#SVTH-575 - Mantendo consul para consumo de tenants no users.service.

.gitignore

@@ -41,5 +41,4 @@ Thumbs.db
 *.avi
 *.flv
 *.mov
-*.wmv
+*.wmv
-attendancesystem/

Makefile

@@ -2,11 +2,11 @@ ENV ?= prod
 COMPOSE_FILE = docker-compose.yml
 ENV_FILE = .env.$(ENV)
 
-CONTAINER_POSTFIX := $(shell grep '^CONTAINER_POSTFIX=' $(ENV_FILE) 2>/dev/null | cut -d'=' -f2-)
+PROJECT_NAME = attendancesystem-$(ENV)
-PROJECT_NAME = attendancesystem-$(ENV)$(if $(CONTAINER_POSTFIX),-$(CONTAINER_POSTFIX),)
 NETWORK_NAME = attendancesystem-network
+APP_SERVICES = suite-api users-api reports-api attendancesystem-api config-generator attendancesystem-app reports-app users-app suite-app
 
-.PHONY: app install update reset-network nuke nuke-project
+.PHONY: infra app install update restart reset-network nuke nuke-project
 
 # ===============================
 # 🧹 Reset Network
@@ -15,6 +15,25 @@ reset-network:
 	@echo "🧹 Removendo rede antiga (se existir)..."
 	-docker network rm $(NETWORK_NAME) 2>/dev/null || true
 
+# ===============================
+# 🏗 Subir apenas INFRA
+# ===============================
+infra: reset-network
+	@echo "📥 Baixando imagens de INFRA ($(PROJECT_NAME))..."
+	docker compose \
+		--project-name $(PROJECT_NAME) \
+		--env-file $(ENV_FILE) \
+		--profile infra \
+		-f $(COMPOSE_FILE) \
+		pull
+	@echo "🚀 Subindo apenas INFRA ($(PROJECT_NAME))..."
+	docker compose \
+		--project-name $(PROJECT_NAME) \
+		--env-file $(ENV_FILE) \
+		--profile infra \
+		-f $(COMPOSE_FILE) \
+		up -d --pull never
+
 # ===============================
 # 🧩 Subir apenas APP
 # ===============================
@@ -23,16 +42,18 @@ app:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		pull
+		pull $(APP_SERVICES)
 	@echo "🚀 Subindo apenas APP ($(PROJECT_NAME))..."
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		up -d --pull never
+		up -d --pull never --force-recreate $(APP_SERVICES)
 
 # ===============================
 # 🔥 Subir TUDO
@@ -42,6 +63,7 @@ install:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
 		pull
@@ -49,14 +71,45 @@ install:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		up -d --pull never
+		up -d --pull never --force-recreate
 
 # ===============================
-# 🔄 Atualizar projeto
+# 🔄 Reiniciar containers ativos
 # ===============================
-update: nuke-project install
+restart:
+	docker restart $$(docker ps -q)
+
+# ===============================
+# 🔄 Atualizar projeto (apenas APP)
+# ===============================
+update:
+	@echo "🛑 Parando containers do profile 'app' ($(PROJECT_NAME))..."
+	docker compose \
+		--project-name $(PROJECT_NAME) \
+		--env-file $(ENV_FILE) \
+		--profile infra \
+		--profile app \
+		-f $(COMPOSE_FILE) \
+		stop $(APP_SERVICES)
+
+	@echo "🗑️ Removendo containers do profile 'app' ($(PROJECT_NAME))..."
+	docker compose \
+		--project-name $(PROJECT_NAME) \
+		--env-file $(ENV_FILE) \
+		--profile infra \
+		--profile app \
+		-f $(COMPOSE_FILE) \
+		rm -f $(APP_SERVICES)
+
+	@echo "🖼️ Removendo imagens antigas do projeto (seventhltda)..."
+	- docker images --format '{{.Repository}}:{{.Tag}}' | grep '^seventhltda/' | xargs -r docker rmi -f 2>/dev/null || true
+
+	@echo "✅ Containers do profile 'app' removidos. Infraestrutura (dados) preservada."
+
+	$(MAKE) app
 
 # ===============================
 # 💣 Limpeza TOTAL
@@ -91,6 +144,7 @@ nuke-project:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
 		down --volumes --remove-orphans
@@ -99,3 +153,4 @@ nuke-project:
 	- docker images --format '{{.Repository}}:{{.Tag}}' | grep '^seventhltda/' | xargs -r docker rmi -f 2>/dev/null || true
 
 	@echo "✅ Projeto $(PROJECT_NAME) limpo (containers, volumes, rede e imagens)."
+	@echo "   Imagens de infraestrutura preservadas."

config.template.json

@@ -7,15 +7,19 @@
   },
   "urlLgpd": "https://lgpd.seventh.com.br/feedback?product=situator",
   "modules": {
-    "suite": "",
+    "suite": "${FRONTEND_SUITE_URL}",
     "attendance": "${FRONTEND_ATTENDANCE_URL}",
-    "account": "",
+    "account": "${FRONTEND_ACCOUNT_URL}",
-    "people": ""
+    "people": "${FRONTEND_PEOPLE_URL}",
+    "reports": "${FRONTEND_REPORTS_URL}",
+    "users": "${FRONTEND_USERS_URL}"
   },
   "api": {
-    "suite": "",
+    "suite": "${BACKEND_SUITE_API_URL}",
-    "people": "",
+    "people": "${BACKEND_PEOPLE_API_URL}",
-    "account": "",
+    "account": "${BACKEND_ACCOUNT_API_URL}",
-    "attendance": "${BACKEND_ATTENDANCE_API_URL}"
+    "attendance": "${BACKEND_ATTENDANCE_API_URL}",
+    "reports": "${BACKEND_REPORTS_API_URL}",
+    "users": "${BACKEND_USERS_API_URL}"
   }
 }

