#SVTH-575 - Mantendo consul para consumo de tenants no users.service.

Makefile

@@ -4,8 +4,9 @@ ENV_FILE = .env.$(ENV)
 
 PROJECT_NAME = attendancesystem-$(ENV)
 NETWORK_NAME = attendancesystem-network
+APP_SERVICES = suite-api users-api reports-api attendancesystem-api config-generator attendancesystem-app reports-app users-app suite-app
 
-.PHONY: app install update reset-network nuke nuke-project
+.PHONY: infra app install update restart reset-network nuke nuke-project
 
 # ===============================
 # 🧹 Reset Network
@@ -14,6 +15,25 @@ reset-network:
 	@echo "🧹 Removendo rede antiga (se existir)..."
 	-docker network rm $(NETWORK_NAME) 2>/dev/null || true
 
+# ===============================
+# 🏗 Subir apenas INFRA
+# ===============================
+infra: reset-network
+	@echo "📥 Baixando imagens de INFRA ($(PROJECT_NAME))..."
+	docker compose \
+		--project-name $(PROJECT_NAME) \
+		--env-file $(ENV_FILE) \
+		--profile infra \
+		-f $(COMPOSE_FILE) \
+		pull
+	@echo "🚀 Subindo apenas INFRA ($(PROJECT_NAME))..."
+	docker compose \
+		--project-name $(PROJECT_NAME) \
+		--env-file $(ENV_FILE) \
+		--profile infra \
+		-f $(COMPOSE_FILE) \
+		up -d --pull never
+
 # ===============================
 # 🧩 Subir apenas APP
 # ===============================
@@ -22,16 +42,18 @@ app:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		pull
+		pull $(APP_SERVICES)
 	@echo "🚀 Subindo apenas APP ($(PROJECT_NAME))..."
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		up -d --pull never
+		up -d --pull never --force-recreate $(APP_SERVICES)
 
 # ===============================
 # 🔥 Subir TUDO
@@ -41,6 +63,7 @@ install:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
 		pull
@@ -48,14 +71,45 @@ install:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
-		up -d --pull never
+		up -d --pull never --force-recreate
 
 # ===============================
-# 🔄 Atualizar projeto
+# 🔄 Reiniciar containers ativos
 # ===============================
-update: nuke-project install
+restart:
+	docker restart $$(docker ps -q)
+
+# ===============================
+# 🔄 Atualizar projeto (apenas APP)
+# ===============================
+update:
+	@echo "🛑 Parando containers do profile 'app' ($(PROJECT_NAME))..."
+	docker compose \
+		--project-name $(PROJECT_NAME) \
+		--env-file $(ENV_FILE) \
+		--profile infra \
+		--profile app \
+		-f $(COMPOSE_FILE) \
+		stop $(APP_SERVICES)
+
+	@echo "🗑️ Removendo containers do profile 'app' ($(PROJECT_NAME))..."
+	docker compose \
+		--project-name $(PROJECT_NAME) \
+		--env-file $(ENV_FILE) \
+		--profile infra \
+		--profile app \
+		-f $(COMPOSE_FILE) \
+		rm -f $(APP_SERVICES)
+
+	@echo "🖼️ Removendo imagens antigas do projeto (seventhltda)..."
+	- docker images --format '{{.Repository}}:{{.Tag}}' | grep '^seventhltda/' | xargs -r docker rmi -f 2>/dev/null || true
+
+	@echo "✅ Containers do profile 'app' removidos. Infraestrutura (dados) preservada."
+
+	$(MAKE) app
 
 # ===============================
 # 💣 Limpeza TOTAL
@@ -90,6 +144,7 @@ nuke-project:
 	docker compose \
 		--project-name $(PROJECT_NAME) \
 		--env-file $(ENV_FILE) \
+		--profile infra \
 		--profile app \
 		-f $(COMPOSE_FILE) \
 		down --volumes --remove-orphans
@@ -98,3 +153,4 @@ nuke-project:
 	- docker images --format '{{.Repository}}:{{.Tag}}' | grep '^seventhltda/' | xargs -r docker rmi -f 2>/dev/null || true
 
