BETA-457 - ajustes na instalacao

Reviewed-on: #2
Reviewed-by: renato.ramos <renato.ramos@seventh.com.br>

Makefile

@@ -4,9 +4,8 @@ ENV_FILE = .env.$(ENV)
 
 PROJECT_NAME = attendancesystem-$(ENV)
 NETWORK_NAME = attendancesystem-network
-APP_SERVICES = suite-api users-api reports-api attendancesystem-api config-generator attendancesystem-app reports-app users-app suite-app
 
-.PHONY: infra app install update restart reset-network nuke nuke-project
+.PHONY: app install update reset-network nuke nuke-project
 
 # ===============================
 # 🧹 Reset Network
@@ -15,25 +14,6 @@ reset-network:
 	@echo "🧹 Removendo rede antiga (se existir)..."
 	-docker network rm $(NETWORK_NAME) 2>/dev/null || true
 
-# ===============================
-# 🏗 Subir apenas INFRA
-# ===============================
-infra: reset-network
-	@echo "📥 Baixando imagens de INFRA ($(PROJECT_NAME))..."
-	docker compose \
-		--project-name $(PROJECT_NAME) \
-		--env-file $(ENV_FILE) \
-		--profile infra \
-		-f $(COMPOSE_FILE) \
-		pull
-	@echo "🚀 Subindo apenas INFRA ($(PROJECT_NAME))..."
-	docker compose \
-		--project-name $(PROJECT_NAME) \
-		--env-file $(ENV_FILE) \
-		--profile infra \
-		-f $(COMPOSE_FILE) \
-		up -d --pull never
-
 # ===============================
 # 🧩 Subir apenas APP
 # ===============================
@@ -42,18 +22,16 @@ app:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
-		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		pull $(APP_SERVICES)
+		pull
 	@echo "🚀 Subindo apenas APP ($(PROJECT_NAME))..."
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
-		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		up -d --pull never --force-recreate $(APP_SERVICES)
+		up -d --pull never
 
 # ===============================
 # 🔥 Subir TUDO
@@ -63,7 +41,6 @@ install:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
-		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
 		pull
@@ -71,45 +48,14 @@ install:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
-		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		up -d --pull never --force-recreate
+		up -d --pull never
 
 # ===============================
-# 🔄 Reiniciar containers ativos
+# 🔄 Atualizar projeto
 # ===============================
-restart:
+update: nuke-project install
-	docker restart $$(docker ps -q)
-
-# ===============================
-# 🔄 Atualizar projeto (apenas APP)
-# ===============================
-update:
-	@echo "🛑 Parando containers do profile 'app' ($(PROJECT_NAME))..."
-	docker compose \
-		--project-name $(PROJECT_NAME) \
-		--env-file $(ENV_FILE) \
-		--profile infra \
-		--profile app \
-		-f $(COMPOSE_FILE) \
-		stop $(APP_SERVICES)
-
-	@echo "🗑️ Removendo containers do profile 'app' ($(PROJECT_NAME))..."
-	docker compose \
-		--project-name $(PROJECT_NAME) \
-		--env-file $(ENV_FILE) \
-		--profile infra \
-		--profile app \
-		-f $(COMPOSE_FILE) \
-		rm -f $(APP_SERVICES)
-
-	@echo "🖼️ Removendo imagens antigas do projeto (seventhltda)..."
-	- docker images --format '{{.Repository}}:{{.Tag}}' | grep '^seventhltda/' | xargs -r docker rmi -f 2>/dev/null || true
-
-	@echo "✅ Containers do profile 'app' removidos. Infraestrutura (dados) preservada."
-
-	$(MAKE) app
 
 # ===============================
 # 💣 Limpeza TOTAL
@@ -144,7 +90,6 @@ nuke-project:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
-		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
 		down --volumes --remove-orphans
@@ -153,4 +98,3 @@ nuke-project:
 	- docker images --format '{{.Repository}}:{{.Tag}}' | grep '^seventhltda/' | xargs -r docker rmi -f 2>/dev/null || true
 
 	@echo "✅ Projeto $(PROJECT_NAME) limpo (containers, volumes, rede e imagens)."
-	@echo "   Imagens de infraestrutura preservadas."

config.template.json

@@ -7,19 +7,15 @@
   },
   "urlLgpd": "https://lgpd.seventh.com.br/feedback?product=situator",
   "modules": {
-    "suite": "${FRONTEND_SUITE_URL}",
+    "suite": "",
     "attendance": "${FRONTEND_ATTENDANCE_URL}",
-    "account": "${FRONTEND_ACCOUNT_URL}",
+    "account": "",
-    "people": "${FRONTEND_PEOPLE_URL}",
+    "people": ""
-    "reports": "${FRONTEND_REPORTS_URL}",
-    "users": "${FRONTEND_USERS_URL}"
   },
   "api": {
-    "suite": "${BACKEND_SUITE_API_URL}",
+    "suite": "",
-    "people": "${BACKEND_PEOPLE_API_URL}",
+    "people": "",
-    "account": "${BACKEND_ACCOUNT_API_URL}",
+    "account": "",
-    "attendance": "${BACKEND_ATTENDANCE_API_URL}",
+    "attendance": "${BACKEND_ATTENDANCE_API_URL}"
-    "reports": "${BACKEND_REPORTS_API_URL}",
-    "users": "${BACKEND_USERS_API_URL}"
   }
 }