docker-compose.yml

@@ -1,15 +1,174 @@
 services:
+  # ================= INFRA =================
+  mongodb:
+    image: mongo:${IMAGEM_LATEST}
+    profiles: ["infra"]
+    ports:
+      - "${MONGO_PORT}:27017"
+    volumes:
+      - mongodb_data:/data/db
+    networks:
+      - app-network
+    healthcheck:
+      test: echo 'db.runCommand("ping").ok' | mongosh localhost:27017/test --quiet
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  consul:
+    image: hashicorp/consul:latest
+    profiles: ["infra"]
+    ports:
+      - "${CONSUL_HTTP_PORT}:8500"
+      - "${CONSUL_DNS_PORT}:8600/udp"
+    command: "agent -server -bootstrap -ui -client=0.0.0.0"
+    networks:
+      - app-network
+    healthcheck:
+      test: ["CMD", "consul", "members"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  postgres:
+    image: postgres:16-alpine
+    profiles: ["infra"]
+    ports:
+      - "${POSTGRES_PORT}:5432"
+    environment:
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DB=${POSTGRES_DB}
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    networks:
+      - app-network
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  rabbitmq:
+    image: rabbitmq:4-management-alpine
+    profiles: ["infra"]
+    ports:
+      - "${RABBITMQ_PORT}:5672"
+      - "${RABBITMQ_MANAGEMENT_PORT}:15672"
+    environment:
+      - RABBITMQ_DEFAULT_USER=${RABBITMQ_USER}
+      - RABBITMQ_DEFAULT_PASS=${RABBITMQ_PASSWORD}
+      - RABBITMQ_DEFAULT_VHOST=${RABBITMQ_VHOST}
+    volumes:
+      - rabbitmq_data:/var/lib/rabbitmq
+      - ./rabbitmq/definitions.json:/etc/rabbitmq/definitions.json:ro
+      - ./rabbitmq/definitions.conf:/etc/rabbitmq/conf.d/20-definitions.conf:ro
+    networks:
+      - app-network
+    healthcheck:
+      test: ["CMD", "rabbitmq-diagnostics", "-q", "ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
   # ================= BACKEND =================
 
+  suite-api:
+    image: ${DOCKER_REPO}/suite-api:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    ports:
+      - "${BACKEND_SUITE_API_INTERNAL_PORT}:${BACKEND_SUITE_API_INTERNAL_PORT}"
+    environment:
+      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT}
+      - MONGODB_CONNECTION_STRING=${MONGODB_CONNECTION_STRING}
+      - MONGODB_DATABASE=${MONGODB_DATABASE}
+      - SYSTEM_BASE_CONN=${SYSTEM_BASE_CONN}
+      - FRONTEND_CONN=${INTERNAL_HOST}:${FRONTEND_SUITE_APP_INTERNAL_PORT}
+      - ConsulSettings__Address=http://consul:8500
+      - Messaging__RabbitMQ__Host=rabbitmq
+      - Messaging__RabbitMQ__Port=5672
+      - Messaging__RabbitMQ__VirtualHost=${RABBITMQ_SUITE_VHOST}
+      - Messaging__RabbitMQ__Username=${RABBITMQ_SUITE_OWNER_USER}
+      - Messaging__RabbitMQ__Password=${RABBITMQ_SUITE_OWNER_PASSWORD}
+      - Messaging__RabbitMQ__Messaging__ServiceName=suite
+      - Messaging__RabbitMQ__Connections__users__Host=rabbitmq
+      - Messaging__RabbitMQ__Connections__users__Port=5672
+      - Messaging__RabbitMQ__Connections__users__VirtualHost=${RABBITMQ_USERS_VHOST}
+      - Messaging__RabbitMQ__Connections__users__Username=${RABBITMQ_USERS_WRITER_USER}
+      - Messaging__RabbitMQ__Connections__users__Password=${RABBITMQ_USERS_WRITER_PASSWORD}
+      - KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST}
+      - KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST}
+      - KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_REPORTS_BACKEND_HOST}
+      - KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_REPORTS_FRONTEND_HOST}
+      - KEEPALIVE_USERS_BACKEND_HOST=${KEEPALIVE_USERS_BACKEND_HOST}
+      - KEEPALIVE_USERS_FRONTEND_HOST=${KEEPALIVE_USERS_FRONTEND_HOST}
+      - KEEPALIVE_TENANTS_BACKEND_HOST=${KEEPALIVE_TENANTS_BACKEND_HOST}
+      - KEEPALIVE_TENANTS_FRONTEND_HOST=${KEEPALIVE_TENANTS_FRONTEND_HOST}
+    depends_on:
+      consul:
+        condition: service_healthy
+      rabbitmq:
+        condition: service_healthy
+    networks:
+      - app-network
+
+  users-api:
+    image: ${DOCKER_REPO}/sca-users-api:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    ports:
+      - "${BACKEND_USERS_API_INTERNAL_PORT}:${BACKEND_USERS_API_INTERNAL_PORT}"
+    environment:
+      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT}
+      - ConnectionStrings__UsersDb=Host=postgres;Port=5432;Database=seventh_users;Username=${POSTGRES_USER};Password=${POSTGRES_PASSWORD}
+      - MongoDbSettings__ConnectionString=mongodb://mongodb:27017
+      - ConsulSettings__Address=http://consul:8500
+      - Messaging__RabbitMQ__Host=rabbitmq
+      - Messaging__RabbitMQ__Port=5672
+      - Messaging__RabbitMQ__VirtualHost=${RABBITMQ_USERS_VHOST}
+      - Messaging__RabbitMQ__Username=${RABBITMQ_USERS_OWNER_USER}
+      - Messaging__RabbitMQ__Password=${RABBITMQ_USERS_OWNER_PASSWORD}
+      - Messaging__RabbitMQ__Messaging__ServiceName=users
+      - Messaging__RabbitMQ__Connections__suite__Host=rabbitmq
+      - Messaging__RabbitMQ__Connections__suite__Port=5672
+      - Messaging__RabbitMQ__Connections__suite__VirtualHost=${RABBITMQ_SUITE_VHOST}
+      - Messaging__RabbitMQ__Connections__suite__Username=${RABBITMQ_SUITE_WRITER_USER}
+      - Messaging__RabbitMQ__Connections__suite__Password=${RABBITMQ_SUITE_WRITER_PASSWORD}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      mongodb:
+        condition: service_healthy
+      consul:
+        condition: service_healthy
+      rabbitmq:
+        condition: service_healthy
+    networks:
+      - app-network
+
+  reports-api:
+    image: ${DOCKER_REPO}/sca-reports-api:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    ports:
+      - "${BACKEND_REPORTS_API_INTERNAL_PORT}:${BACKEND_REPORTS_API_INTERNAL_PORT}"
+    environment:
+      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT}
+      - MONGODB_CONNECTION_STRING=${MONGODB_CONNECTION_STRING}
+      - MONGODB_DATABASE=${MONGODB_DATABASE}
+      - SystemBaseConn=${SYSTEM_BASE_CONN}
+      - FRONTEND_CONN=${INTERNAL_HOST}:${FRONTEND_REPORTS_APP_INTERNAL_PORT}
+      - KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST}
+      - KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST}
+      - KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_REPORTS_BACKEND_HOST}
+      - KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_REPORTS_FRONTEND_HOST}
+    networks:
+      - app-network
+
   attendancesystem-api:
-    container_name: attendancesystem-api${CONTAINER_NAME_SUFFIX}
+    image: ${DOCKER_REPO}/backend-attendance-system-api:${IMAGEM_UNSTABLE_LATEST}
-    image: ${DOCKER_REPO}/backend-attendance-system-api:${IMAGEM_RELEASE_1_3}
     profiles: ["app"]
     ports:
       - "${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}:${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}"
     environment:
-      - ASPNETCORE_URLS=http://*:${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}
-      - Kestrel__Endpoints__Http__Url=http://*:${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}
       - SYSBASE_URL=${SYSTEM_BASE_CONN}
       - SystemBaseConn=${SYSTEM_BASE_CONN}
       - FrotendConn=${EXTERNAL_HOST}:${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}
@@ -18,7 +177,6 @@ services:
 
