#SVTH-575 - Mantendo consul para consumo de tenants no users.service.

Makefile

@@ -4,8 +4,9 @@ ENV_FILE = .env.$(ENV)
 
 PROJECT_NAME = attendancesystem-$(ENV)
 NETWORK_NAME = attendancesystem-network
+APP_SERVICES = suite-api users-api reports-api attendancesystem-api config-generator attendancesystem-app reports-app users-app suite-app
 
-.PHONY: infra app install update reset-network nuke nuke-project
+.PHONY: infra app install update restart reset-network nuke nuke-project
 
 # ===============================
 # 🧹 Reset Network
@@ -41,16 +42,18 @@ app:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		pull
+		pull $(APP_SERVICES)
 	@echo "🚀 Subindo apenas APP ($(PROJECT_NAME))..."
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		up -d --pull never
+		up -d --pull never --force-recreate $(APP_SERVICES)
 
 # ===============================
 # 🔥 Subir TUDO
@@ -71,12 +74,42 @@ install:
 		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		up -d --pull never
+		up -d --pull never --force-recreate
 
 # ===============================
-# 🔄 Atualizar projeto
+# 🔄 Reiniciar containers ativos
 # ===============================
-update: nuke-project install
+restart:
+	docker restart $$(docker ps -q)
+
+# ===============================
+# 🔄 Atualizar projeto (apenas APP)
+# ===============================
+update:
+	@echo "🛑 Parando containers do profile 'app' ($(PROJECT_NAME))..."
+	docker compose \
+		--project-name $(PROJECT_NAME) \
+		--env-file $(ENV_FILE) \
+		--profile infra \
+		--profile app \
+		-f $(COMPOSE_FILE) \
+		stop $(APP_SERVICES)
+
+	@echo "🗑️ Removendo containers do profile 'app' ($(PROJECT_NAME))..."
+	docker compose \
+		--project-name $(PROJECT_NAME) \
+		--env-file $(ENV_FILE) \
+		--profile infra \
+		--profile app \
+		-f $(COMPOSE_FILE) \
+		rm -f $(APP_SERVICES)
+
+	@echo "🖼️ Removendo imagens antigas do projeto (seventhltda)..."
+	- docker images --format '{{.Repository}}:{{.Tag}}' | grep '^seventhltda/' | xargs -r docker rmi -f 2>/dev/null || true
+
+	@echo "✅ Containers do profile 'app' removidos. Infraestrutura (dados) preservada."
+
+	$(MAKE) app
 
 # ===============================
 # 💣 Limpeza TOTAL

config.template.json

@@ -10,12 +10,16 @@
     "suite": "${FRONTEND_SUITE_URL}",
     "attendance": "${FRONTEND_ATTENDANCE_URL}",
     "account": "${FRONTEND_ACCOUNT_URL}",
-    "people": "${FRONTEND_PEOPLE_URL}"
+    "people": "${FRONTEND_PEOPLE_URL}",
+    "reports": "${FRONTEND_REPORTS_URL}",
+    "users": "${FRONTEND_USERS_URL}"
   },
   "api": {
     "suite": "${BACKEND_SUITE_API_URL}",
     "people": "${BACKEND_PEOPLE_API_URL}",
     "account": "${BACKEND_ACCOUNT_API_URL}",
-    "attendance": "${BACKEND_ATTENDANCE_API_URL}"
+    "attendance": "${BACKEND_ATTENDANCE_API_URL}",
+    "reports": "${BACKEND_REPORTS_API_URL}",
+    "users": "${BACKEND_USERS_API_URL}"
   }
 }

docker-compose.yml

@@ -15,6 +15,62 @@ services:
       timeout: 5s
       retries: 5
 
+  consul:
+    image: hashicorp/consul:latest
+    profiles: ["infra"]
+    ports:
+      - "${CONSUL_HTTP_PORT}:8500"
+      - "${CONSUL_DNS_PORT}:8600/udp"
+    command: "agent -server -bootstrap -ui -client=0.0.0.0"
+    networks:
+      - app-network
+    healthcheck:
+      test: ["CMD", "consul", "members"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  postgres:
+    image: postgres:16-alpine
+    profiles: ["infra"]
+    ports:
+      - "${POSTGRES_PORT}:5432"
+    environment:
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DB=${POSTGRES_DB}
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    networks:
+      - app-network
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  rabbitmq:
+    image: rabbitmq:4-management-alpine
+    profiles: ["infra"]
+    ports:
+      - "${RABBITMQ_PORT}:5672"
+      - "${RABBITMQ_MANAGEMENT_PORT}:15672"
+    environment:
+      - RABBITMQ_DEFAULT_USER=${RABBITMQ_USER}
+      - RABBITMQ_DEFAULT_PASS=${RABBITMQ_PASSWORD}
+      - RABBITMQ_DEFAULT_VHOST=${RABBITMQ_VHOST}
+    volumes:
+      - rabbitmq_data:/var/lib/rabbitmq
+      - ./rabbitmq/definitions.json:/etc/rabbitmq/definitions.json:ro
+      - ./rabbitmq/definitions.conf:/etc/rabbitmq/conf.d/20-definitions.conf:ro
+    networks:
+      - app-network
+    healthcheck:
+      test: ["CMD", "rabbitmq-diagnostics", "-q", "ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
   # ================= BACKEND =================
 