configure-host.sh

@@ -0,0 +1,360 @@
+#!/bin/bash
+
+# ==============================================================
+#  🛠️  Configure Host
+#  Configura a máquina host: serviço Docker, limite de log
+#  e arquivo de observabilidade. Pode ser executado em
+#  ambientes novos ou já instalados.
+#  Uso:
+#    bash configure-host.sh
+# ==============================================================
+
+if [ -t 0 ]; then
+  :
+else
+  exec < /dev/tty
+fi
+
+set -e
+
+# ─── Cores ────────────────────────────────────────────────────
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+CYAN='\033[0;36m'
+BOLD='\033[1m'
+DIM='\033[2m'
+NC='\033[0m'
+
+# ─── Sudo ─────────────────────────────────────────────────────
+SUDO=""
+[ "$EUID" -ne 0 ] && SUDO="sudo"
+
+_SUDO_REQUESTED=false
+request_sudo() {
+  [ "$_SUDO_REQUESTED" = "true" ] && return 0
+  [ -z "$SUDO" ] && return 0
+  echo ""
+  print_warn "Esta etapa requer permissões de superusuário."
+  if ! sudo -v; then
+    print_error "Não foi possível obter permissões de superusuário."
+    exit 1
+  fi
+  _SUDO_REQUESTED=true
+}
+
+# ─── Utilitários ──────────────────────────────────────────────
+
+print_banner() {
+  clear
+  echo -e "${CYAN}"
+  echo "  ╔══════════════════════════════════════════════╗"
+  echo "  ║      🐳  Docker Service Installer            ║"
+  echo "  ║    Registra o Docker como serviço systemd    ║"
+  echo "  ╚══════════════════════════════════════════════╝"
+  echo -e "${NC}"
+}
+
+print_step()  { echo -e "\n${BLUE}${BOLD}▶ $1${NC}"; }
+print_ok()    { echo -e "  ${GREEN}✔ $1${NC}"; }
+print_warn()  { echo -e "  ${YELLOW}⚠ $1${NC}"; }
+print_error() { echo -e "  ${RED}✖ $1${NC}"; }
+
+confirm() {
+  echo -ne "  ${BOLD}$1${NC} ${CYAN}[s/N]${NC}: "
+  read -r resp
+  [[ "$resp" =~ ^[sS]$ ]]
+}
+
+# ══════════════════════════════════════════════════════════════
+# Validar systemctl
+# ══════════════════════════════════════════════════════════════
+
+check_systemctl() {
+  print_step "Verificando systemctl..."
+
+  if ! command -v systemctl &>/dev/null; then
+    print_error "systemctl não encontrado. Este script requer systemd."
+    exit 1
+  fi
+
+  print_ok "systemctl encontrado ($(systemctl --version | head -1))"
+}
+
+# ══════════════════════════════════════════════════════════════
+# Validar Docker instalado
+# ══════════════════════════════════════════════════════════════
+
+check_docker_installed() {
+  print_step "Verificando instalação do Docker..."
+
+  if ! command -v docker &>/dev/null; then
+    print_error "Docker não encontrado. Instale o Docker antes de continuar."
+    echo -e "  ${DIM}Referência: https://docs.docker.com/engine/install/${NC}"
+    exit 1
+  fi
+
+  print_ok "Docker encontrado ($(docker --version))"
+}
+
+# ─── Diretório de instalação ──────────────────────────────────
+INSTALL_DIR="attendancesystem"
+
+# ══════════════════════════════════════════════════════════════
+# Carregar / inicializar .env.observability
+# ══════════════════════════════════════════════════════════════
+
+_observability_defaults() {
+  local env_file="$1"
+  cat > "$env_file" <<'EOF'
+SeventhLogs__CustomLevel__Warning__0=Microsoft.AspNetCore
+SeventhLogs__CustomLevel__Warning__1=Microsoft.AspNetCore.Hosting.Diagnostics
+SeventhLogs__CustomLevel__Warning__2=System.Net.Http.HttpClient.OtlpTraceExporter.ClientHandler
+SeventhLogs__CustomLevel__Warning__3=System.Net.Http.HttpClient.OtlpTraceExporter.LogicalHandler
+EOF
+}
+
+load_observability_env() {
+  local env_file="${INSTALL_DIR}/.env.observability"
+
+  if [ ! -f "$env_file" ]; then
+    _observability_defaults "$env_file"
+    print_ok ".env.observability criado com configurações padrão"
+    return
+  fi
+
+  print_warn "Configuração de observabilidade encontrada em ${env_file}"
+
+  if confirm "Deseja manter as configurações atuais?"; then
+    print_ok ".env.observability mantido sem alterações"
+    return
+  fi
+
+  if confirm "Não manter as configurações atuais do arquivo .env.observability vai redefinir para as configurações padrões, você realmente deseja fazer isso?"; then
+    print_ok ".env.observability mantido sem alterações"
+    return
+  fi  
+
+  _observability_defaults "$env_file"
+  print_ok ".env.observability redefinido para as configurações padrão"
+}
+# ══════════════════════════════════════════════════════════════
+# Flags de controle
+# ══════════════════════════════════════════════════════════════
+
+NEEDS_SERVICE_CONFIG=false
+NEEDS_LOG_CONFIG=false
+
+# ══════════════════════════════════════════════════════════════
+# Verificar status atual do serviço e configuração de log
+# ══════════════════════════════════════════════════════════════
+
+check_docker_service_status() {
+  print_step "Verificando status do serviço Docker..."
+
+  local enabled active
+  enabled=$(systemctl is-enabled docker 2>/dev/null || echo "disabled")
+  active=$(systemctl is-active docker 2>/dev/null || echo "inactive")
+
+  echo -e "  ${DIM}Habilitado no boot : ${NC}${BOLD}${enabled}${NC}"
+  echo -e "  ${DIM}Status atual       : ${NC}${BOLD}${active}${NC}"
+
+  if [[ "$enabled" != "enabled" || "$active" != "active" ]]; then
+    NEEDS_SERVICE_CONFIG=true
+  fi
+
+  local daemon_json="/etc/docker/daemon.json"
+  if [ -f "$daemon_json" ] && grep -q '"max-size"' "$daemon_json"; then
+    echo -e "  ${DIM}Limite de log      : ${NC}${GREEN}${BOLD}configurado${NC}"
+  else
+    echo -e "  ${DIM}Limite de log      : ${NC}${YELLOW}${BOLD}não configurado${NC}"
+    NEEDS_LOG_CONFIG=true
+  fi
+
+  if [[ "$NEEDS_SERVICE_CONFIG" == "false" && "$NEEDS_LOG_CONFIG" == "false" ]]; then
+    echo ""
+    print_ok "Docker já está registrado, rodando e com limite de log configurado."
+    print_ok "Nenhuma ação necessária."
+    echo ""
+    exit 0
+  fi
+}
+
+# ══════════════════════════════════════════════════════════════
+# Mostrar resumo antes de aplicar
+# ══════════════════════════════════════════════════════════════
+
+show_summary() {
+  echo ""
+  echo -e "${CYAN}${BOLD}  ┌──────────────────────────────────────────────────────────────┐"
+  echo -e "  │               Ações que serão executadas                     │"
+  echo -e "  └──────────────────────────────────────────────────────────────┘${NC}"
+  echo ""
+
+  local step=1
+
+  if [[ "$NEEDS_SERVICE_CONFIG" == "true" ]]; then
+    echo -e "  ${BOLD}${step}.${NC} Criar drop-in de política de restart:"
+    echo -e "     ${DIM}/etc/systemd/system/docker.service.d/restart-policy.conf${NC}"
+    echo -e "     ${DIM}→ Restart=always | RestartSec=5${NC}"
+    echo ""
+    step=$((step + 1))
+
+    echo -e "  ${BOLD}${step}.${NC} Recarregar o daemon do systemd"
+    echo -e "     ${DIM}→ systemctl daemon-reload${NC}"
+    echo ""
+    step=$((step + 1))
+
+    echo -e "  ${BOLD}${step}.${NC} Habilitar o Docker para iniciar com o SO"
+    echo -e "     ${DIM}→ systemctl enable docker${NC}"
+    echo ""
+    step=$((step + 1))
+
+    echo -e "  ${BOLD}${step}.${NC} Iniciar o serviço Docker imediatamente"
+    echo -e "     ${DIM}→ systemctl start docker${NC}"
+    echo ""
+    step=$((step + 1))
+  fi
+
+  if [[ "$NEEDS_LOG_CONFIG" == "true" ]]; then
+    echo -e "  ${BOLD}${step}.${NC} Configurar limite de log em /etc/docker/daemon.json"
+    echo -e "     ${DIM}→ log-driver: json-file | max-size: 100m | max-file: 5${NC}"
+    echo ""
+    step=$((step + 1))
+
+    echo -e "  ${BOLD}${step}.${NC} Reiniciar o Docker para aplicar a configuração de log"
+    echo -e "     ${DIM}→ systemctl restart docker${NC}"
+    echo ""
+  fi
+
+  echo -e "  ──────────────────────────────────────────────────────────────"
+  echo ""
+
+  if ! confirm "Deseja aplicar as configurações acima?"; then
+    echo ""
+    print_warn "Operação cancelada. Nenhuma alteração foi feita."
+    echo ""
+    exit 0
+  fi
+}
+
+# ══════════════════════════════════════════════════════════════
+# Aplicar configuração do serviço systemd
+# ══════════════════════════════════════════════════════════════
+
+configure_docker_service() {
+  [[ "$NEEDS_SERVICE_CONFIG" == "false" ]] && return 0
+
+  print_step "Configurando serviço Docker no systemd..."
+
+  request_sudo
+
+  local override_dir="/etc/systemd/system/docker.service.d"
+  $SUDO mkdir -p "$override_dir"
+
+  $SUDO tee "$override_dir/restart-policy.conf" > /dev/null <<'EOF'
+[Service]
+Restart=always
+RestartSec=5
+EOF
+  print_ok "Drop-in de restart criado em ${override_dir}/restart-policy.conf"
+
+  $SUDO systemctl daemon-reload
+  print_ok "systemctl daemon-reload executado"
+
+  $SUDO systemctl enable docker
+  print_ok "Docker habilitado para iniciar com o SO"
+
+  $SUDO systemctl start docker
+  print_ok "Docker iniciado"
+}
+
+# ══════════════════════════════════════════════════════════════
+# Configurar limite de log do Docker
+# ══════════════════════════════════════════════════════════════
+
+configure_docker_log_limit() {
+  [[ "$NEEDS_LOG_CONFIG" == "false" ]] && return 0
+
+  print_step "Configurando limite de log do Docker..."
+
+  request_sudo
+
+  local daemon_json="/etc/docker/daemon.json"
+
+  if [ -f "$daemon_json" ]; then
+    $SUDO cp "$daemon_json" "${daemon_json}.bak"
+    print_warn "Backup do daemon.json criado em ${daemon_json}.bak"
+  fi
+
+  $SUDO mkdir -p "$(dirname "$daemon_json")"
+
+  $SUDO tee "$daemon_json" > /dev/null <<'EOF'
+{
+  "log-driver": "json-file",
+  "log-opts": {
+    "max-size": "100m",
+    "max-file": "5"
+  }
+}
+EOF
+  print_ok "Limite de log configurado em ${daemon_json} (max-size: 100m, max-file: 5)"
+
+  $SUDO systemctl restart docker
+  print_ok "Docker reiniciado para aplicar a configuração de log"
+}
+
+# ══════════════════════════════════════════════════════════════
+# Validar resultado final
+# ══════════════════════════════════════════════════════════════
+
+verify_result() {
+  print_step "Validando configuração..."
+
+  if ! systemctl is-active --quiet docker; then
+    print_error "O serviço Docker não está ativo após a configuração."
+    echo -e "  ${DIM}Verifique os logs com: journalctl -u docker --no-pager -n 20${NC}"
+    exit 1
+  fi
+
+  local daemon_json="/etc/docker/daemon.json"
+  if [ ! -f "$daemon_json" ] || ! grep -q '"max-size"' "$daemon_json"; then
+    print_error "Limite de log não encontrado em ${daemon_json} após a configuração."
+    exit 1
+  fi
+
+  echo ""
+  echo -e "${GREEN}${BOLD}  ╔══════════════════════════════════════════════╗"
+  echo -e "  ║   ✅  Docker configurado com sucesso!        ║"
+  echo -e "  ╚══════════════════════════════════════════════╝${NC}"
+  echo ""
+  echo -e "  ${BOLD}Status final:${NC}"
+  echo -e "    Habilitado no boot : ${GREEN}$(systemctl is-enabled docker)${NC}"
+  echo -e "    Rodando agora      : ${GREEN}$(systemctl is-active docker)${NC}"
+  echo -e "    Política de restart: ${GREEN}always (RestartSec=5s)${NC}"
+  echo -e "    Limite de log      : ${GREEN}max-size=100m, max-file=5${NC}"
+  echo ""
+  echo -e "  ${DIM}Comandos úteis:"
+  echo -e "    systemctl status docker"
+  echo -e "    journalctl -u docker -f${NC}"
+  echo ""
+}
+
+# ══════════════════════════════════════════════════════════════
+# MAIN
+# ══════════════════════════════════════════════════════════════
+
+main() {
+  print_banner
+  check_systemctl
+  check_docker_installed
+  check_docker_service_status
+  show_summary
+  configure_docker_service
+  configure_docker_log_limit
+  verify_result
+  load_observability_env
+}
+
+main "$@"