   # ================= FRONTEND =================
   config-generator:
-    container_name: config-generator${CONTAINER_NAME_SUFFIX}
     image: alpine:${IMAGEM_LATEST}
     profiles: ["app"]
     environment:
@@ -32,6 +190,12 @@ services:
       - BACKEND_ATTENDANCE_API_URL=${EXTERNAL_HOST}:${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}
       - BACKEND_PEOPLE_API_URL=${EXTERNAL_HOST}:${BACKEND_PEOPLE_API_EXTERNAL_PORT}
       - BACKEND_ACCOUNT_API_URL=${EXTERNAL_HOST}:${BACKEND_ACCOUNT_API_EXTERNAL_PORT}
+      - BACKEND_REPORTS_API_URL=${EXTERNAL_HOST}:${BACKEND_REPORTS_API_EXTERNAL_PORT}
+      - BACKEND_USERS_API_URL=${EXTERNAL_HOST}:${BACKEND_USERS_API_EXTERNAL_PORT}
+      - BACKEND_TENANTS_API_URL=${EXTERNAL_HOST}:${BACKEND_TENANTS_API_EXTERNAL_PORT}
+      - FRONTEND_REPORTS_URL=${EXTERNAL_HOST}:${FRONTEND_REPORTS_APP_EXTERNAL_PORT}
+      - FRONTEND_USERS_URL=${EXTERNAL_HOST}:${FRONTEND_USERS_APP_EXTERNAL_PORT}
+      - FRONTEND_TENANTS_URL=${EXTERNAL_HOST}:${FRONTEND_TENANTS_APP_EXTERNAL_PORT}
     command: >
       sh -c "apk add --no-cache gettext &&
             envsubst < /config.template.json > /output/config.json &&
@@ -43,8 +207,7 @@ services:
     restart: "no"
 
   attendancesystem-app:
-    container_name: attendancesystem-app${CONTAINER_NAME_SUFFIX}
+    image: ${DOCKER_REPO}/attendancesystem-frontend:${IMAGEM_RELEASE}
-    image: ${DOCKER_REPO}/attendancesystem-frontend:${IMAGEM_RELEASE_1_3}
     profiles: ["app"]
     volumes:
       - config-volume:/config-inject:ro
@@ -59,9 +222,76 @@ services:
       config-generator:
         condition: service_completed_successfully
 
+  reports-app:
+    image: ${DOCKER_REPO}/reports-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_REPORTS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
+  users-app:
+    image: ${DOCKER_REPO}/users-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_USERS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
+  tenants-app:
+    image: ${DOCKER_REPO}/tenants-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_TENANTS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
+  suite-app:
+    image: ${DOCKER_REPO}/suite-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_SUITE_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
 networks:
   app-network:
     name: attendancesystem-network
 
 volumes:
+  mongodb_data:
+  postgres_data:
+  rabbitmq_data:
   config-volume:

install.sh

@@ -4,7 +4,7 @@
 #  🚀 Instalador - AttendanceSystem
 #  Uso:
 #    bash <(curl -fsSL \
-#      "https://git.seventh.com.br/seventh.p7/attendance-system.install/raw/branch/main/install.sh")
+#      "https://git.seventh.com.br/seventh.p7/attendance-system.install/raw/branch/feature%2FSVTH-575---install-users/install.sh")
 # ==============================================================
 