   suite-api:
@@ -28,8 +84,82 @@ services:
       - MONGODB_DATABASE=${MONGODB_DATABASE}
       - SYSTEM_BASE_CONN=${SYSTEM_BASE_CONN}
       - FRONTEND_CONN=${INTERNAL_HOST}:${FRONTEND_SUITE_APP_INTERNAL_PORT}
+      - ConsulSettings__Address=http://consul:8500
+      - Messaging__RabbitMQ__Host=rabbitmq
+      - Messaging__RabbitMQ__Port=5672
+      - Messaging__RabbitMQ__VirtualHost=${RABBITMQ_SUITE_VHOST}
+      - Messaging__RabbitMQ__Username=${RABBITMQ_SUITE_OWNER_USER}
+      - Messaging__RabbitMQ__Password=${RABBITMQ_SUITE_OWNER_PASSWORD}
+      - Messaging__RabbitMQ__Messaging__ServiceName=suite
+      - Messaging__RabbitMQ__Connections__users__Host=rabbitmq
+      - Messaging__RabbitMQ__Connections__users__Port=5672
+      - Messaging__RabbitMQ__Connections__users__VirtualHost=${RABBITMQ_USERS_VHOST}
+      - Messaging__RabbitMQ__Connections__users__Username=${RABBITMQ_USERS_WRITER_USER}
+      - Messaging__RabbitMQ__Connections__users__Password=${RABBITMQ_USERS_WRITER_PASSWORD}
       - KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST}
       - KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST}
+      - KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_REPORTS_BACKEND_HOST}
+      - KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_REPORTS_FRONTEND_HOST}
+      - KEEPALIVE_USERS_BACKEND_HOST=${KEEPALIVE_USERS_BACKEND_HOST}
+      - KEEPALIVE_USERS_FRONTEND_HOST=${KEEPALIVE_USERS_FRONTEND_HOST}
+      - KEEPALIVE_TENANTS_BACKEND_HOST=${KEEPALIVE_TENANTS_BACKEND_HOST}
+      - KEEPALIVE_TENANTS_FRONTEND_HOST=${KEEPALIVE_TENANTS_FRONTEND_HOST}
+    depends_on:
+      consul:
+        condition: service_healthy
+      rabbitmq:
+        condition: service_healthy
+    networks:
+      - app-network
+
+  users-api:
+    image: ${DOCKER_REPO}/sca-users-api:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    ports:
+      - "${BACKEND_USERS_API_INTERNAL_PORT}:${BACKEND_USERS_API_INTERNAL_PORT}"
+    environment:
+      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT}
+      - ConnectionStrings__UsersDb=Host=postgres;Port=5432;Database=seventh_users;Username=${POSTGRES_USER};Password=${POSTGRES_PASSWORD}
+      - MongoDbSettings__ConnectionString=mongodb://mongodb:27017
+      - ConsulSettings__Address=http://consul:8500
+      - Messaging__RabbitMQ__Host=rabbitmq
+      - Messaging__RabbitMQ__Port=5672
+      - Messaging__RabbitMQ__VirtualHost=${RABBITMQ_USERS_VHOST}
+      - Messaging__RabbitMQ__Username=${RABBITMQ_USERS_OWNER_USER}
+      - Messaging__RabbitMQ__Password=${RABBITMQ_USERS_OWNER_PASSWORD}
+      - Messaging__RabbitMQ__Messaging__ServiceName=users
+      - Messaging__RabbitMQ__Connections__suite__Host=rabbitmq
+      - Messaging__RabbitMQ__Connections__suite__Port=5672
+      - Messaging__RabbitMQ__Connections__suite__VirtualHost=${RABBITMQ_SUITE_VHOST}
+      - Messaging__RabbitMQ__Connections__suite__Username=${RABBITMQ_SUITE_WRITER_USER}
+      - Messaging__RabbitMQ__Connections__suite__Password=${RABBITMQ_SUITE_WRITER_PASSWORD}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      mongodb:
+        condition: service_healthy
+      consul:
+        condition: service_healthy
+      rabbitmq:
+        condition: service_healthy
+    networks:
+      - app-network
+
+  reports-api:
+    image: ${DOCKER_REPO}/sca-reports-api:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    ports:
+      - "${BACKEND_REPORTS_API_INTERNAL_PORT}:${BACKEND_REPORTS_API_INTERNAL_PORT}"
+    environment:
+      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT}
+      - MONGODB_CONNECTION_STRING=${MONGODB_CONNECTION_STRING}
+      - MONGODB_DATABASE=${MONGODB_DATABASE}
+      - SystemBaseConn=${SYSTEM_BASE_CONN}
+      - FRONTEND_CONN=${INTERNAL_HOST}:${FRONTEND_REPORTS_APP_INTERNAL_PORT}
+      - KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST}
+      - KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST}
+      - KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_REPORTS_BACKEND_HOST}
+      - KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_REPORTS_FRONTEND_HOST}
     networks:
       - app-network
 