docker-compose.yml

@@ -1,170 +1,8 @@
 services:
-  # ================= INFRA =================
-  mongodb:
-    image: mongo:${IMAGEM_LATEST}
-    profiles: ["infra"]
-    ports:
-      - "${MONGO_PORT}:27017"
-    volumes:
-      - mongodb_data:/data/db
-    networks:
-      - app-network
-    healthcheck:
-      test: echo 'db.runCommand("ping").ok' | mongosh localhost:27017/test --quiet
-      interval: 10s
-      timeout: 5s
-      retries: 5
-
-  consul:
-    image: hashicorp/consul:latest
-    profiles: ["infra"]
-    ports:
-      - "${CONSUL_HTTP_PORT}:8500"
-      - "${CONSUL_DNS_PORT}:8600/udp"
-    command: "agent -server -bootstrap -ui -client=0.0.0.0"
-    networks:
-      - app-network
-    healthcheck:
-      test: ["CMD", "consul", "members"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-
-  postgres:
-    image: postgres:16-alpine
-    profiles: ["infra"]
-    ports:
-      - "${POSTGRES_PORT}:5432"
-    environment:
-      - POSTGRES_USER=${POSTGRES_USER}
-      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
-      - POSTGRES_DB=${POSTGRES_DB}
-    volumes:
-      - postgres_data:/var/lib/postgresql/data
-    networks:
-      - app-network
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-
-  rabbitmq:
-    image: rabbitmq:4-management-alpine
-    profiles: ["infra"]
-    ports:
-      - "${RABBITMQ_PORT}:5672"
-      - "${RABBITMQ_MANAGEMENT_PORT}:15672"
-    environment:
-      - RABBITMQ_DEFAULT_USER=${RABBITMQ_USER}
-      - RABBITMQ_DEFAULT_PASS=${RABBITMQ_PASSWORD}
-      - RABBITMQ_DEFAULT_VHOST=${RABBITMQ_VHOST}
-    volumes:
-      - rabbitmq_data:/var/lib/rabbitmq
-      - ./rabbitmq/definitions.json:/etc/rabbitmq/definitions.json:ro
-      - ./rabbitmq/definitions.conf:/etc/rabbitmq/conf.d/20-definitions.conf:ro
-    networks:
-      - app-network
-    healthcheck:
-      test: ["CMD", "rabbitmq-diagnostics", "-q", "ping"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-
   # ================= BACKEND =================
 