 	@echo "✅ Projeto $(PROJECT_NAME) limpo (containers, volumes, rede e imagens)."
+	@echo "   Imagens de infraestrutura preservadas."

config.template.json

@@ -7,15 +7,19 @@
   },
   "urlLgpd": "https://lgpd.seventh.com.br/feedback?product=situator",
   "modules": {
-    "suite": "",
+    "suite": "${FRONTEND_SUITE_URL}",
     "attendance": "${FRONTEND_ATTENDANCE_URL}",
-    "account": "",
+    "account": "${FRONTEND_ACCOUNT_URL}",
-    "people": ""
+    "people": "${FRONTEND_PEOPLE_URL}",
+    "reports": "${FRONTEND_REPORTS_URL}",
+    "users": "${FRONTEND_USERS_URL}"
   },
   "api": {
-    "suite": "",
+    "suite": "${BACKEND_SUITE_API_URL}",
-    "people": "",
+    "people": "${BACKEND_PEOPLE_API_URL}",
-    "account": "",
+    "account": "${BACKEND_ACCOUNT_API_URL}",
-    "attendance": "${BACKEND_ATTENDANCE_API_URL}"
+    "attendance": "${BACKEND_ATTENDANCE_API_URL}",
+    "reports": "${BACKEND_REPORTS_API_URL}",
+    "users": "${BACKEND_USERS_API_URL}"
   }
 }