 # ── Redireciona stdin para o terminal quando rodado via curl | bash ──
@@ -28,10 +28,32 @@ NC='\033[0m'
 
 # ─── Repositório Git ──────────────────────────────────────────
 INSTALL_DIR="attendancesystem"
-BRANCH="${BRANCH:-feature/SDA-304}"
+BRANCH="${BRANCH:-feature/SVTH-575---install-users}"
 ENV_FILE=""
 GIT_REPO="https://git.seventh.com.br/seventh.p7/attendance-system.install.git"
 
+# ─── RabbitMQ (mensageria entre suite/users/reports) ──────────
+# Um vhost por serviço: quem consome é dono do vhost onde a fila mora.
+# Usuário "owner" tem acesso total ao próprio vhost; "writer" só publica
+# (write-only) no vhost de um serviço vizinho — ver rabbitmq/definitions.json.
+RABBITMQ_SUITE_VHOST="suite"
+RABBITMQ_USERS_VHOST="users"
+RABBITMQ_REPORTS_VHOST="reports"
+
+RABBITMQ_SUITE_OWNER_USER="suite-owner"
+RABBITMQ_SUITE_OWNER_PASSWORD="suite-owner-secret"
+RABBITMQ_USERS_OWNER_USER="users-owner"
+RABBITMQ_USERS_OWNER_PASSWORD="users-owner-secret"
+RABBITMQ_REPORTS_OWNER_USER="reports-owner"
+RABBITMQ_REPORTS_OWNER_PASSWORD="reports-owner-secret"
+
+RABBITMQ_SUITE_WRITER_USER="suite-writer"
+RABBITMQ_SUITE_WRITER_PASSWORD="suite-writer-secret"
+RABBITMQ_USERS_WRITER_USER="users-writer"
+RABBITMQ_USERS_WRITER_PASSWORD="users-writer-secret"
+RABBITMQ_REPORTS_WRITER_USER="reports-writer"
+RABBITMQ_REPORTS_WRITER_PASSWORD="reports-writer-secret"
+
 # ══════════════════════════════════════════════════════════════
 # Utilitários
 # ══════════════════════════════════════════════════════════════
@@ -91,24 +113,6 @@ ask() {
   eval "$varname=\"$value\""
 }
 
-ask_optional() {
-  # ask_optional <VARNAME> <prompt> [default]
-  local varname="$1"
-  local prompt="$2"
-  local default="$3"
-  local value=""
-
-  if [ -n "$default" ]; then
-    echo -ne "  ${BOLD}${prompt}${NC} ${DIM}[${default}]${NC} ${DIM}(ENTER para nenhum)${NC}: "
-  else
-    echo -ne "  ${BOLD}${prompt}${NC} ${DIM}(ENTER para nenhum)${NC}: "
-  fi
-
-  read -r value
-  value="${value:-$default}"
-  eval "$varname=\"$value\""
-}
-
 confirm() {
   echo -ne "  ${BOLD}$1${NC} ${CYAN}[s/N]${NC}: "
   read -r resp
@@ -239,24 +243,46 @@ collect_system_base() {
 
 collect_internal_ports() {
   print_section "3. Portas Internas (rede local)"
+  ask BACKEND_SUITE_API_INTERNAL_PORT             "Backend Suite API"             "${BACKEND_SUITE_API_INTERNAL_PORT:-10101}"
+  ask BACKEND_PEOPLE_API_INTERNAL_PORT            "Backend People API"            "${BACKEND_PEOPLE_API_INTERNAL_PORT:-10100}"
   ask BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT  "Backend AttendanceSystem API"  "${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT:-10102}"
+  ask BACKEND_ACCOUNT_API_INTERNAL_PORT           "Backend Account API"           "${BACKEND_ACCOUNT_API_INTERNAL_PORT:-10103}"
+  ask BACKEND_REPORTS_API_INTERNAL_PORT           "Backend Reports API"           "${BACKEND_REPORTS_API_INTERNAL_PORT:-10105}"
+  ask BACKEND_USERS_API_INTERNAL_PORT             "Backend Users API"             "${BACKEND_USERS_API_INTERNAL_PORT:-10109}"
+  ask BACKEND_TENANTS_API_INTERNAL_PORT           "Backend Tenants API"           "${BACKEND_TENANTS_API_INTERNAL_PORT:-10110}"
+  ask FRONTEND_SUITE_APP_INTERNAL_PORT            "Frontend Suite"                "${FRONTEND_SUITE_APP_INTERNAL_PORT:-4200}"
+  ask FRONTEND_PEOPLE_APP_INTERNAL_PORT           "Frontend People"               "${FRONTEND_PEOPLE_APP_INTERNAL_PORT:-4201}"
   ask FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT "Frontend AttendanceSystem"     "${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT:-4202}"
+  ask FRONTEND_ACCOUNT_APP_INTERNAL_PORT          "Frontend Account"              "${FRONTEND_ACCOUNT_APP_INTERNAL_PORT:-4203}"
+  ask FRONTEND_REPORTS_APP_INTERNAL_PORT          "Frontend Reports"              "${FRONTEND_REPORTS_APP_INTERNAL_PORT:-4205}"
+  ask FRONTEND_USERS_APP_INTERNAL_PORT            "Frontend Users"                "${FRONTEND_USERS_APP_INTERNAL_PORT:-4209}"
+  ask FRONTEND_TENANTS_APP_INTERNAL_PORT          "Frontend Tenants"              "${FRONTEND_TENANTS_APP_INTERNAL_PORT:-4210}"
 }
 
 collect_external_ports() {
   print_section "4. Portas Externas (NAT/acesso remoto)"
   echo -e "  ${DIM}Pressione ENTER para usar a mesma porta interna.${NC}\n"
 