@@ -60,6 +190,12 @@ services:
       - BACKEND_ATTENDANCE_API_URL=${EXTERNAL_HOST}:${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}
       - BACKEND_PEOPLE_API_URL=${EXTERNAL_HOST}:${BACKEND_PEOPLE_API_EXTERNAL_PORT}
       - BACKEND_ACCOUNT_API_URL=${EXTERNAL_HOST}:${BACKEND_ACCOUNT_API_EXTERNAL_PORT}
+      - BACKEND_REPORTS_API_URL=${EXTERNAL_HOST}:${BACKEND_REPORTS_API_EXTERNAL_PORT}
+      - BACKEND_USERS_API_URL=${EXTERNAL_HOST}:${BACKEND_USERS_API_EXTERNAL_PORT}
+      - BACKEND_TENANTS_API_URL=${EXTERNAL_HOST}:${BACKEND_TENANTS_API_EXTERNAL_PORT}
+      - FRONTEND_REPORTS_URL=${EXTERNAL_HOST}:${FRONTEND_REPORTS_APP_EXTERNAL_PORT}
+      - FRONTEND_USERS_URL=${EXTERNAL_HOST}:${FRONTEND_USERS_APP_EXTERNAL_PORT}
+      - FRONTEND_TENANTS_URL=${EXTERNAL_HOST}:${FRONTEND_TENANTS_APP_EXTERNAL_PORT}
     command: >
       sh -c "apk add --no-cache gettext &&
             envsubst < /config.template.json > /output/config.json &&
@@ -86,10 +222,76 @@ services:
       config-generator:
         condition: service_completed_successfully
 
+  reports-app:
+    image: ${DOCKER_REPO}/reports-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_REPORTS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
+  users-app:
+    image: ${DOCKER_REPO}/users-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_USERS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
+  tenants-app:
+    image: ${DOCKER_REPO}/tenants-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_TENANTS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
+  suite-app:
+    image: ${DOCKER_REPO}/suite-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_SUITE_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
 networks:
   app-network:
     name: attendancesystem-network
 
 volumes:
   mongodb_data:
+  postgres_data:
+  rabbitmq_data:
   config-volume:

install.sh

@@ -4,7 +4,7 @@
 #  🚀 Instalador - AttendanceSystem
 #  Uso:
 #    bash <(curl -fsSL \
-#      "https://git.seventh.com.br/seventh.p7/attendance-system.install/raw/branch/develop/install.sh")
+#      "https://git.seventh.com.br/seventh.p7/attendance-system.install/raw/branch/feature%2FSVTH-575---install-users/install.sh")
 # ==============================================================
 
 # ── Redireciona stdin para o terminal quando rodado via curl | bash ──
@@ -28,10 +28,32 @@ NC='\033[0m'
 
 # ─── Repositório Git ──────────────────────────────────────────
 INSTALL_DIR="attendancesystem"
-BRANCH="${BRANCH:-develop}"
+BRANCH="${BRANCH:-feature/SVTH-575---install-users}"
 ENV_FILE=""
 GIT_REPO="https://git.seventh.com.br/seventh.p7/attendance-system.install.git"
 