-  suite-api:
-    image: ${DOCKER_REPO}/suite-api:${IMAGEM_UNSTABLE_LATEST}
-    profiles: ["app"]
-    ports:
-      - "${BACKEND_SUITE_API_INTERNAL_PORT}:${BACKEND_SUITE_API_INTERNAL_PORT}"
-    environment:
-      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT}
-      - MONGODB_CONNECTION_STRING=${MONGODB_CONNECTION_STRING}
-      - MONGODB_DATABASE=${MONGODB_DATABASE}
-      - SYSTEM_BASE_CONN=${SYSTEM_BASE_CONN}
-      - FRONTEND_CONN=${INTERNAL_HOST}:${FRONTEND_SUITE_APP_INTERNAL_PORT}
-      - ConsulSettings__Address=http://consul:8500
-      - Messaging__RabbitMQ__Host=rabbitmq
-      - Messaging__RabbitMQ__Port=5672
-      - Messaging__RabbitMQ__VirtualHost=${RABBITMQ_SUITE_VHOST}
-      - Messaging__RabbitMQ__Username=${RABBITMQ_SUITE_OWNER_USER}
-      - Messaging__RabbitMQ__Password=${RABBITMQ_SUITE_OWNER_PASSWORD}
-      - Messaging__RabbitMQ__Messaging__ServiceName=suite
-      - Messaging__RabbitMQ__Connections__users__Host=rabbitmq
-      - Messaging__RabbitMQ__Connections__users__Port=5672
-      - Messaging__RabbitMQ__Connections__users__VirtualHost=${RABBITMQ_USERS_VHOST}
-      - Messaging__RabbitMQ__Connections__users__Username=${RABBITMQ_USERS_WRITER_USER}
-      - Messaging__RabbitMQ__Connections__users__Password=${RABBITMQ_USERS_WRITER_PASSWORD}
-      - KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST}
-      - KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST}
-      - KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_REPORTS_BACKEND_HOST}
-      - KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_REPORTS_FRONTEND_HOST}
-      - KEEPALIVE_USERS_BACKEND_HOST=${KEEPALIVE_USERS_BACKEND_HOST}
-      - KEEPALIVE_USERS_FRONTEND_HOST=${KEEPALIVE_USERS_FRONTEND_HOST}
-      - KEEPALIVE_TENANTS_BACKEND_HOST=${KEEPALIVE_TENANTS_BACKEND_HOST}
-      - KEEPALIVE_TENANTS_FRONTEND_HOST=${KEEPALIVE_TENANTS_FRONTEND_HOST}
-    depends_on:
-      consul:
-        condition: service_healthy
-      rabbitmq:
-        condition: service_healthy
-    networks:
-      - app-network
-
-  users-api:
-    image: ${DOCKER_REPO}/sca-users-api:${IMAGEM_UNSTABLE_LATEST}
-    profiles: ["app"]
-    ports:
-      - "${BACKEND_USERS_API_INTERNAL_PORT}:${BACKEND_USERS_API_INTERNAL_PORT}"
-    environment:
-      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT}
-      - ConnectionStrings__UsersDb=Host=postgres;Port=5432;Database=seventh_users;Username=${POSTGRES_USER};Password=${POSTGRES_PASSWORD}
-      - MongoDbSettings__ConnectionString=mongodb://mongodb:27017
-      - ConsulSettings__Address=http://consul:8500
-      - Messaging__RabbitMQ__Host=rabbitmq
-      - Messaging__RabbitMQ__Port=5672
-      - Messaging__RabbitMQ__VirtualHost=${RABBITMQ_USERS_VHOST}
-      - Messaging__RabbitMQ__Username=${RABBITMQ_USERS_OWNER_USER}
-      - Messaging__RabbitMQ__Password=${RABBITMQ_USERS_OWNER_PASSWORD}
-      - Messaging__RabbitMQ__Messaging__ServiceName=users
-      - Messaging__RabbitMQ__Connections__suite__Host=rabbitmq
-      - Messaging__RabbitMQ__Connections__suite__Port=5672
-      - Messaging__RabbitMQ__Connections__suite__VirtualHost=${RABBITMQ_SUITE_VHOST}
-      - Messaging__RabbitMQ__Connections__suite__Username=${RABBITMQ_SUITE_WRITER_USER}
-      - Messaging__RabbitMQ__Connections__suite__Password=${RABBITMQ_SUITE_WRITER_PASSWORD}
-    depends_on:
-      postgres:
-        condition: service_healthy
-      mongodb:
-        condition: service_healthy
-      consul:
-        condition: service_healthy
-      rabbitmq:
-        condition: service_healthy
-    networks:
-      - app-network
-
-  reports-api:
-    image: ${DOCKER_REPO}/sca-reports-api:${IMAGEM_UNSTABLE_LATEST}
-    profiles: ["app"]
-    ports:
-      - "${BACKEND_REPORTS_API_INTERNAL_PORT}:${BACKEND_REPORTS_API_INTERNAL_PORT}"
-    environment:
-      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT}
-      - MONGODB_CONNECTION_STRING=${MONGODB_CONNECTION_STRING}
-      - MONGODB_DATABASE=${MONGODB_DATABASE}
-      - SystemBaseConn=${SYSTEM_BASE_CONN}
-      - FRONTEND_CONN=${INTERNAL_HOST}:${FRONTEND_REPORTS_APP_INTERNAL_PORT}
-      - KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST}
-      - KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST}
-      - KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_REPORTS_BACKEND_HOST}
-      - KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_REPORTS_FRONTEND_HOST}
-    networks:
-      - app-network
-
   attendancesystem-api:
-    image: ${DOCKER_REPO}/backend-attendance-system-api:${IMAGEM_UNSTABLE_LATEST}
+    image: ${DOCKER_REPO}/backend-attendance-system-api:${IMAGEM_RELEASE}
     profiles: ["app"]
     ports:
       - "${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}:${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}"
@@ -172,6 +10,9 @@ services:
       - SYSBASE_URL=${SYSTEM_BASE_CONN}
       - SystemBaseConn=${SYSTEM_BASE_CONN}
       - FrotendConn=${EXTERNAL_HOST}:${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}
+    env_file:
+      - path: .env.observability
+        required: false
     networks:
       - app-network
 
@@ -190,12 +31,6 @@ services:
       - BACKEND_ATTENDANCE_API_URL=${EXTERNAL_HOST}:${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}
       - BACKEND_PEOPLE_API_URL=${EXTERNAL_HOST}:${BACKEND_PEOPLE_API_EXTERNAL_PORT}
       - BACKEND_ACCOUNT_API_URL=${EXTERNAL_HOST}:${BACKEND_ACCOUNT_API_EXTERNAL_PORT}
-      - BACKEND_REPORTS_API_URL=${EXTERNAL_HOST}:${BACKEND_REPORTS_API_EXTERNAL_PORT}
-      - BACKEND_USERS_API_URL=${EXTERNAL_HOST}:${BACKEND_USERS_API_EXTERNAL_PORT}
-      - BACKEND_TENANTS_API_URL=${EXTERNAL_HOST}:${BACKEND_TENANTS_API_EXTERNAL_PORT}
-      - FRONTEND_REPORTS_URL=${EXTERNAL_HOST}:${FRONTEND_REPORTS_APP_EXTERNAL_PORT}
-      - FRONTEND_USERS_URL=${EXTERNAL_HOST}:${FRONTEND_USERS_APP_EXTERNAL_PORT}
-      - FRONTEND_TENANTS_URL=${EXTERNAL_HOST}:${FRONTEND_TENANTS_APP_EXTERNAL_PORT}
     command: >
       sh -c "apk add --no-cache gettext &&
             envsubst < /config.template.json > /output/config.json &&
@@ -222,76 +57,9 @@ services:
       config-generator:
         condition: service_completed_successfully
 
-  reports-app:
-    image: ${DOCKER_REPO}/reports-app:${IMAGEM_UNSTABLE_LATEST}
-    profiles: ["app"]
-    volumes:
-      - config-volume:/config-inject:ro
-    entrypoint: >
-      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
-             nginx -g 'daemon off;'"
-    ports:
-      - "${FRONTEND_REPORTS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
-    networks:
-      - app-network
-    depends_on:
-      config-generator:
-        condition: service_completed_successfully
-
-  users-app:
-    image: ${DOCKER_REPO}/users-app:${IMAGEM_UNSTABLE_LATEST}
-    profiles: ["app"]
-    volumes:
-      - config-volume:/config-inject:ro
-    entrypoint: >
-      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
-             nginx -g 'daemon off;'"
-    ports:
-      - "${FRONTEND_USERS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
-    networks:
-      - app-network
-    depends_on:
-      config-generator:
-        condition: service_completed_successfully
-
-  tenants-app:
-    image: ${DOCKER_REPO}/tenants-app:${IMAGEM_UNSTABLE_LATEST}
-    profiles: ["app"]
-    volumes:
-      - config-volume:/config-inject:ro
-    entrypoint: >
-      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
-             nginx -g 'daemon off;'"
-    ports:
-      - "${FRONTEND_TENANTS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
-    networks:
-      - app-network
-    depends_on:
-      config-generator:
-        condition: service_completed_successfully
-
-  suite-app:
-    image: ${DOCKER_REPO}/suite-app:${IMAGEM_UNSTABLE_LATEST}
-    profiles: ["app"]
-    volumes:
-      - config-volume:/config-inject:ro
-    entrypoint: >
-      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
-             nginx -g 'daemon off;'"
-    ports:
-      - "${FRONTEND_SUITE_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
-    networks:
-      - app-network
-    depends_on:
-      config-generator:
-        condition: service_completed_successfully
-
 networks:
   app-network:
     name: attendancesystem-network
 
 volumes:
-  mongodb_data:
-  postgres_data:
-  rabbitmq_data:
   config-volume:

install.sh

@@ -4,7 +4,7 @@
 #  🚀 Instalador - AttendanceSystem
 #  Uso:
 #    bash <(curl -fsSL \
-#      "https://git.seventh.com.br/seventh.p7/attendance-system.install/raw/branch/feature%2FSVTH-575---install-users/install.sh")
+#      "https://git.seventh.com.br/seventh.p7/attendance-system.install/raw/branch/release%2FV1.4/install.sh")
 # ==============================================================
 
 # ── Redireciona stdin para o terminal quando rodado via curl | bash ──
@@ -26,34 +26,29 @@ BOLD='\033[1m'
 DIM='\033[2m'
 NC='\033[0m'
 