configure-host.sh

@@ -1,366 +0,0 @@
-#!/bin/bash
-
-# ==============================================================
-#  🛠️  Configure Host
-#  Configura a máquina host: serviço Docker, limite de log
-#  e arquivo de observabilidade. Pode ser executado em
-#  ambientes novos ou já instalados.
-#  Uso:
-#    bash configure-host.sh
-# ==============================================================
-
-if [ -t 0 ]; then
-  :
-else
-  exec < /dev/tty
-fi
-
-set -e
-
-# ─── Cores ────────────────────────────────────────────────────
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-BLUE='\033[0;34m'
-CYAN='\033[0;36m'
-BOLD='\033[1m'
-DIM='\033[2m'
-NC='\033[0m'
-
-# ─── Sudo ─────────────────────────────────────────────────────
-SUDO=""
-[ "$EUID" -ne 0 ] && SUDO="sudo"
-
-_SUDO_REQUESTED=false
-request_sudo() {
-  [ "$_SUDO_REQUESTED" = "true" ] && return 0
-  [ -z "$SUDO" ] && return 0
-  echo ""
-  print_warn "Esta etapa requer permissões de superusuário."
-  if ! sudo -v; then
-    print_error "Não foi possível obter permissões de superusuário."
-    exit 1
-  fi
-  _SUDO_REQUESTED=true
-}
-
-# ─── Utilitários ──────────────────────────────────────────────
-
-print_banner() {
-  clear
-  echo -e "${CYAN}"
-  echo "  ╔══════════════════════════════════════════════╗"
-  echo "  ║      🐳  Docker Service Installer            ║"
-  echo "  ║    Registra o Docker como serviço systemd    ║"
-  echo "  ╚══════════════════════════════════════════════╝"
-  echo -e "${NC}"
-}
-
-print_step()  { echo -e "\n${BLUE}${BOLD}▶ $1${NC}"; }
-print_ok()    { echo -e "  ${GREEN}✔ $1${NC}"; }
-print_warn()  { echo -e "  ${YELLOW}⚠ $1${NC}"; }
-print_error() { echo -e "  ${RED}✖ $1${NC}"; }
-
-confirm() {
-  echo -ne "  ${BOLD}$1${NC} ${CYAN}[s/N]${NC}: "
-  read -r resp
-  [[ "$resp" =~ ^[sS]$ ]]
-}
-
-# ══════════════════════════════════════════════════════════════
-# Validar systemctl
-# ══════════════════════════════════════════════════════════════
-
-check_systemctl() {
-  print_step "Verificando systemctl..."
-
-  if ! command -v systemctl &>/dev/null; then
-    print_error "systemctl não encontrado. Este script requer systemd."
-    exit 1
-  fi
-
-  print_ok "systemctl encontrado ($(systemctl --version | head -1))"
-}
-
-# ══════════════════════════════════════════════════════════════
-# Validar Docker instalado
-# ══════════════════════════════════════════════════════════════
-
-check_docker_installed() {
-  print_step "Verificando instalação do Docker..."
-
-  if ! command -v docker &>/dev/null; then
-    print_error "Docker não encontrado. Instale o Docker antes de continuar."
-    echo -e "  ${DIM}Referência: https://docs.docker.com/engine/install/${NC}"
-    exit 1
-  fi
-
-  print_ok "Docker encontrado ($(docker --version))"
-}
-
-# ─── Diretório de instalação ──────────────────────────────────
-INSTALL_DIR="attendancesystem"
-
-# ══════════════════════════════════════════════════════════════
-# Carregar / inicializar .env.observability
-# ══════════════════════════════════════════════════════════════
-
-_observability_defaults() {
-  local env_file="$1"
-  cat > "$env_file" <<'EOF'
-SeventhLogs__CustomLevel__Warning__0=Microsoft.AspNetCore
-SeventhLogs__CustomLevel__Warning__1=Microsoft.AspNetCore.Hosting.Diagnostics
-SeventhLogs__CustomLevel__Warning__2=System.Net.Http.HttpClient.OtlpTraceExporter.ClientHandler
-SeventhLogs__CustomLevel__Warning__3=System.Net.Http.HttpClient.OtlpTraceExporter.LogicalHandler
-EOF
-}
-
-load_observability_env() {
-  local env_file
-
-  if [ -d "./${INSTALL_DIR}" ]; then
-    env_file="${INSTALL_DIR}/.env.observability"
-  else
-    env_file="./.env.observability"
-  fi
-
-  if [ ! -f "$env_file" ]; then
-    _observability_defaults "$env_file"
-    print_ok ".env.observability criado com configurações padrão"
-    return
-  fi
-
