Dattavani Backend: System Overview Diagram

Main path

The app calls one host. In production that is api.dattavani.ai on a DigitalOcean global load balancer.
The edge forwards to core-service, a FastAPI app with 28 routers (app/main.py:309-341).
core-service reads and writes Supabase through anon, service-role and per-request RLS clients.
The app loads media straight from the R2 CDN. APIs return object paths, not full URLs.

AI lives outside this repo

Ask Tataji text calls CHRAG at AI_SERVICE_URL (config.py:26-27). The AI team owns it.
ai-service/ is a stub. It returns simulated text, video and audio (ai-service/main.py:24-50).
docker-compose.yml comments ai-service out, and the Caddyfile route to it is commented too.
rag_api_url is a legacy host. Only the /api/rag proxy router still uses it.

Who may call in

Stripe webhooks need a valid Stripe-Signature (payments.py:503-520).
RevenueCat webhooks need the Bearer secret (revenuecat_webhook.py:25-38).
Swamiji webhooks need an HMAC-SHA512 signature and a fresh timestamp (swamiji_voice.py:270-282).
All of them, like the app, enter through the edge.

Two schedulers

Host cron runs python -m app.jobs.* on UTC schedules for push, email, reconciliation and retention.
pg_cron inside Supabase prunes trial usage at 00:05 UTC and anonymizes chats older than 7 days at 01:00 UTC.
Terraform does not create a cron host. Check where the crontab runs before changing a job.

Watch out

The admin bundle embeds the Supabase service-role key and R2 secrets (admin/lib/supabase.ts:6-20, docs/setup.md:118).
Catalog caches live in each process for 600 s (app/cache/catalog.py:22). A cache bust reaches only one instance.
New Relic wraps uvicorn only when [redacted] is set (core-service/docker-entrypoint.sh:4-6).