+# ─── RabbitMQ (mensageria entre suite/users/reports) ──────────
+# Um vhost por serviço: quem consome é dono do vhost onde a fila mora.
+# Usuário "owner" tem acesso total ao próprio vhost; "writer" só publica
+# (write-only) no vhost de um serviço vizinho — ver rabbitmq/definitions.json.
+RABBITMQ_SUITE_VHOST="suite"
+RABBITMQ_USERS_VHOST="users"
+RABBITMQ_REPORTS_VHOST="reports"
+
+RABBITMQ_SUITE_OWNER_USER="suite-owner"
+RABBITMQ_SUITE_OWNER_PASSWORD="suite-owner-secret"
+RABBITMQ_USERS_OWNER_USER="users-owner"
+RABBITMQ_USERS_OWNER_PASSWORD="users-owner-secret"
+RABBITMQ_REPORTS_OWNER_USER="reports-owner"
+RABBITMQ_REPORTS_OWNER_PASSWORD="reports-owner-secret"
+
+RABBITMQ_SUITE_WRITER_USER="suite-writer"
+RABBITMQ_SUITE_WRITER_PASSWORD="suite-writer-secret"
+RABBITMQ_USERS_WRITER_USER="users-writer"
+RABBITMQ_USERS_WRITER_PASSWORD="users-writer-secret"
+RABBITMQ_REPORTS_WRITER_USER="reports-writer"
+RABBITMQ_REPORTS_WRITER_PASSWORD="reports-writer-secret"
+
 # ══════════════════════════════════════════════════════════════
 # Utilitários
 # ══════════════════════════════════════════════════════════════
@@ -225,10 +247,16 @@ collect_internal_ports() {
   ask BACKEND_PEOPLE_API_INTERNAL_PORT            "Backend People API"            "${BACKEND_PEOPLE_API_INTERNAL_PORT:-10100}"
   ask BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT  "Backend AttendanceSystem API"  "${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT:-10102}"
   ask BACKEND_ACCOUNT_API_INTERNAL_PORT           "Backend Account API"           "${BACKEND_ACCOUNT_API_INTERNAL_PORT:-10103}"
+  ask BACKEND_REPORTS_API_INTERNAL_PORT           "Backend Reports API"           "${BACKEND_REPORTS_API_INTERNAL_PORT:-10105}"
+  ask BACKEND_USERS_API_INTERNAL_PORT             "Backend Users API"             "${BACKEND_USERS_API_INTERNAL_PORT:-10109}"
+  ask BACKEND_TENANTS_API_INTERNAL_PORT           "Backend Tenants API"           "${BACKEND_TENANTS_API_INTERNAL_PORT:-10110}"
   ask FRONTEND_SUITE_APP_INTERNAL_PORT            "Frontend Suite"                "${FRONTEND_SUITE_APP_INTERNAL_PORT:-4200}"
   ask FRONTEND_PEOPLE_APP_INTERNAL_PORT           "Frontend People"               "${FRONTEND_PEOPLE_APP_INTERNAL_PORT:-4201}"
   ask FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT "Frontend AttendanceSystem"     "${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT:-4202}"
   ask FRONTEND_ACCOUNT_APP_INTERNAL_PORT          "Frontend Account"              "${FRONTEND_ACCOUNT_APP_INTERNAL_PORT:-4203}"
+  ask FRONTEND_REPORTS_APP_INTERNAL_PORT          "Frontend Reports"              "${FRONTEND_REPORTS_APP_INTERNAL_PORT:-4205}"
+  ask FRONTEND_USERS_APP_INTERNAL_PORT            "Frontend Users"                "${FRONTEND_USERS_APP_INTERNAL_PORT:-4209}"
+  ask FRONTEND_TENANTS_APP_INTERNAL_PORT          "Frontend Tenants"              "${FRONTEND_TENANTS_APP_INTERNAL_PORT:-4210}"
 }
 