+  ask BACKEND_SUITE_API_EXTERNAL_PORT             "Backend Suite API"             "${BACKEND_SUITE_API_EXTERNAL_PORT:-$BACKEND_SUITE_API_INTERNAL_PORT}"
+  ask BACKEND_PEOPLE_API_EXTERNAL_PORT            "Backend People API"            "${BACKEND_PEOPLE_API_EXTERNAL_PORT:-$BACKEND_PEOPLE_API_INTERNAL_PORT}"
   ask BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT  "Backend AttendanceSystem API"  "${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT:-$BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}"
+  ask BACKEND_ACCOUNT_API_EXTERNAL_PORT           "Backend Account API"           "${BACKEND_ACCOUNT_API_EXTERNAL_PORT:-$BACKEND_ACCOUNT_API_INTERNAL_PORT}"
+  ask BACKEND_REPORTS_API_EXTERNAL_PORT           "Backend Reports API"           "${BACKEND_REPORTS_API_EXTERNAL_PORT:-$BACKEND_REPORTS_API_INTERNAL_PORT}"
+  ask BACKEND_USERS_API_EXTERNAL_PORT             "Backend Users API"             "${BACKEND_USERS_API_EXTERNAL_PORT:-$BACKEND_USERS_API_INTERNAL_PORT}"
+  ask BACKEND_TENANTS_API_EXTERNAL_PORT           "Backend Tenants API"           "${BACKEND_TENANTS_API_EXTERNAL_PORT:-$BACKEND_TENANTS_API_INTERNAL_PORT}"
+  ask FRONTEND_SUITE_APP_EXTERNAL_PORT            "Frontend Suite"                "${FRONTEND_SUITE_APP_EXTERNAL_PORT:-$FRONTEND_SUITE_APP_INTERNAL_PORT}"
+  ask FRONTEND_PEOPLE_APP_EXTERNAL_PORT           "Frontend People"               "${FRONTEND_PEOPLE_APP_EXTERNAL_PORT:-$FRONTEND_PEOPLE_APP_INTERNAL_PORT}"
   ask FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT "Frontend AttendanceSystem"     "${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT:-$FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}"
+  ask FRONTEND_ACCOUNT_APP_EXTERNAL_PORT          "Frontend Account"              "${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT:-$FRONTEND_ACCOUNT_APP_INTERNAL_PORT}"
+  ask FRONTEND_REPORTS_APP_EXTERNAL_PORT          "Frontend Reports"              "${FRONTEND_REPORTS_APP_EXTERNAL_PORT:-$FRONTEND_REPORTS_APP_INTERNAL_PORT}"
+  ask FRONTEND_USERS_APP_EXTERNAL_PORT            "Frontend Users"                "${FRONTEND_USERS_APP_EXTERNAL_PORT:-$FRONTEND_USERS_APP_INTERNAL_PORT}"
+  ask FRONTEND_TENANTS_APP_EXTERNAL_PORT          "Frontend Tenants"              "${FRONTEND_TENANTS_APP_EXTERNAL_PORT:-$FRONTEND_TENANTS_APP_INTERNAL_PORT}"
 }
 
-collect_container_postfix() {
+collect_rabbitmq() {
-  print_section "5. Identificador de instância (postfix dos containers)"
+  print_section "5. RabbitMQ"
-  echo -e "  ${DIM}Distingue containers de múltiplas instalações na mesma máquina.${NC}"
+  ask RABBITMQ_USER     "Usuário admin do RabbitMQ"  "${RABBITMQ_USER:-admin}"
-  echo -e "  ${DIM}Exemplo: 'cliente1' → 'attendancesystem-api-cliente1', etc.${NC}"
+  ask RABBITMQ_PASSWORD "Senha admin do RabbitMQ"     "${RABBITMQ_PASSWORD:-admin}"
-  echo -e "  ${DIM}Deixe em branco para manter o comportamento padrão.${NC}\n"
-  ask_optional CONTAINER_POSTFIX "Postfix" "${CONTAINER_POSTFIX:-}"
 }
 
 # ══════════════════════════════════════════════════════════════
@@ -278,12 +304,24 @@ collect_config() {
   else
     collect_internal_ports
     # Copia internas → externas automaticamente
+    BACKEND_SUITE_API_EXTERNAL_PORT="$BACKEND_SUITE_API_INTERNAL_PORT"
+    BACKEND_PEOPLE_API_EXTERNAL_PORT="$BACKEND_PEOPLE_API_INTERNAL_PORT"
     BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT="$BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT"
+    BACKEND_ACCOUNT_API_EXTERNAL_PORT="$BACKEND_ACCOUNT_API_INTERNAL_PORT"
+    BACKEND_REPORTS_API_EXTERNAL_PORT="$BACKEND_REPORTS_API_INTERNAL_PORT"
+    BACKEND_USERS_API_EXTERNAL_PORT="$BACKEND_USERS_API_INTERNAL_PORT"
+    BACKEND_TENANTS_API_EXTERNAL_PORT="$BACKEND_TENANTS_API_INTERNAL_PORT"
+    FRONTEND_SUITE_APP_EXTERNAL_PORT="$FRONTEND_SUITE_APP_INTERNAL_PORT"
+    FRONTEND_PEOPLE_APP_EXTERNAL_PORT="$FRONTEND_PEOPLE_APP_INTERNAL_PORT"
     FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT="$FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT"
+    FRONTEND_ACCOUNT_APP_EXTERNAL_PORT="$FRONTEND_ACCOUNT_APP_INTERNAL_PORT"
+    FRONTEND_REPORTS_APP_EXTERNAL_PORT="$FRONTEND_REPORTS_APP_INTERNAL_PORT"
+    FRONTEND_USERS_APP_EXTERNAL_PORT="$FRONTEND_USERS_APP_INTERNAL_PORT"
+    FRONTEND_TENANTS_APP_EXTERNAL_PORT="$FRONTEND_TENANTS_APP_INTERNAL_PORT"
     print_ok "Portas externas definidas iguais às internas."
   fi
 