-  print_warn "Configuração de observabilidade encontrada em ${env_file}"
-
-  if confirm "Deseja manter as configurações atuais?"; then
-    print_ok ".env.observability mantido sem alterações"
-    return
-  fi
-
-  if confirm "Não manter as configurações atuais do arquivo .env.observability vai redefinir para as configurações padrões, você realmente deseja fazer isso?"; then
-    print_ok ".env.observability mantido sem alterações"
-    return
-  fi  
-
-  _observability_defaults "$env_file"
-  print_ok ".env.observability redefinido para as configurações padrão"
-}
-# ══════════════════════════════════════════════════════════════
-# Flags de controle
-# ══════════════════════════════════════════════════════════════
-
-NEEDS_SERVICE_CONFIG=false
-NEEDS_LOG_CONFIG=false
-
-# ══════════════════════════════════════════════════════════════
-# Verificar status atual do serviço e configuração de log
-# ══════════════════════════════════════════════════════════════
-
-check_docker_service_status() {
-  print_step "Verificando status do serviço Docker..."
-
-  local enabled active
-  enabled=$(systemctl is-enabled docker 2>/dev/null || echo "disabled")
-  active=$(systemctl is-active docker 2>/dev/null || echo "inactive")
-
-  echo -e "  ${DIM}Habilitado no boot : ${NC}${BOLD}${enabled}${NC}"
-  echo -e "  ${DIM}Status atual       : ${NC}${BOLD}${active}${NC}"
-
-  if [[ "$enabled" != "enabled" || "$active" != "active" ]]; then
-    NEEDS_SERVICE_CONFIG=true
-  fi
-
-  local daemon_json="/etc/docker/daemon.json"
-  if [ -f "$daemon_json" ] && grep -q '"max-size"' "$daemon_json"; then
-    echo -e "  ${DIM}Limite de log      : ${NC}${GREEN}${BOLD}configurado${NC}"
-  else
-    echo -e "  ${DIM}Limite de log      : ${NC}${YELLOW}${BOLD}não configurado${NC}"
-    NEEDS_LOG_CONFIG=true
-  fi
-
-  if [[ "$NEEDS_SERVICE_CONFIG" == "false" && "$NEEDS_LOG_CONFIG" == "false" ]]; then
-    echo ""
-    print_ok "Docker já está registrado, rodando e com limite de log configurado."
-    print_ok "Nenhuma ação necessária."
-    echo ""
-    exit 0
-  fi
-}
-
-# ══════════════════════════════════════════════════════════════
-# Mostrar resumo antes de aplicar
-# ══════════════════════════════════════════════════════════════
-
-show_summary() {
-  echo ""
-  echo -e "${CYAN}${BOLD}  ┌──────────────────────────────────────────────────────────────┐"
-  echo -e "  │               Ações que serão executadas                     │"
-  echo -e "  └──────────────────────────────────────────────────────────────┘${NC}"
-  echo ""
-
-  local step=1
-
-  if [[ "$NEEDS_SERVICE_CONFIG" == "true" ]]; then
-    echo -e "  ${BOLD}${step}.${NC} Criar drop-in de política de restart:"
-    echo -e "     ${DIM}/etc/systemd/system/docker.service.d/restart-policy.conf${NC}"
-    echo -e "     ${DIM}→ Restart=always | RestartSec=5${NC}"
-    echo ""
-    step=$((step + 1))
-
-    echo -e "  ${BOLD}${step}.${NC} Recarregar o daemon do systemd"
-    echo -e "     ${DIM}→ systemctl daemon-reload${NC}"
-    echo ""
-    step=$((step + 1))
-
-    echo -e "  ${BOLD}${step}.${NC} Habilitar o Docker para iniciar com o SO"
-    echo -e "     ${DIM}→ systemctl enable docker${NC}"
-    echo ""
-    step=$((step + 1))
-
-    echo -e "  ${BOLD}${step}.${NC} Iniciar o serviço Docker imediatamente"
-    echo -e "     ${DIM}→ systemctl start docker${NC}"
-    echo ""
-    step=$((step + 1))
-  fi
-
-  if [[ "$NEEDS_LOG_CONFIG" == "true" ]]; then
-    echo -e "  ${BOLD}${step}.${NC} Configurar limite de log em /etc/docker/daemon.json"
-    echo -e "     ${DIM}→ log-driver: json-file | max-size: 100m | max-file: 5${NC}"
-    echo ""
-    step=$((step + 1))
-
-    echo -e "  ${BOLD}${step}.${NC} Reiniciar o Docker para aplicar a configuração de log"
-    echo -e "     ${DIM}→ systemctl restart docker${NC}"
-    echo ""
-  fi
-
-  echo -e "  ──────────────────────────────────────────────────────────────"