 collect_external_ports() {
@@ -239,15 +267,22 @@ collect_external_ports() {
   ask BACKEND_PEOPLE_API_EXTERNAL_PORT            "Backend People API"            "${BACKEND_PEOPLE_API_EXTERNAL_PORT:-$BACKEND_PEOPLE_API_INTERNAL_PORT}"
   ask BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT  "Backend AttendanceSystem API"  "${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT:-$BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}"
   ask BACKEND_ACCOUNT_API_EXTERNAL_PORT           "Backend Account API"           "${BACKEND_ACCOUNT_API_EXTERNAL_PORT:-$BACKEND_ACCOUNT_API_INTERNAL_PORT}"
+  ask BACKEND_REPORTS_API_EXTERNAL_PORT           "Backend Reports API"           "${BACKEND_REPORTS_API_EXTERNAL_PORT:-$BACKEND_REPORTS_API_INTERNAL_PORT}"
+  ask BACKEND_USERS_API_EXTERNAL_PORT             "Backend Users API"             "${BACKEND_USERS_API_EXTERNAL_PORT:-$BACKEND_USERS_API_INTERNAL_PORT}"
+  ask BACKEND_TENANTS_API_EXTERNAL_PORT           "Backend Tenants API"           "${BACKEND_TENANTS_API_EXTERNAL_PORT:-$BACKEND_TENANTS_API_INTERNAL_PORT}"
   ask FRONTEND_SUITE_APP_EXTERNAL_PORT            "Frontend Suite"                "${FRONTEND_SUITE_APP_EXTERNAL_PORT:-$FRONTEND_SUITE_APP_INTERNAL_PORT}"
   ask FRONTEND_PEOPLE_APP_EXTERNAL_PORT           "Frontend People"               "${FRONTEND_PEOPLE_APP_EXTERNAL_PORT:-$FRONTEND_PEOPLE_APP_INTERNAL_PORT}"
   ask FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT "Frontend AttendanceSystem"     "${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT:-$FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}"
   ask FRONTEND_ACCOUNT_APP_EXTERNAL_PORT          "Frontend Account"              "${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT:-$FRONTEND_ACCOUNT_APP_INTERNAL_PORT}"
+  ask FRONTEND_REPORTS_APP_EXTERNAL_PORT          "Frontend Reports"              "${FRONTEND_REPORTS_APP_EXTERNAL_PORT:-$FRONTEND_REPORTS_APP_INTERNAL_PORT}"
+  ask FRONTEND_USERS_APP_EXTERNAL_PORT            "Frontend Users"                "${FRONTEND_USERS_APP_EXTERNAL_PORT:-$FRONTEND_USERS_APP_INTERNAL_PORT}"
+  ask FRONTEND_TENANTS_APP_EXTERNAL_PORT          "Frontend Tenants"              "${FRONTEND_TENANTS_APP_EXTERNAL_PORT:-$FRONTEND_TENANTS_APP_INTERNAL_PORT}"
 }
 
-collect_database() {
+collect_rabbitmq() {
-  print_section "5. Banco de Dados"
+  print_section "5. RabbitMQ"
-  ask MONGO_PORT "MongoDB (porta interna)" "${MONGO_PORT:-27017}"
+  ask RABBITMQ_USER     "Usuário admin do RabbitMQ"  "${RABBITMQ_USER:-admin}"
+  ask RABBITMQ_PASSWORD "Senha admin do RabbitMQ"     "${RABBITMQ_PASSWORD:-admin}"
 }
 
 # ══════════════════════════════════════════════════════════════
@@ -273,14 +308,20 @@ collect_config() {
     BACKEND_PEOPLE_API_EXTERNAL_PORT="$BACKEND_PEOPLE_API_INTERNAL_PORT"
     BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT="$BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT"
     BACKEND_ACCOUNT_API_EXTERNAL_PORT="$BACKEND_ACCOUNT_API_INTERNAL_PORT"
+    BACKEND_REPORTS_API_EXTERNAL_PORT="$BACKEND_REPORTS_API_INTERNAL_PORT"
+    BACKEND_USERS_API_EXTERNAL_PORT="$BACKEND_USERS_API_INTERNAL_PORT"
+    BACKEND_TENANTS_API_EXTERNAL_PORT="$BACKEND_TENANTS_API_INTERNAL_PORT"
     FRONTEND_SUITE_APP_EXTERNAL_PORT="$FRONTEND_SUITE_APP_INTERNAL_PORT"
     FRONTEND_PEOPLE_APP_EXTERNAL_PORT="$FRONTEND_PEOPLE_APP_INTERNAL_PORT"
     FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT="$FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT"
     FRONTEND_ACCOUNT_APP_EXTERNAL_PORT="$FRONTEND_ACCOUNT_APP_INTERNAL_PORT"
+    FRONTEND_REPORTS_APP_EXTERNAL_PORT="$FRONTEND_REPORTS_APP_INTERNAL_PORT"
+    FRONTEND_USERS_APP_EXTERNAL_PORT="$FRONTEND_USERS_APP_INTERNAL_PORT"
+    FRONTEND_TENANTS_APP_EXTERNAL_PORT="$FRONTEND_TENANTS_APP_INTERNAL_PORT"
     print_ok "Portas externas definidas iguais às internas."
   fi
 