+# ─── Sudo ─────────────────────────────────────────────────────
+SUDO=""
+[ "$EUID" -ne 0 ] && SUDO="sudo"
+
+_SUDO_REQUESTED=false
+request_sudo() {
+  [ "$_SUDO_REQUESTED" = "true" ] && return 0
+  [ -z "$SUDO" ] && return 0
+  echo ""
+  print_warn "Esta etapa requer permissões de superusuário."
+  if ! sudo -v; then
+    print_error "Não foi possível obter permissões de superusuário."
+    exit 1
+  fi
+  _SUDO_REQUESTED=true
+}
+
 # ─── Repositório Git ──────────────────────────────────────────
 INSTALL_DIR="attendancesystem"
-BRANCH="${BRANCH:-feature/SVTH-575---install-users}"
+BRANCH="${BRANCH:-release/V1.4}"
 ENV_FILE=""
 GIT_REPO="https://git.seventh.com.br/seventh.p7/attendance-system.install.git"
 
-# ─── RabbitMQ (mensageria entre suite/users/reports) ──────────
-# Um vhost por serviço: quem consome é dono do vhost onde a fila mora.
-# Usuário "owner" tem acesso total ao próprio vhost; "writer" só publica
-# (write-only) no vhost de um serviço vizinho — ver rabbitmq/definitions.json.
-RABBITMQ_SUITE_VHOST="suite"
-RABBITMQ_USERS_VHOST="users"
-RABBITMQ_REPORTS_VHOST="reports"
-
-RABBITMQ_SUITE_OWNER_USER="suite-owner"
-RABBITMQ_SUITE_OWNER_PASSWORD="suite-owner-secret"
-RABBITMQ_USERS_OWNER_USER="users-owner"
-RABBITMQ_USERS_OWNER_PASSWORD="users-owner-secret"
-RABBITMQ_REPORTS_OWNER_USER="reports-owner"
-RABBITMQ_REPORTS_OWNER_PASSWORD="reports-owner-secret"
-
-RABBITMQ_SUITE_WRITER_USER="suite-writer"
-RABBITMQ_SUITE_WRITER_PASSWORD="suite-writer-secret"
-RABBITMQ_USERS_WRITER_USER="users-writer"
-RABBITMQ_USERS_WRITER_PASSWORD="users-writer-secret"
-RABBITMQ_REPORTS_WRITER_USER="reports-writer"
-RABBITMQ_REPORTS_WRITER_PASSWORD="reports-writer-secret"
-
 # ══════════════════════════════════════════════════════════════
 # Utilitários
 # ══════════════════════════════════════════════════════════════
@@ -161,6 +156,89 @@ check_deps() {
   print_ok "Todas as dependências OK"
 }
 
+# ══════════════════════════════════════════════════════════════
+# Configurar limite de log do Docker
+# ══════════════════════════════════════════════════════════════
+
+configure_docker_log_limit() {
+  print_step "Configurando limite de log do Docker..."
+
+  local daemon_json="/etc/docker/daemon.json"
+
+  if [ -f "$daemon_json" ] && grep -q '"max-size"' "$daemon_json"; then
+    print_ok "Limite de log já configurado em ${daemon_json}"
+    return 0
+  fi
+
+  request_sudo
+
+  if [ -f "$daemon_json" ]; then
+    $SUDO cp "$daemon_json" "${daemon_json}.bak"
+    print_warn "Backup do daemon.json criado em ${daemon_json}.bak"
+  fi
+
+  $SUDO mkdir -p "$(dirname "$daemon_json")"
+
+  $SUDO tee "$daemon_json" > /dev/null <<'EOF'
+{
+  "log-driver": "json-file",
+  "log-opts": {
+    "max-size": "100m",
+    "max-file": "5"
+  }
+}
+EOF
+  print_ok "Limite de log configurado em ${daemon_json} (max-size: 100m, max-file: 5)"
+
+  if systemctl is-active --quiet docker; then
+    $SUDO systemctl restart docker
+    print_ok "Docker reiniciado para aplicar a configuração de log"
+  fi
+}
+
+# ══════════════════════════════════════════════════════════════
+# Garantir Docker como serviço systemd
+# ══════════════════════════════════════════════════════════════
+
+ensure_docker_service() {
+  print_step "Verificando serviço do Docker no systemd..."
+
+  if ! command -v systemctl &>/dev/null; then
+    print_error "systemctl não encontrado. Este instalador requer systemd."
+    exit 1
+  fi
+  print_ok "systemctl encontrado"
+
+  if systemctl is-active --quiet docker; then
+    print_ok "Docker já está rodando como serviço systemd"
+    return 0
+  fi
+
+  print_warn "Docker não está ativo como serviço. Configurando..."
+
+  request_sudo
+
+  local override_dir="/etc/systemd/system/docker.service.d"
+  $SUDO mkdir -p "$override_dir"
+  $SUDO tee "$override_dir/restart-policy.conf" > /dev/null <<'EOF'
+[Service]
+Restart=always
+RestartSec=5
+EOF
+
+  $SUDO systemctl daemon-reload
+  $SUDO systemctl enable docker
+  $SUDO systemctl start docker
+
+  if systemctl is-active --quiet docker; then
+    print_ok "Docker habilitado e iniciado como serviço systemd"
+    print_ok "Docker iniciará automaticamente com o SO e será reiniciado se cair"
+  else
+    print_error "Falha ao iniciar o serviço docker. Verifique com: journalctl -u docker"
+    exit 1
+  fi
+}
+
 # ══════════════════════════════════════════════════════════════
 # Clonar / atualizar repositório
 # ══════════════════════════════════════════════════════════════
@@ -181,6 +259,12 @@ clone_repo() {
     print_ok "Arquivos baixados em: $(pwd)/${INSTALL_DIR}"
   fi
 
+  if [ -f "$INSTALL_DIR/configure-host.sh" ]; then
+    cp "$INSTALL_DIR/configure-host.sh" ./configure-host.sh
+    chmod +x ./configure-host.sh
+    print_ok "configure-host.sh disponível neste diretório"
+  fi
+
   ENV_FILE="$INSTALL_DIR/.env.prod"
 }
 
@@ -243,46 +327,16 @@ collect_system_base() {
 
 collect_internal_ports() {
   print_section "3. Portas Internas (rede local)"
-  ask BACKEND_SUITE_API_INTERNAL_PORT             "Backend Suite API"             "${BACKEND_SUITE_API_INTERNAL_PORT:-10101}"
-  ask BACKEND_PEOPLE_API_INTERNAL_PORT            "Backend People API"            "${BACKEND_PEOPLE_API_INTERNAL_PORT:-10100}"
   ask BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT  "Backend AttendanceSystem API"  "${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT:-10102}"
-  ask BACKEND_ACCOUNT_API_INTERNAL_PORT           "Backend Account API"           "${BACKEND_ACCOUNT_API_INTERNAL_PORT:-10103}"
-  ask BACKEND_REPORTS_API_INTERNAL_PORT           "Backend Reports API"           "${BACKEND_REPORTS_API_INTERNAL_PORT:-10105}"
-  ask BACKEND_USERS_API_INTERNAL_PORT             "Backend Users API"             "${BACKEND_USERS_API_INTERNAL_PORT:-10109}"
-  ask BACKEND_TENANTS_API_INTERNAL_PORT           "Backend Tenants API"           "${BACKEND_TENANTS_API_INTERNAL_PORT:-10110}"
-  ask FRONTEND_SUITE_APP_INTERNAL_PORT            "Frontend Suite"                "${FRONTEND_SUITE_APP_INTERNAL_PORT:-4200}"
-  ask FRONTEND_PEOPLE_APP_INTERNAL_PORT           "Frontend People"               "${FRONTEND_PEOPLE_APP_INTERNAL_PORT:-4201}"
   ask FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT "Frontend AttendanceSystem"     "${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT:-4202}"
-  ask FRONTEND_ACCOUNT_APP_INTERNAL_PORT          "Frontend Account"              "${FRONTEND_ACCOUNT_APP_INTERNAL_PORT:-4203}"
-  ask FRONTEND_REPORTS_APP_INTERNAL_PORT          "Frontend Reports"              "${FRONTEND_REPORTS_APP_INTERNAL_PORT:-4205}"
-  ask FRONTEND_USERS_APP_INTERNAL_PORT            "Frontend Users"                "${FRONTEND_USERS_APP_INTERNAL_PORT:-4209}"
-  ask FRONTEND_TENANTS_APP_INTERNAL_PORT          "Frontend Tenants"              "${FRONTEND_TENANTS_APP_INTERNAL_PORT:-4210}"
 }
 
 collect_external_ports() {
   print_section "4. Portas Externas (NAT/acesso remoto)"
   echo -e "  ${DIM}Pressione ENTER para usar a mesma porta interna.${NC}\n"
 
