-OPENAI_MODEL=gpt-4o-mini
+# Server & Port
+HOST="0.0.0.0"
+PORT=8000

-# 2. Claude AI / Anthropic API (Clinical entity extraction & fallback)
-ANTHROPIC_API_KEY=your_anthropic_api_key_here
-ANTHROPIC_MODEL=claude-sonnet-4-5-20250929
+# Security & Credentials
+API_SECRET_KEY="your_secure_random_api_secret_key_here"
+ALLOWED_ORIGINS="https://onboarding.skyheal.ai,http://localhost:5173,http://127.0.0.1:5173"

-# 3. Google Gemini API (Primary high-speed Indic conversation model)
-GEMINI_API_KEY=your_gemini_api_key_here
-GEMINI_MODEL=gemini-3.6-flash
+# Database Configuration
+DATABASE_URL="sqlite:///./data/onboarding.db"

-# 4. Sarvam AI API (Indic speech recognition ASR & native TTS — Tamil, Hindi, Telugu, Kannada)
-SARVAM_API_KEY=your_sarvam_api_key_here
+# AI Provider API Keys (Set in runtime environment or production secret manager)
+GEMINI_API_KEY=""
+GEMINI_MODEL="gemini-3.6-flash"
+
+SARVAM_API_KEY=""
+
+OPENAI_API_KEY=""
+OPENAI_MODEL="gpt-4o-mini"
+
+ANTHROPIC_API_KEY=""
+ANTHROPIC_MODEL="claude-sonnet-4-5-20250929"
+
+# Limits & Safeguards
+RATE_LIMIT=30
+MAX_UPLOAD_SIZE=10485760 # 10MB in Bytes
+AI_TIMEOUT=30 # seconds
+SESSION_TIMEOUT_MINUTES=30
+
+# Destination Hospital EHR / Patient API
+PATIENT_API_BASE_URL=""
+PATIENT_API_TOKEN=""