-  collect_container_postfix
+  collect_rabbitmq
 }
 
 # ══════════════════════════════════════════════════════════════
@@ -306,19 +344,16 @@ show_summary() {
     echo -e "      Porta   : ${BOLD}${SYSTEM_BASE_PORT}${NC}"
     echo ""
     echo -e "  ${BOLD}[3] Portas Internas${NC}"
-    echo -e "      Backend  Attendance : ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}${NC}"
+    echo -e "      Backend  Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${BACKEND_SUITE_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_PEOPLE_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ACCOUNT_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_REPORTS_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_USERS_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_TENANTS_API_INTERNAL_PORT}${NC}"
-    echo -e "      Frontend Attendance : ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}${NC}"
+    echo -e "      Frontend Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${FRONTEND_SUITE_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_PEOPLE_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ACCOUNT_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_REPORTS_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_USERS_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_TENANTS_APP_INTERNAL_PORT}${NC}"
     echo ""
     echo -e "  ${BOLD}[4] Portas Externas${NC}"
-    echo -e "      Backend  Attendance : ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}${NC}"
+    echo -e "      Backend  Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${BACKEND_SUITE_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_PEOPLE_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ACCOUNT_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_REPORTS_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_USERS_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_TENANTS_API_EXTERNAL_PORT}${NC}"
-    echo -e "      Frontend Attendance : ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}${NC}"
+    echo -e "      Frontend Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${FRONTEND_SUITE_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_PEOPLE_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_REPORTS_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_USERS_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_TENANTS_APP_EXTERNAL_PORT}${NC}"
     echo ""
-    echo -e "  ${BOLD}[5] Identificador de instância${NC}"
+    echo -e "  ${BOLD}[5] RabbitMQ${NC}"
-    if [ -n "$CONTAINER_POSTFIX" ]; then
+    echo -e "      Usuário : ${BOLD}${RABBITMQ_USER}${NC}"
-      echo -e "      Postfix : ${BOLD}${CONTAINER_POSTFIX}${NC}"
+    echo -e "      Senha   : ${BOLD}********${NC}"
-    else
-      echo -e "      Postfix : ${DIM}(nenhum — comportamento padrão)${NC}"
-    fi
     echo ""
     echo -e "  ──────────────────────────────────────────────────────────────"
     echo -e "  ${GREEN}${BOLD}[C]${NC} Confirmar e continuar   ${RED}${BOLD}[X]${NC} Cancelar instalação"
@@ -332,7 +367,7 @@ show_summary() {
       2) collect_system_base ;;
       3) collect_internal_ports ;;
       4) collect_external_ports ;;
-      5) collect_container_postfix ;;
+      5) collect_rabbitmq ;;
       C) break ;;
       X)
         echo ""
@@ -355,19 +390,71 @@ generate_envs() {
 
   local BASE_DIR="$INSTALL_DIR"
   local SYSTEM_BASE_CONN="${SYSTEM_BASE_HOST}:${SYSTEM_BASE_PORT}"
+
   local KEEPALIVE_BACKEND="${EXTERNAL_HOST}:${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}"
   local KEEPALIVE_FRONTEND="${EXTERNAL_HOST}:${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}"
-  local CONTAINER_NAME_SUFFIX=""
+
-  [ -n "$CONTAINER_POSTFIX" ] && CONTAINER_NAME_SUFFIX="-${CONTAINER_POSTFIX}"
+  local KEEPALIVE_BACKEND_REPORTS="${EXTERNAL_HOST}:${BACKEND_REPORTS_API_EXTERNAL_PORT}"
+  local KEEPALIVE_FRONTEND_REPORTS="${EXTERNAL_HOST}:${FRONTEND_REPORTS_APP_EXTERNAL_PORT}"
+
+  local KEEPALIVE_BACKEND_USERS="${EXTERNAL_HOST}:${BACKEND_USERS_API_EXTERNAL_PORT}"
+  local KEEPALIVE_FRONTEND_USERS="${EXTERNAL_HOST}:${FRONTEND_USERS_APP_EXTERNAL_PORT}"
+
+  local KEEPALIVE_BACKEND_TENANTS="${EXTERNAL_HOST}:${BACKEND_TENANTS_API_EXTERNAL_PORT}"
+  local KEEPALIVE_FRONTEND_TENANTS="${EXTERNAL_HOST}:${FRONTEND_TENANTS_APP_EXTERNAL_PORT}"
 
   cat > "$BASE_DIR/.env.prod" <<EOF
 ASPNETCORE_ENVIRONMENT=Production
 DOCKER_REPO=seventhltda
 IMAGEM_LATEST=latest
 IMAGEM_UNSTABLE_LATEST=unstable-latest
-IMAGEM_RELEASE_1_3=1.3
+IMAGEM_RELEASE=2.0
 NGINX_DEFAULT_PORT=80
 