-  echo ""
-
-  if ! confirm "Deseja aplicar as configurações acima?"; then
-    echo ""
-    print_warn "Operação cancelada. Nenhuma alteração foi feita."
-    echo ""
-    exit 0
-  fi
-}
-
-# ══════════════════════════════════════════════════════════════
-# Aplicar configuração do serviço systemd
-# ══════════════════════════════════════════════════════════════
-
-configure_docker_service() {
-  [[ "$NEEDS_SERVICE_CONFIG" == "false" ]] && return 0
-
-  print_step "Configurando serviço Docker no systemd..."
-
-  request_sudo
-
-  local override_dir="/etc/systemd/system/docker.service.d"
-  $SUDO mkdir -p "$override_dir"
-
-  $SUDO tee "$override_dir/restart-policy.conf" > /dev/null <<'EOF'
-[Service]
-Restart=always
-RestartSec=5
-EOF
-  print_ok "Drop-in de restart criado em ${override_dir}/restart-policy.conf"
-
-  $SUDO systemctl daemon-reload
-  print_ok "systemctl daemon-reload executado"
-
-  $SUDO systemctl enable docker
-  print_ok "Docker habilitado para iniciar com o SO"
-
-  $SUDO systemctl start docker
-  print_ok "Docker iniciado"
-}
-
-# ══════════════════════════════════════════════════════════════
-# Configurar limite de log do Docker
-# ══════════════════════════════════════════════════════════════
-
-configure_docker_log_limit() {
-  [[ "$NEEDS_LOG_CONFIG" == "false" ]] && return 0
-
-  print_step "Configurando limite de log do Docker..."
-
-  request_sudo
-
-  local daemon_json="/etc/docker/daemon.json"
-
-  if [ -f "$daemon_json" ]; then
-    $SUDO cp "$daemon_json" "${daemon_json}.bak"
-    print_warn "Backup do daemon.json criado em ${daemon_json}.bak"
-  fi
-
-  $SUDO mkdir -p "$(dirname "$daemon_json")"
-
-  $SUDO tee "$daemon_json" > /dev/null <<'EOF'
-{
-  "log-driver": "json-file",
-  "log-opts": {
-    "max-size": "100m",
-    "max-file": "5"
-  }
-}
-EOF
-  print_ok "Limite de log configurado em ${daemon_json} (max-size: 100m, max-file: 5)"
-
-  $SUDO systemctl restart docker
-  print_ok "Docker reiniciado para aplicar a configuração de log"
-}
-
-# ══════════════════════════════════════════════════════════════
-# Validar resultado final
-# ══════════════════════════════════════════════════════════════
-
-verify_result() {
-  print_step "Validando configuração..."
-
-  if ! systemctl is-active --quiet docker; then
-    print_error "O serviço Docker não está ativo após a configuração."
-    echo -e "  ${DIM}Verifique os logs com: journalctl -u docker --no-pager -n 20${NC}"
-    exit 1
-  fi
-
-  local daemon_json="/etc/docker/daemon.json"
-  if [ ! -f "$daemon_json" ] || ! grep -q '"max-size"' "$daemon_json"; then
-    print_error "Limite de log não encontrado em ${daemon_json} após a configuração."
-    exit 1
-  fi
-
-  echo ""
-  echo -e "${GREEN}${BOLD}  ╔══════════════════════════════════════════════╗"
-  echo -e "  ║   ✅  Docker configurado com sucesso!        ║"
-  echo -e "  ╚══════════════════════════════════════════════╝${NC}"
-  echo ""
-  echo -e "  ${BOLD}Status final:${NC}"
-  echo -e "    Habilitado no boot : ${GREEN}$(systemctl is-enabled docker)${NC}"
-  echo -e "    Rodando agora      : ${GREEN}$(systemctl is-active docker)${NC}"
-  echo -e "    Política de restart: ${GREEN}always (RestartSec=5s)${NC}"
-  echo -e "    Limite de log      : ${GREEN}max-size=100m, max-file=5${NC}"
-  echo ""
-  echo -e "  ${DIM}Comandos úteis:"
-  echo -e "    systemctl status docker"
-  echo -e "    journalctl -u docker -f${NC}"
-  echo ""
-}
-
-# ══════════════════════════════════════════════════════════════
-# MAIN
-# ══════════════════════════════════════════════════════════════
-
-main() {
-  print_banner
-  load_observability_env
-  check_systemctl
-  check_docker_installed
-  check_docker_service_status
-  show_summary
-  configure_docker_service
-  configure_docker_log_limit
-  verify_result  
-}
-
-main "$@"