-  collect_database
+  collect_rabbitmq
 }
 
 # ══════════════════════════════════════════════════════════════
@@ -303,15 +344,16 @@ show_summary() {
     echo -e "      Porta   : ${BOLD}${SYSTEM_BASE_PORT}${NC}"
     echo ""
     echo -e "  ${BOLD}[3] Portas Internas${NC}"
-    echo -e "      Backend  Suite/People/Attendance/Account : ${BOLD}${BACKEND_SUITE_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_PEOPLE_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ACCOUNT_API_INTERNAL_PORT}${NC}"
+    echo -e "      Backend  Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${BACKEND_SUITE_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_PEOPLE_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ACCOUNT_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_REPORTS_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_USERS_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_TENANTS_API_INTERNAL_PORT}${NC}"
-    echo -e "      Frontend Suite/People/Attendance/Account : ${BOLD}${FRONTEND_SUITE_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_PEOPLE_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ACCOUNT_APP_INTERNAL_PORT}${NC}"
+    echo -e "      Frontend Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${FRONTEND_SUITE_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_PEOPLE_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ACCOUNT_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_REPORTS_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_USERS_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_TENANTS_APP_INTERNAL_PORT}${NC}"
     echo ""
     echo -e "  ${BOLD}[4] Portas Externas${NC}"
-    echo -e "      Backend  Suite/People/Attendance/Account : ${BOLD}${BACKEND_SUITE_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_PEOPLE_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ACCOUNT_API_EXTERNAL_PORT}${NC}"
+    echo -e "      Backend  Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${BACKEND_SUITE_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_PEOPLE_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ACCOUNT_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_REPORTS_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_USERS_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_TENANTS_API_EXTERNAL_PORT}${NC}"
-    echo -e "      Frontend Suite/People/Attendance/Account : ${BOLD}${FRONTEND_SUITE_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_PEOPLE_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT}${NC}"
+    echo -e "      Frontend Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${FRONTEND_SUITE_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_PEOPLE_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_REPORTS_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_USERS_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_TENANTS_APP_EXTERNAL_PORT}${NC}"
     echo ""
-    echo -e "  ${BOLD}[5] Banco de Dados${NC}"
+    echo -e "  ${BOLD}[5] RabbitMQ${NC}"
-    echo -e "      MongoDB : ${BOLD}${MONGO_PORT}${NC}"
+    echo -e "      Usuário : ${BOLD}${RABBITMQ_USER}${NC}"
+    echo -e "      Senha   : ${BOLD}********${NC}"
     echo ""
     echo -e "  ──────────────────────────────────────────────────────────────"
     echo -e "  ${GREEN}${BOLD}[C]${NC} Confirmar e continuar   ${RED}${BOLD}[X]${NC} Cancelar instalação"
@@ -325,7 +367,7 @@ show_summary() {
       2) collect_system_base ;;
       3) collect_internal_ports ;;
       4) collect_external_ports ;;
-      5) collect_database ;;
+      5) collect_rabbitmq ;;
       C) break ;;
       X)
         echo ""
@@ -348,9 +390,19 @@ generate_envs() {
 
   local BASE_DIR="$INSTALL_DIR"
   local SYSTEM_BASE_CONN="${SYSTEM_BASE_HOST}:${SYSTEM_BASE_PORT}"
+
   local KEEPALIVE_BACKEND="${EXTERNAL_HOST}:${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}"
   local KEEPALIVE_FRONTEND="${EXTERNAL_HOST}:${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}"
 
+  local KEEPALIVE_BACKEND_REPORTS="${EXTERNAL_HOST}:${BACKEND_REPORTS_API_EXTERNAL_PORT}"
+  local KEEPALIVE_FRONTEND_REPORTS="${EXTERNAL_HOST}:${FRONTEND_REPORTS_APP_EXTERNAL_PORT}"
+
+  local KEEPALIVE_BACKEND_USERS="${EXTERNAL_HOST}:${BACKEND_USERS_API_EXTERNAL_PORT}"
+  local KEEPALIVE_FRONTEND_USERS="${EXTERNAL_HOST}:${FRONTEND_USERS_APP_EXTERNAL_PORT}"
+
+  local KEEPALIVE_BACKEND_TENANTS="${EXTERNAL_HOST}:${BACKEND_TENANTS_API_EXTERNAL_PORT}"
+  local KEEPALIVE_FRONTEND_TENANTS="${EXTERNAL_HOST}:${FRONTEND_TENANTS_APP_EXTERNAL_PORT}"
+
   cat > "$BASE_DIR/.env.prod" <<EOF
 ASPNETCORE_ENVIRONMENT=Production
 DOCKER_REPO=seventhltda
@@ -360,10 +412,49 @@ IMAGEM_RELEASE=2.0
 NGINX_DEFAULT_PORT=80
 
 # ── MongoDB ───────────────────────────────────────────────
-MONGO_PORT=${MONGO_PORT}
+MONGO_PORT=27017
 MONGODB_CONNECTION_STRING=mongodb://mongodb:27017/suitedb
 MONGODB_DATABASE=suitedb
 