+# ── MongoDB ───────────────────────────────────────────────
+MONGO_PORT=27017
+MONGODB_CONNECTION_STRING=mongodb://mongodb:27017/suitedb
+MONGODB_DATABASE=suitedb
+
+# ── PostgreSQL ────────────────────────────────────────────
+POSTGRES_PORT=5432
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=postgres
+POSTGRES_DB=attendancesystem
+
+# ── Consul ────────────────────────────────────────────────
+CONSUL_HTTP_PORT=8500
+CONSUL_DNS_PORT=8600
+
+# ── RabbitMQ ──────────────────────────────────────────────
+RABBITMQ_PORT=5672
+RABBITMQ_MANAGEMENT_PORT=15672
+RABBITMQ_VHOST=/
+RABBITMQ_USER=${RABBITMQ_USER}
+RABBITMQ_PASSWORD=${RABBITMQ_PASSWORD}
+
+# ── RabbitMQ (mensageria entre suite/users/reports) ──────
+# Um vhost por serviço: quem consome é dono do vhost onde a fila mora.
+# Usuário "owner" tem acesso total ao próprio vhost; "writer" só publica
+# (write-only) no vhost de um serviço vizinho — ver rabbitmq/definitions.json.
+RABBITMQ_SUITE_VHOST=${RABBITMQ_SUITE_VHOST}
+RABBITMQ_USERS_VHOST=${RABBITMQ_USERS_VHOST}
+RABBITMQ_REPORTS_VHOST=${RABBITMQ_REPORTS_VHOST}
+
+RABBITMQ_SUITE_OWNER_USER=${RABBITMQ_SUITE_OWNER_USER}
+RABBITMQ_SUITE_OWNER_PASSWORD=${RABBITMQ_SUITE_OWNER_PASSWORD}
+RABBITMQ_USERS_OWNER_USER=${RABBITMQ_USERS_OWNER_USER}
+RABBITMQ_USERS_OWNER_PASSWORD=${RABBITMQ_USERS_OWNER_PASSWORD}
+RABBITMQ_REPORTS_OWNER_USER=${RABBITMQ_REPORTS_OWNER_USER}
+RABBITMQ_REPORTS_OWNER_PASSWORD=${RABBITMQ_REPORTS_OWNER_PASSWORD}
+
+RABBITMQ_SUITE_WRITER_USER=${RABBITMQ_SUITE_WRITER_USER}
+RABBITMQ_SUITE_WRITER_PASSWORD=${RABBITMQ_SUITE_WRITER_PASSWORD}
+RABBITMQ_USERS_WRITER_USER=${RABBITMQ_USERS_WRITER_USER}
+RABBITMQ_USERS_WRITER_PASSWORD=${RABBITMQ_USERS_WRITER_PASSWORD}
+RABBITMQ_REPORTS_WRITER_USER=${RABBITMQ_REPORTS_WRITER_USER}
+RABBITMQ_REPORTS_WRITER_PASSWORD=${RABBITMQ_REPORTS_WRITER_PASSWORD}
+
 # ── Sistema Base ──────────────────────────────────────────
 SYSTEM_BASE_CONN=${SYSTEM_BASE_CONN}
 SYSTEM_BASE_HOST=${SYSTEM_BASE_HOST}
@@ -378,27 +465,111 @@ INTERNAL_HOST=${INTERNAL_HOST}
 EXTERNAL_HOST=${EXTERNAL_HOST}
 
 # ── Backend ───────────────────────────────────────────────
+BACKEND_SUITE_API_INTERNAL_PORT=${BACKEND_SUITE_API_INTERNAL_PORT}
+BACKEND_SUITE_API_EXTERNAL_PORT=${BACKEND_SUITE_API_EXTERNAL_PORT}
+
 BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT=${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}
 BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT=${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}
 
+BACKEND_PEOPLE_API_INTERNAL_PORT=${BACKEND_PEOPLE_API_INTERNAL_PORT}
+BACKEND_PEOPLE_API_EXTERNAL_PORT=${BACKEND_PEOPLE_API_EXTERNAL_PORT}
+
+BACKEND_ACCOUNT_API_INTERNAL_PORT=${BACKEND_ACCOUNT_API_INTERNAL_PORT}
+BACKEND_ACCOUNT_API_EXTERNAL_PORT=${BACKEND_ACCOUNT_API_EXTERNAL_PORT}
+
+BACKEND_REPORTS_API_INTERNAL_PORT=${BACKEND_REPORTS_API_INTERNAL_PORT}
+BACKEND_REPORTS_API_EXTERNAL_PORT=${BACKEND_REPORTS_API_EXTERNAL_PORT}
+
+BACKEND_USERS_API_INTERNAL_PORT=${BACKEND_USERS_API_INTERNAL_PORT}
+BACKEND_USERS_API_EXTERNAL_PORT=${BACKEND_USERS_API_EXTERNAL_PORT}
+
+BACKEND_TENANTS_API_INTERNAL_PORT=${BACKEND_TENANTS_API_INTERNAL_PORT}
+BACKEND_TENANTS_API_EXTERNAL_PORT=${BACKEND_TENANTS_API_EXTERNAL_PORT}
+
 BACKEND_ATTENDANCESYSTEM_API_APPLICATIONNAME=AttendanceSystem
 BACKEND_ATTENDANCESYSTEM_API_NAME=attendancesystem-api
 
 # ── Frontend ──────────────────────────────────────────────
+FRONTEND_SUITE_APP_INTERNAL_PORT=${FRONTEND_SUITE_APP_INTERNAL_PORT}
+FRONTEND_SUITE_APP_EXTERNAL_PORT=${FRONTEND_SUITE_APP_EXTERNAL_PORT}
+
 FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT=${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}
 FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT=${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}
 