-  ask BACKEND_SUITE_API_EXTERNAL_PORT             "Backend Suite API"             "${BACKEND_SUITE_API_EXTERNAL_PORT:-$BACKEND_SUITE_API_INTERNAL_PORT}"
-  ask BACKEND_PEOPLE_API_EXTERNAL_PORT            "Backend People API"            "${BACKEND_PEOPLE_API_EXTERNAL_PORT:-$BACKEND_PEOPLE_API_INTERNAL_PORT}"
   ask BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT  "Backend AttendanceSystem API"  "${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT:-$BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}"
-  ask BACKEND_ACCOUNT_API_EXTERNAL_PORT           "Backend Account API"           "${BACKEND_ACCOUNT_API_EXTERNAL_PORT:-$BACKEND_ACCOUNT_API_INTERNAL_PORT}"
-  ask BACKEND_REPORTS_API_EXTERNAL_PORT           "Backend Reports API"           "${BACKEND_REPORTS_API_EXTERNAL_PORT:-$BACKEND_REPORTS_API_INTERNAL_PORT}"
-  ask BACKEND_USERS_API_EXTERNAL_PORT             "Backend Users API"             "${BACKEND_USERS_API_EXTERNAL_PORT:-$BACKEND_USERS_API_INTERNAL_PORT}"
-  ask BACKEND_TENANTS_API_EXTERNAL_PORT           "Backend Tenants API"           "${BACKEND_TENANTS_API_EXTERNAL_PORT:-$BACKEND_TENANTS_API_INTERNAL_PORT}"
-  ask FRONTEND_SUITE_APP_EXTERNAL_PORT            "Frontend Suite"                "${FRONTEND_SUITE_APP_EXTERNAL_PORT:-$FRONTEND_SUITE_APP_INTERNAL_PORT}"
-  ask FRONTEND_PEOPLE_APP_EXTERNAL_PORT           "Frontend People"               "${FRONTEND_PEOPLE_APP_EXTERNAL_PORT:-$FRONTEND_PEOPLE_APP_INTERNAL_PORT}"
   ask FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT "Frontend AttendanceSystem"     "${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT:-$FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}"
-  ask FRONTEND_ACCOUNT_APP_EXTERNAL_PORT          "Frontend Account"              "${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT:-$FRONTEND_ACCOUNT_APP_INTERNAL_PORT}"
-  ask FRONTEND_REPORTS_APP_EXTERNAL_PORT          "Frontend Reports"              "${FRONTEND_REPORTS_APP_EXTERNAL_PORT:-$FRONTEND_REPORTS_APP_INTERNAL_PORT}"
-  ask FRONTEND_USERS_APP_EXTERNAL_PORT            "Frontend Users"                "${FRONTEND_USERS_APP_EXTERNAL_PORT:-$FRONTEND_USERS_APP_INTERNAL_PORT}"
-  ask FRONTEND_TENANTS_APP_EXTERNAL_PORT          "Frontend Tenants"              "${FRONTEND_TENANTS_APP_EXTERNAL_PORT:-$FRONTEND_TENANTS_APP_INTERNAL_PORT}"
-}
-
-collect_rabbitmq() {
-  print_section "5. RabbitMQ"
-  ask RABBITMQ_USER     "Usuário admin do RabbitMQ"  "${RABBITMQ_USER:-admin}"
-  ask RABBITMQ_PASSWORD "Senha admin do RabbitMQ"     "${RABBITMQ_PASSWORD:-admin}"
 }
 
 # ══════════════════════════════════════════════════════════════
@@ -304,24 +358,10 @@ collect_config() {
   else
     collect_internal_ports
     # Copia internas → externas automaticamente
-    BACKEND_SUITE_API_EXTERNAL_PORT="$BACKEND_SUITE_API_INTERNAL_PORT"
-    BACKEND_PEOPLE_API_EXTERNAL_PORT="$BACKEND_PEOPLE_API_INTERNAL_PORT"
     BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT="$BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT"
-    BACKEND_ACCOUNT_API_EXTERNAL_PORT="$BACKEND_ACCOUNT_API_INTERNAL_PORT"
-    BACKEND_REPORTS_API_EXTERNAL_PORT="$BACKEND_REPORTS_API_INTERNAL_PORT"
-    BACKEND_USERS_API_EXTERNAL_PORT="$BACKEND_USERS_API_INTERNAL_PORT"
-    BACKEND_TENANTS_API_EXTERNAL_PORT="$BACKEND_TENANTS_API_INTERNAL_PORT"
-    FRONTEND_SUITE_APP_EXTERNAL_PORT="$FRONTEND_SUITE_APP_INTERNAL_PORT"
-    FRONTEND_PEOPLE_APP_EXTERNAL_PORT="$FRONTEND_PEOPLE_APP_INTERNAL_PORT"
     FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT="$FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT"
-    FRONTEND_ACCOUNT_APP_EXTERNAL_PORT="$FRONTEND_ACCOUNT_APP_INTERNAL_PORT"
-    FRONTEND_REPORTS_APP_EXTERNAL_PORT="$FRONTEND_REPORTS_APP_INTERNAL_PORT"
-    FRONTEND_USERS_APP_EXTERNAL_PORT="$FRONTEND_USERS_APP_INTERNAL_PORT"
-    FRONTEND_TENANTS_APP_EXTERNAL_PORT="$FRONTEND_TENANTS_APP_INTERNAL_PORT"
     print_ok "Portas externas definidas iguais às internas."
   fi
-
-  collect_rabbitmq
 }
 
 # ══════════════════════════════════════════════════════════════
@@ -344,16 +384,12 @@ show_summary() {
     echo -e "      Porta   : ${BOLD}${SYSTEM_BASE_PORT}${NC}"
     echo ""
     echo -e "  ${BOLD}[3] Portas Internas${NC}"
-    echo -e "      Backend  Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${BACKEND_SUITE_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_PEOPLE_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ACCOUNT_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_REPORTS_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_USERS_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_TENANTS_API_INTERNAL_PORT}${NC}"
+    echo -e "      Backend  Attendance : ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}${NC}"
-    echo -e "      Frontend Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${FRONTEND_SUITE_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_PEOPLE_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ACCOUNT_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_REPORTS_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_USERS_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_TENANTS_APP_INTERNAL_PORT}${NC}"
+    echo -e "      Frontend Attendance : ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}${NC}"
     echo ""
     echo -e "  ${BOLD}[4] Portas Externas${NC}"
-    echo -e "      Backend  Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${BACKEND_SUITE_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_PEOPLE_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ACCOUNT_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_REPORTS_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_USERS_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_TENANTS_API_EXTERNAL_PORT}${NC}"
+    echo -e "      Backend  Attendance : ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}${NC}"
-    echo -e "      Frontend Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${FRONTEND_SUITE_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_PEOPLE_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_REPORTS_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_USERS_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_TENANTS_APP_EXTERNAL_PORT}${NC}"
+    echo -e "      Frontend Attendance : ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}${NC}"
-    echo ""
-    echo -e "  ${BOLD}[5] RabbitMQ${NC}"
-    echo -e "      Usuário : ${BOLD}${RABBITMQ_USER}${NC}"
-    echo -e "      Senha   : ${BOLD}********${NC}"
     echo ""
     echo -e "  ──────────────────────────────────────────────────────────────"
     echo -e "  ${GREEN}${BOLD}[C]${NC} Confirmar e continuar   ${RED}${BOLD}[X]${NC} Cancelar instalação"
@@ -367,7 +403,6 @@ show_summary() {
       2) collect_system_base ;;
       3) collect_internal_ports ;;
       4) collect_external_ports ;;
-      5) collect_rabbitmq ;;
       C) break ;;
       X)
         echo ""
@@ -375,7 +410,7 @@ show_summary() {
         exit 0
         ;;
       *)
-        print_warn "Opção inválida. Digite 1-5, C ou X."
+        print_warn "Opção inválida. Digite 1-4, C ou X."
         ;;
     esac
   done
@@ -390,71 +425,17 @@ generate_envs() {
 
   local BASE_DIR="$INSTALL_DIR"
   local SYSTEM_BASE_CONN="${SYSTEM_BASE_HOST}:${SYSTEM_BASE_PORT}"
-
   local KEEPALIVE_BACKEND="${EXTERNAL_HOST}:${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}"
   local KEEPALIVE_FRONTEND="${EXTERNAL_HOST}:${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}"
 
