Merge pull request #701 from Naomi-Gift/main

Title: feat: audit logging, distributed tracing, neural search, WebRTC signaling (#508 #639 #638 #637)

Author: yosemite01

.env.example

@@ -87,3 +87,61 @@ WS_PONG_DEADLINE_MS=10000
 WS_IDLE_TIMEOUT_MS=300000
 # Public URL used by the Next.js frontend to connect
 NEXT_PUBLIC_COLLAB_WS_URL=ws://localhost:1234
+
+# ---------------------------------------------------------------------------
+# OpenTelemetry Distributed Tracing (#639)
+# ---------------------------------------------------------------------------
+# Set to "false" to disable tracing entirely (useful in test environments)
+OTEL_ENABLED=true
+# Service name attached to every span
+OTEL_SERVICE_NAME=stellar-creator-portfolio
+# OTLP gRPC endpoint — Jaeger all-in-one: http://localhost:4317
+# Datadog Agent: http://localhost:4317 (with DD_OTLP_CONFIG_RECEIVER_PROTOCOLS_GRPC_ENDPOINT)
+OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317
+# Sampling rate in production: 1.0 = 100%, 0.1 = 10% (default 10% in prod)
+OTEL_TRACE_SAMPLE_RATE=0.1
+
+# ---------------------------------------------------------------------------
+# Neural Search Engine / Elasticsearch (#638)
+# ---------------------------------------------------------------------------
+# Elasticsearch cluster URL (single node dev: http://localhost:9200)
+ELASTICSEARCH_URL=http://localhost:9200
+# Optional: Basic auth for Elasticsearch
+ELASTICSEARCH_USERNAME=elastic
+ELASTICSEARCH_PASSWORD=changeme
+# Optional: API key auth (preferred in prod — takes priority over basic auth)
+ELASTICSEARCH_API_KEY=
+# Index name for creator profiles
+ELASTICSEARCH_CREATORS_INDEX=creators
+# OpenAI API key for embedding generation
+OPENAI_API_KEY=sk-...
+# Embedding model (text-embedding-3-small = 1536 dims, text-embedding-3-large = 3072 dims)
+EMBED_MODEL=text-embedding-3-small
+EMBED_ENDPOINT=https://api.openai.com/v1/embeddings
+
+# ---------------------------------------------------------------------------
+# WebRTC Signaling Server (#637)
+# ---------------------------------------------------------------------------
+# Port the signaling server listens on
+SIGNALING_PORT=3001
+# Host to bind (0.0.0.0 for all interfaces in production)
+SIGNALING_HOST=0.0.0.0
+# HMAC secret for signing TURN credentials (generate: openssl rand -hex 32)
+TURN_SECRET=your-turn-secret-here
+# TURN server hostname (Coturn default)
+TURN_HOST=turn.example.com
+# TURN server ports
+TURN_PORT=3478
+TURN_TLS_PORT=5349
+# STUN server URL (use Google public STUN for dev, own server in prod)
+STUN_URL=stun:stun.l.google.com:19302
+# Credential TTL in seconds (default 86400 = 24h)
+TURN_CREDENTIAL_TTL=86400
+# JWT secret for signaling auth (generate: openssl rand -hex 32)
+SIGNALING_JWT_SECRET=your-signaling-jwt-secret-here
+# Max concurrent connections per process
+SIGNALING_MAX_CONNECTIONS=10000
+# Heartbeat interval in ms
+SIGNALING_HEARTBEAT_MS=30000
+# Public WebSocket URL for clients
+NEXT_PUBLIC_SIGNALING_URL=ws://localhost:3001