+FRONTEND_PEOPLE_APP_INTERNAL_PORT=${FRONTEND_PEOPLE_APP_INTERNAL_PORT}
+FRONTEND_PEOPLE_APP_EXTERNAL_PORT=${FRONTEND_PEOPLE_APP_EXTERNAL_PORT}
+
+FRONTEND_ACCOUNT_APP_INTERNAL_PORT=${FRONTEND_ACCOUNT_APP_INTERNAL_PORT}
+FRONTEND_ACCOUNT_APP_EXTERNAL_PORT=${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT}
+
+FRONTEND_REPORTS_APP_INTERNAL_PORT=${FRONTEND_REPORTS_APP_INTERNAL_PORT}
+FRONTEND_REPORTS_APP_EXTERNAL_PORT=${FRONTEND_REPORTS_APP_EXTERNAL_PORT}
+
+FRONTEND_USERS_APP_INTERNAL_PORT=${FRONTEND_USERS_APP_INTERNAL_PORT}
+FRONTEND_USERS_APP_EXTERNAL_PORT=${FRONTEND_USERS_APP_EXTERNAL_PORT}
+
+FRONTEND_TENANTS_APP_INTERNAL_PORT=${FRONTEND_TENANTS_APP_INTERNAL_PORT}
+FRONTEND_TENANTS_APP_EXTERNAL_PORT=${FRONTEND_TENANTS_APP_EXTERNAL_PORT}
+
 # ── Keepalive ─────────────────────────────────────────────
 KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_BACKEND}
 KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_FRONTEND}
 
-# ── Identificador de instância ────────────────────────────
+KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_BACKEND_REPORTS}
-CONTAINER_POSTFIX=${CONTAINER_POSTFIX}
+KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_REPORTS}
-CONTAINER_NAME_SUFFIX=${CONTAINER_NAME_SUFFIX}
+
+KEEPALIVE_USERS_BACKEND_HOST=${KEEPALIVE_BACKEND_USERS}
+KEEPALIVE_USERS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_USERS}
+
+KEEPALIVE_TENANTS_BACKEND_HOST=${KEEPALIVE_BACKEND_TENANTS}
+KEEPALIVE_TENANTS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_TENANTS}
+
 EOF
   print_ok ".env.prod gerado"
 }
 
+# ══════════════════════════════════════════════════════════════
+# Gerar definitions.json do RabbitMQ (vhosts/usuários/permissões)
+# ══════════════════════════════════════════════════════════════
+
+generate_rabbitmq_definitions() {
+  local BASE_DIR="$INSTALL_DIR"
+  mkdir -p "$BASE_DIR/rabbitmq"
+
+  cat > "$BASE_DIR/rabbitmq/definitions.json" <<EOF
+{
+  "vhosts": [
+    {"name": "${RABBITMQ_SUITE_VHOST}"},
+    {"name": "${RABBITMQ_USERS_VHOST}"},
+    {"name": "${RABBITMQ_REPORTS_VHOST}"}
+  ],
+  "users": [
+    {"name": "${RABBITMQ_USER}", "password": "${RABBITMQ_PASSWORD}", "tags": ["administrator"]},
+    {"name": "${RABBITMQ_SUITE_OWNER_USER}", "password": "${RABBITMQ_SUITE_OWNER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_USERS_OWNER_USER}", "password": "${RABBITMQ_USERS_OWNER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_REPORTS_OWNER_USER}", "password": "${RABBITMQ_REPORTS_OWNER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_SUITE_WRITER_USER}", "password": "${RABBITMQ_SUITE_WRITER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_USERS_WRITER_USER}", "password": "${RABBITMQ_USERS_WRITER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_REPORTS_WRITER_USER}", "password": "${RABBITMQ_REPORTS_WRITER_PASSWORD}", "tags": []}
+  ],
+  "permissions": [
+    {"user": "${RABBITMQ_SUITE_OWNER_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_USERS_OWNER_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_REPORTS_OWNER_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+
+    {"user": "${RABBITMQ_SUITE_WRITER_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
+    {"user": "${RABBITMQ_USERS_WRITER_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
+    {"user": "${RABBITMQ_REPORTS_WRITER_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
+
+    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"}
+  ]
+}
+EOF
+  print_ok "rabbitmq/definitions.json gerado"
+}
+
 # ══════════════════════════════════════════════════════════════
 # Subir ambiente
 # ══════════════════════════════════════════════════════════════
@@ -414,12 +585,15 @@ start_environment() {
   echo -e "  ║     ✅  Instalação concluída com sucesso!    ║"
   echo -e "  ╚══════════════════════════════════════════════╝${NC}"
   echo ""
-  echo -e "  Menu do usuário: Monitoramento V1"
+  echo -e "  Acesse o sistema em:"
+  echo -e "  ${CYAN}${BOLD}  ${SYSTEM_BASE_CONN}${NC}"
+  echo -e "  Menu do usuário: Monitoramento (beta)"
   echo ""
   echo -e "  Comandos úteis (dentro da pasta ${BOLD}${INSTALL_DIR}${NC}):"
   echo -e "    ${BOLD}make install${NC} → sobe o projeto"
   echo -e "    ${BOLD}make update${NC}  → atualiza o projeto"
   echo -e "    ${BOLD}make app${NC}   → sobe apenas a aplicação"
+  echo -e "    ${BOLD}make infra${NC} → sobe apenas a infra (MongoDB, PostgreSQL, Consul, RabbitMQ)"
   echo -e "    ${BOLD}make nuke-project${NC}  → limpa o projeto"
   echo -e "    ${BOLD}make nuke${NC}  → limpa tudo (cuidado!)"
   echo ""
@@ -438,6 +612,7 @@ main() {
   show_summary        # resumo com menu de edição
 
   generate_envs
+  generate_rabbitmq_definitions
 
   if confirm "Deseja subir o ambiente agora?"; then
     start_environment

rabbitmq/definitions.conf

@@ -0,0 +1 @@
+management.load_definitions = /etc/rabbitmq/definitions.json