+# ── PostgreSQL ────────────────────────────────────────────
+POSTGRES_PORT=5432
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=postgres
+POSTGRES_DB=attendancesystem
+
+# ── Consul ────────────────────────────────────────────────
+CONSUL_HTTP_PORT=8500
+CONSUL_DNS_PORT=8600
+
+# ── RabbitMQ ──────────────────────────────────────────────
+RABBITMQ_PORT=5672
+RABBITMQ_MANAGEMENT_PORT=15672
+RABBITMQ_VHOST=/
+RABBITMQ_USER=${RABBITMQ_USER}
+RABBITMQ_PASSWORD=${RABBITMQ_PASSWORD}
+
+# ── RabbitMQ (mensageria entre suite/users/reports) ──────
+# Um vhost por serviço: quem consome é dono do vhost onde a fila mora.
+# Usuário "owner" tem acesso total ao próprio vhost; "writer" só publica
+# (write-only) no vhost de um serviço vizinho — ver rabbitmq/definitions.json.
+RABBITMQ_SUITE_VHOST=${RABBITMQ_SUITE_VHOST}
+RABBITMQ_USERS_VHOST=${RABBITMQ_USERS_VHOST}
+RABBITMQ_REPORTS_VHOST=${RABBITMQ_REPORTS_VHOST}
+
+RABBITMQ_SUITE_OWNER_USER=${RABBITMQ_SUITE_OWNER_USER}
+RABBITMQ_SUITE_OWNER_PASSWORD=${RABBITMQ_SUITE_OWNER_PASSWORD}
+RABBITMQ_USERS_OWNER_USER=${RABBITMQ_USERS_OWNER_USER}
+RABBITMQ_USERS_OWNER_PASSWORD=${RABBITMQ_USERS_OWNER_PASSWORD}
+RABBITMQ_REPORTS_OWNER_USER=${RABBITMQ_REPORTS_OWNER_USER}
+RABBITMQ_REPORTS_OWNER_PASSWORD=${RABBITMQ_REPORTS_OWNER_PASSWORD}
+
+RABBITMQ_SUITE_WRITER_USER=${RABBITMQ_SUITE_WRITER_USER}
+RABBITMQ_SUITE_WRITER_PASSWORD=${RABBITMQ_SUITE_WRITER_PASSWORD}
+RABBITMQ_USERS_WRITER_USER=${RABBITMQ_USERS_WRITER_USER}
+RABBITMQ_USERS_WRITER_PASSWORD=${RABBITMQ_USERS_WRITER_PASSWORD}
+RABBITMQ_REPORTS_WRITER_USER=${RABBITMQ_REPORTS_WRITER_USER}
+RABBITMQ_REPORTS_WRITER_PASSWORD=${RABBITMQ_REPORTS_WRITER_PASSWORD}
+
 # ── Sistema Base ──────────────────────────────────────────
 SYSTEM_BASE_CONN=${SYSTEM_BASE_CONN}
 SYSTEM_BASE_HOST=${SYSTEM_BASE_HOST}
@@ -386,6 +477,15 @@ BACKEND_PEOPLE_API_EXTERNAL_PORT=${BACKEND_PEOPLE_API_EXTERNAL_PORT}
 BACKEND_ACCOUNT_API_INTERNAL_PORT=${BACKEND_ACCOUNT_API_INTERNAL_PORT}
 BACKEND_ACCOUNT_API_EXTERNAL_PORT=${BACKEND_ACCOUNT_API_EXTERNAL_PORT}
 
+BACKEND_REPORTS_API_INTERNAL_PORT=${BACKEND_REPORTS_API_INTERNAL_PORT}
+BACKEND_REPORTS_API_EXTERNAL_PORT=${BACKEND_REPORTS_API_EXTERNAL_PORT}
+
+BACKEND_USERS_API_INTERNAL_PORT=${BACKEND_USERS_API_INTERNAL_PORT}
+BACKEND_USERS_API_EXTERNAL_PORT=${BACKEND_USERS_API_EXTERNAL_PORT}
+
+BACKEND_TENANTS_API_INTERNAL_PORT=${BACKEND_TENANTS_API_INTERNAL_PORT}
+BACKEND_TENANTS_API_EXTERNAL_PORT=${BACKEND_TENANTS_API_EXTERNAL_PORT}
+
 BACKEND_ATTENDANCESYSTEM_API_APPLICATIONNAME=AttendanceSystem
 BACKEND_ATTENDANCESYSTEM_API_NAME=attendancesystem-api
 
@@ -402,13 +502,74 @@ FRONTEND_PEOPLE_APP_EXTERNAL_PORT=${FRONTEND_PEOPLE_APP_EXTERNAL_PORT}
 FRONTEND_ACCOUNT_APP_INTERNAL_PORT=${FRONTEND_ACCOUNT_APP_INTERNAL_PORT}
 FRONTEND_ACCOUNT_APP_EXTERNAL_PORT=${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT}
 