-  local KEEPALIVE_BACKEND_REPORTS="${EXTERNAL_HOST}:${BACKEND_REPORTS_API_EXTERNAL_PORT}"
-  local KEEPALIVE_FRONTEND_REPORTS="${EXTERNAL_HOST}:${FRONTEND_REPORTS_APP_EXTERNAL_PORT}"
-
-  local KEEPALIVE_BACKEND_USERS="${EXTERNAL_HOST}:${BACKEND_USERS_API_EXTERNAL_PORT}"
-  local KEEPALIVE_FRONTEND_USERS="${EXTERNAL_HOST}:${FRONTEND_USERS_APP_EXTERNAL_PORT}"
-
-  local KEEPALIVE_BACKEND_TENANTS="${EXTERNAL_HOST}:${BACKEND_TENANTS_API_EXTERNAL_PORT}"
-  local KEEPALIVE_FRONTEND_TENANTS="${EXTERNAL_HOST}:${FRONTEND_TENANTS_APP_EXTERNAL_PORT}"
-
   cat > "$BASE_DIR/.env.prod" <<EOF
 ASPNETCORE_ENVIRONMENT=Production
 DOCKER_REPO=seventhltda
 IMAGEM_LATEST=latest
 IMAGEM_UNSTABLE_LATEST=unstable-latest
-IMAGEM_RELEASE=2.0
+IMAGEM_RELEASE=rc-1.4
 NGINX_DEFAULT_PORT=80
 
-# ── MongoDB ───────────────────────────────────────────────
-MONGO_PORT=27017
-MONGODB_CONNECTION_STRING=mongodb://mongodb:27017/suitedb
-MONGODB_DATABASE=suitedb
-
-# ── PostgreSQL ────────────────────────────────────────────
-POSTGRES_PORT=5432
-POSTGRES_USER=postgres
-POSTGRES_PASSWORD=postgres
-POSTGRES_DB=attendancesystem
-
-# ── Consul ────────────────────────────────────────────────
-CONSUL_HTTP_PORT=8500
-CONSUL_DNS_PORT=8600
-
-# ── RabbitMQ ──────────────────────────────────────────────
-RABBITMQ_PORT=5672
-RABBITMQ_MANAGEMENT_PORT=15672
-RABBITMQ_VHOST=/
-RABBITMQ_USER=${RABBITMQ_USER}
-RABBITMQ_PASSWORD=${RABBITMQ_PASSWORD}
-
-# ── RabbitMQ (mensageria entre suite/users/reports) ──────
-# Um vhost por serviço: quem consome é dono do vhost onde a fila mora.
-# Usuário "owner" tem acesso total ao próprio vhost; "writer" só publica
-# (write-only) no vhost de um serviço vizinho — ver rabbitmq/definitions.json.
-RABBITMQ_SUITE_VHOST=${RABBITMQ_SUITE_VHOST}
-RABBITMQ_USERS_VHOST=${RABBITMQ_USERS_VHOST}
-RABBITMQ_REPORTS_VHOST=${RABBITMQ_REPORTS_VHOST}
-
-RABBITMQ_SUITE_OWNER_USER=${RABBITMQ_SUITE_OWNER_USER}
-RABBITMQ_SUITE_OWNER_PASSWORD=${RABBITMQ_SUITE_OWNER_PASSWORD}
-RABBITMQ_USERS_OWNER_USER=${RABBITMQ_USERS_OWNER_USER}
-RABBITMQ_USERS_OWNER_PASSWORD=${RABBITMQ_USERS_OWNER_PASSWORD}
-RABBITMQ_REPORTS_OWNER_USER=${RABBITMQ_REPORTS_OWNER_USER}
-RABBITMQ_REPORTS_OWNER_PASSWORD=${RABBITMQ_REPORTS_OWNER_PASSWORD}
-
-RABBITMQ_SUITE_WRITER_USER=${RABBITMQ_SUITE_WRITER_USER}
-RABBITMQ_SUITE_WRITER_PASSWORD=${RABBITMQ_SUITE_WRITER_PASSWORD}
-RABBITMQ_USERS_WRITER_USER=${RABBITMQ_USERS_WRITER_USER}
-RABBITMQ_USERS_WRITER_PASSWORD=${RABBITMQ_USERS_WRITER_PASSWORD}
-RABBITMQ_REPORTS_WRITER_USER=${RABBITMQ_REPORTS_WRITER_USER}
-RABBITMQ_REPORTS_WRITER_PASSWORD=${RABBITMQ_REPORTS_WRITER_PASSWORD}
-
 # ── Sistema Base ──────────────────────────────────────────
 SYSTEM_BASE_CONN=${SYSTEM_BASE_CONN}
 SYSTEM_BASE_HOST=${SYSTEM_BASE_HOST}
@@ -465,109 +446,68 @@ INTERNAL_HOST=${INTERNAL_HOST}
 EXTERNAL_HOST=${EXTERNAL_HOST}
 
 # ── Backend ───────────────────────────────────────────────
-BACKEND_SUITE_API_INTERNAL_PORT=${BACKEND_SUITE_API_INTERNAL_PORT}
-BACKEND_SUITE_API_EXTERNAL_PORT=${BACKEND_SUITE_API_EXTERNAL_PORT}
-
 BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT=${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}
 BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT=${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}
 
-BACKEND_PEOPLE_API_INTERNAL_PORT=${BACKEND_PEOPLE_API_INTERNAL_PORT}
-BACKEND_PEOPLE_API_EXTERNAL_PORT=${BACKEND_PEOPLE_API_EXTERNAL_PORT}
-
-BACKEND_ACCOUNT_API_INTERNAL_PORT=${BACKEND_ACCOUNT_API_INTERNAL_PORT}
-BACKEND_ACCOUNT_API_EXTERNAL_PORT=${BACKEND_ACCOUNT_API_EXTERNAL_PORT}
-
-BACKEND_REPORTS_API_INTERNAL_PORT=${BACKEND_REPORTS_API_INTERNAL_PORT}
-BACKEND_REPORTS_API_EXTERNAL_PORT=${BACKEND_REPORTS_API_EXTERNAL_PORT}
-
-BACKEND_USERS_API_INTERNAL_PORT=${BACKEND_USERS_API_INTERNAL_PORT}
-BACKEND_USERS_API_EXTERNAL_PORT=${BACKEND_USERS_API_EXTERNAL_PORT}
-
-BACKEND_TENANTS_API_INTERNAL_PORT=${BACKEND_TENANTS_API_INTERNAL_PORT}
-BACKEND_TENANTS_API_EXTERNAL_PORT=${BACKEND_TENANTS_API_EXTERNAL_PORT}
-
 BACKEND_ATTENDANCESYSTEM_API_APPLICATIONNAME=AttendanceSystem
 BACKEND_ATTENDANCESYSTEM_API_NAME=attendancesystem-api
 
 # ── Frontend ──────────────────────────────────────────────
-FRONTEND_SUITE_APP_INTERNAL_PORT=${FRONTEND_SUITE_APP_INTERNAL_PORT}
-FRONTEND_SUITE_APP_EXTERNAL_PORT=${FRONTEND_SUITE_APP_EXTERNAL_PORT}
-
 FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT=${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}
 FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT=${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}
 