+FRONTEND_REPORTS_APP_INTERNAL_PORT=${FRONTEND_REPORTS_APP_INTERNAL_PORT}
+FRONTEND_REPORTS_APP_EXTERNAL_PORT=${FRONTEND_REPORTS_APP_EXTERNAL_PORT}
+
+FRONTEND_USERS_APP_INTERNAL_PORT=${FRONTEND_USERS_APP_INTERNAL_PORT}
+FRONTEND_USERS_APP_EXTERNAL_PORT=${FRONTEND_USERS_APP_EXTERNAL_PORT}
+
+FRONTEND_TENANTS_APP_INTERNAL_PORT=${FRONTEND_TENANTS_APP_INTERNAL_PORT}
+FRONTEND_TENANTS_APP_EXTERNAL_PORT=${FRONTEND_TENANTS_APP_EXTERNAL_PORT}
+
 # ── Keepalive ─────────────────────────────────────────────
 KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_BACKEND}
 KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_FRONTEND}
+
+KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_BACKEND_REPORTS}
+KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_REPORTS}
+
+KEEPALIVE_USERS_BACKEND_HOST=${KEEPALIVE_BACKEND_USERS}
+KEEPALIVE_USERS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_USERS}
+
+KEEPALIVE_TENANTS_BACKEND_HOST=${KEEPALIVE_BACKEND_TENANTS}
+KEEPALIVE_TENANTS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_TENANTS}
+
 EOF
   print_ok ".env.prod gerado"
 }
 
+# ══════════════════════════════════════════════════════════════
+# Gerar definitions.json do RabbitMQ (vhosts/usuários/permissões)
+# ══════════════════════════════════════════════════════════════
+
+generate_rabbitmq_definitions() {
+  local BASE_DIR="$INSTALL_DIR"
+  mkdir -p "$BASE_DIR/rabbitmq"
+
+  cat > "$BASE_DIR/rabbitmq/definitions.json" <<EOF
+{
+  "vhosts": [
+    {"name": "${RABBITMQ_SUITE_VHOST}"},
+    {"name": "${RABBITMQ_USERS_VHOST}"},
+    {"name": "${RABBITMQ_REPORTS_VHOST}"}
+  ],
+  "users": [
+    {"name": "${RABBITMQ_USER}", "password": "${RABBITMQ_PASSWORD}", "tags": ["administrator"]},
+    {"name": "${RABBITMQ_SUITE_OWNER_USER}", "password": "${RABBITMQ_SUITE_OWNER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_USERS_OWNER_USER}", "password": "${RABBITMQ_USERS_OWNER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_REPORTS_OWNER_USER}", "password": "${RABBITMQ_REPORTS_OWNER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_SUITE_WRITER_USER}", "password": "${RABBITMQ_SUITE_WRITER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_USERS_WRITER_USER}", "password": "${RABBITMQ_USERS_WRITER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_REPORTS_WRITER_USER}", "password": "${RABBITMQ_REPORTS_WRITER_PASSWORD}", "tags": []}
+  ],
+  "permissions": [
+    {"user": "${RABBITMQ_SUITE_OWNER_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_USERS_OWNER_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_REPORTS_OWNER_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+
+    {"user": "${RABBITMQ_SUITE_WRITER_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
+    {"user": "${RABBITMQ_USERS_WRITER_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
+    {"user": "${RABBITMQ_REPORTS_WRITER_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
+
+    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"}
+  ]
+}
+EOF
+  print_ok "rabbitmq/definitions.json gerado"
+}
+
 # ══════════════════════════════════════════════════════════════
 # Subir ambiente
 # ══════════════════════════════════════════════════════════════
@@ -432,7 +593,7 @@ start_environment() {
   echo -e "    ${BOLD}make install${NC} → sobe o projeto"
   echo -e "    ${BOLD}make update${NC}  → atualiza o projeto"
   echo -e "    ${BOLD}make app${NC}   → sobe apenas a aplicação"
-  echo -e "    ${BOLD}make infra${NC} → sobe apenas a infra (MongoDB)"
+  echo -e "    ${BOLD}make infra${NC} → sobe apenas a infra (MongoDB, PostgreSQL, Consul, RabbitMQ)"
   echo -e "    ${BOLD}make nuke-project${NC}  → limpa o projeto"
   echo -e "    ${BOLD}make nuke${NC}  → limpa tudo (cuidado!)"
   echo ""
@@ -451,6 +612,7 @@ main() {
   show_summary        # resumo com menu de edição
 
   generate_envs
+  generate_rabbitmq_definitions
 
   if confirm "Deseja subir o ambiente agora?"; then
     start_environment

rabbitmq/definitions.conf

@@ -0,0 +1 @@
+management.load_definitions = /etc/rabbitmq/definitions.json