-FRONTEND_PEOPLE_APP_INTERNAL_PORT=${FRONTEND_PEOPLE_APP_INTERNAL_PORT}
+# ── Portas de integração com outros módulos da suite ──────
-FRONTEND_PEOPLE_APP_EXTERNAL_PORT=${FRONTEND_PEOPLE_APP_EXTERNAL_PORT}
+FRONTEND_SUITE_APP_EXTERNAL_PORT=
-
+FRONTEND_ACCOUNT_APP_EXTERNAL_PORT=
-FRONTEND_ACCOUNT_APP_INTERNAL_PORT=${FRONTEND_ACCOUNT_APP_INTERNAL_PORT}
+FRONTEND_PEOPLE_APP_EXTERNAL_PORT=
-FRONTEND_ACCOUNT_APP_EXTERNAL_PORT=${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT}
+BACKEND_SUITE_API_EXTERNAL_PORT=
-
+BACKEND_PEOPLE_API_EXTERNAL_PORT=
-FRONTEND_REPORTS_APP_INTERNAL_PORT=${FRONTEND_REPORTS_APP_INTERNAL_PORT}
+BACKEND_ACCOUNT_API_EXTERNAL_PORT=
-FRONTEND_REPORTS_APP_EXTERNAL_PORT=${FRONTEND_REPORTS_APP_EXTERNAL_PORT}
-
-FRONTEND_USERS_APP_INTERNAL_PORT=${FRONTEND_USERS_APP_INTERNAL_PORT}
-FRONTEND_USERS_APP_EXTERNAL_PORT=${FRONTEND_USERS_APP_EXTERNAL_PORT}
-
-FRONTEND_TENANTS_APP_INTERNAL_PORT=${FRONTEND_TENANTS_APP_INTERNAL_PORT}
-FRONTEND_TENANTS_APP_EXTERNAL_PORT=${FRONTEND_TENANTS_APP_EXTERNAL_PORT}
 
 # ── Keepalive ─────────────────────────────────────────────
 KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_BACKEND}
 KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_FRONTEND}
-
-KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_BACKEND_REPORTS}
-KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_REPORTS}
-
-KEEPALIVE_USERS_BACKEND_HOST=${KEEPALIVE_BACKEND_USERS}
-KEEPALIVE_USERS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_USERS}
-
-KEEPALIVE_TENANTS_BACKEND_HOST=${KEEPALIVE_BACKEND_TENANTS}
-KEEPALIVE_TENANTS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_TENANTS}
-
 EOF
   print_ok ".env.prod gerado"
 }
 
 # ══════════════════════════════════════════════════════════════
-# Gerar definitions.json do RabbitMQ (vhosts/usuários/permissões)
+# Carregar / inicializar .env.observability
 # ══════════════════════════════════════════════════════════════
 
-generate_rabbitmq_definitions() {
+_observability_defaults() {
-  local BASE_DIR="$INSTALL_DIR"
+  local env_file="$1"
-  mkdir -p "$BASE_DIR/rabbitmq"
+  cat > "$env_file" <<'EOF'
-
+SeventhLogs__CustomLevel__Warning__0=Microsoft.AspNetCore
-  cat > "$BASE_DIR/rabbitmq/definitions.json" <<EOF
+SeventhLogs__CustomLevel__Warning__1=Microsoft.AspNetCore.Hosting.Diagnostics
-{
+SeventhLogs__CustomLevel__Warning__2=System.Net.Http.HttpClient.OtlpTraceExporter.ClientHandler
-  "vhosts": [
+SeventhLogs__CustomLevel__Warning__3=System.Net.Http.HttpClient.OtlpTraceExporter.LogicalHandler
-    {"name": "${RABBITMQ_SUITE_VHOST}"},
-    {"name": "${RABBITMQ_USERS_VHOST}"},
-    {"name": "${RABBITMQ_REPORTS_VHOST}"}
-  ],
-  "users": [
-    {"name": "${RABBITMQ_USER}", "password": "${RABBITMQ_PASSWORD}", "tags": ["administrator"]},
-    {"name": "${RABBITMQ_SUITE_OWNER_USER}", "password": "${RABBITMQ_SUITE_OWNER_PASSWORD}", "tags": []},
-    {"name": "${RABBITMQ_USERS_OWNER_USER}", "password": "${RABBITMQ_USERS_OWNER_PASSWORD}", "tags": []},
-    {"name": "${RABBITMQ_REPORTS_OWNER_USER}", "password": "${RABBITMQ_REPORTS_OWNER_PASSWORD}", "tags": []},
-    {"name": "${RABBITMQ_SUITE_WRITER_USER}", "password": "${RABBITMQ_SUITE_WRITER_PASSWORD}", "tags": []},
-    {"name": "${RABBITMQ_USERS_WRITER_USER}", "password": "${RABBITMQ_USERS_WRITER_PASSWORD}", "tags": []},
-    {"name": "${RABBITMQ_REPORTS_WRITER_USER}", "password": "${RABBITMQ_REPORTS_WRITER_PASSWORD}", "tags": []}
-  ],
-  "permissions": [
-    {"user": "${RABBITMQ_SUITE_OWNER_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
-    {"user": "${RABBITMQ_USERS_OWNER_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
-    {"user": "${RABBITMQ_REPORTS_OWNER_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
-
-    {"user": "${RABBITMQ_SUITE_WRITER_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
-    {"user": "${RABBITMQ_USERS_WRITER_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
-    {"user": "${RABBITMQ_REPORTS_WRITER_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
-
-    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
-    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
-    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"}
-  ]
-}
 EOF
-  print_ok "rabbitmq/definitions.json gerado"
+}
+
+load_observability_env() {
+  local env_file="${INSTALL_DIR}/.env.observability"
+
+  if [ ! -f "$env_file" ]; then
+    _observability_defaults "$env_file"
+    print_ok ".env.observability criado com configurações padrão"
+    return
+  fi
+
+  print_warn "Configuração de observabilidade encontrada em ${env_file}"
+
+  if confirm "Deseja manter as configurações atuais?"; then
+    print_ok ".env.observability mantido sem alterações"
+    return
+  fi
+
+  if confirm "Não manter as configurações atuais do arquivo .env.observability vai redefinir para as configurações padrões, você realmente deseja fazer isso?"; then
+    print_ok ".env.observability mantido sem alterações"
+    return
+  fi  
+
+  _observability_defaults "$env_file"
+  print_ok ".env.observability redefinido para as configurações padrão"
 }
 
 # ══════════════════════════════════════════════════════════════
@@ -585,15 +525,12 @@ start_environment() {
   echo -e "  ║     ✅  Instalação concluída com sucesso!    ║"
   echo -e "  ╚══════════════════════════════════════════════╝${NC}"
   echo ""
-  echo -e "  Acesse o sistema em:"
+  echo -e "  Menu do usuário: Monitoramento V1"
-  echo -e "  ${CYAN}${BOLD}  ${SYSTEM_BASE_CONN}${NC}"
-  echo -e "  Menu do usuário: Monitoramento (beta)"
   echo ""
   echo -e "  Comandos úteis (dentro da pasta ${BOLD}${INSTALL_DIR}${NC}):"
   echo -e "    ${BOLD}make install${NC} → sobe o projeto"
   echo -e "    ${BOLD}make update${NC}  → atualiza o projeto"
   echo -e "    ${BOLD}make app${NC}   → sobe apenas a aplicação"
-  echo -e "    ${BOLD}make infra${NC} → sobe apenas a infra (MongoDB, PostgreSQL, Consul, RabbitMQ)"
   echo -e "    ${BOLD}make nuke-project${NC}  → limpa o projeto"
   echo -e "    ${BOLD}make nuke${NC}  → limpa tudo (cuidado!)"
   echo ""
@@ -606,13 +543,15 @@ start_environment() {
 main() {
   print_banner
   check_deps
+  ensure_docker_service
+  configure_docker_log_limit
   clone_repo
   load_existing_env   # detecta .env.prod existente
+  load_observability_env
   collect_config      # wizard com navegação
   show_summary        # resumo com menu de edição
-
   generate_envs
-  generate_rabbitmq_definitions
+  
 
   if confirm "Deseja subir o ambiente agora?"; then
     start_environment

rabbitmq/definitions.conf

@@ -1 +0,0 @@
-management.load_definitions = /etc/rabbitmq/definitions.json