docker-compose.yml

@@ -1,8 +1,170 @@
 services:
+  # ================= INFRA =================
+  mongodb:
+    image: mongo:${IMAGEM_LATEST}
+    profiles: ["infra"]
+    ports:
+      - "${MONGO_PORT}:27017"
+    volumes:
+      - mongodb_data:/data/db
+    networks:
+      - app-network
+    healthcheck:
+      test: echo 'db.runCommand("ping").ok' | mongosh localhost:27017/test --quiet
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  consul:
+    image: hashicorp/consul:latest
+    profiles: ["infra"]
+    ports:
+      - "${CONSUL_HTTP_PORT}:8500"
+      - "${CONSUL_DNS_PORT}:8600/udp"
+    command: "agent -server -bootstrap -ui -client=0.0.0.0"
+    networks:
+      - app-network
+    healthcheck:
+      test: ["CMD", "consul", "members"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  postgres:
+    image: postgres:16-alpine
+    profiles: ["infra"]
+    ports:
+      - "${POSTGRES_PORT}:5432"
+    environment:
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DB=${POSTGRES_DB}
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    networks:
+      - app-network
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  rabbitmq:
+    image: rabbitmq:4-management-alpine
+    profiles: ["infra"]
+    ports:
+      - "${RABBITMQ_PORT}:5672"
+      - "${RABBITMQ_MANAGEMENT_PORT}:15672"
+    environment:
+      - RABBITMQ_DEFAULT_USER=${RABBITMQ_USER}
+      - RABBITMQ_DEFAULT_PASS=${RABBITMQ_PASSWORD}
+      - RABBITMQ_DEFAULT_VHOST=${RABBITMQ_VHOST}
+    volumes:
+      - rabbitmq_data:/var/lib/rabbitmq
+      - ./rabbitmq/definitions.json:/etc/rabbitmq/definitions.json:ro
+      - ./rabbitmq/definitions.conf:/etc/rabbitmq/conf.d/20-definitions.conf:ro
+    networks:
+      - app-network
+    healthcheck:
+      test: ["CMD", "rabbitmq-diagnostics", "-q", "ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
   # ================= BACKEND =================
 
+  suite-api:
+    image: ${DOCKER_REPO}/suite-api:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    ports:
+      - "${BACKEND_SUITE_API_INTERNAL_PORT}:${BACKEND_SUITE_API_INTERNAL_PORT}"
+    environment:
+      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT}
+      - MONGODB_CONNECTION_STRING=${MONGODB_CONNECTION_STRING}
+      - MONGODB_DATABASE=${MONGODB_DATABASE}
+      - SYSTEM_BASE_CONN=${SYSTEM_BASE_CONN}
+      - FRONTEND_CONN=${INTERNAL_HOST}:${FRONTEND_SUITE_APP_INTERNAL_PORT}
+      - ConsulSettings__Address=http://consul:8500
+      - Messaging__RabbitMQ__Host=rabbitmq
+      - Messaging__RabbitMQ__Port=5672
+      - Messaging__RabbitMQ__VirtualHost=${RABBITMQ_SUITE_VHOST}
+      - Messaging__RabbitMQ__Username=${RABBITMQ_SUITE_OWNER_USER}
+      - Messaging__RabbitMQ__Password=${RABBITMQ_SUITE_OWNER_PASSWORD}
+      - Messaging__RabbitMQ__Messaging__ServiceName=suite
+      - Messaging__RabbitMQ__Connections__users__Host=rabbitmq
+      - Messaging__RabbitMQ__Connections__users__Port=5672
+      - Messaging__RabbitMQ__Connections__users__VirtualHost=${RABBITMQ_USERS_VHOST}
+      - Messaging__RabbitMQ__Connections__users__Username=${RABBITMQ_USERS_WRITER_USER}
+      - Messaging__RabbitMQ__Connections__users__Password=${RABBITMQ_USERS_WRITER_PASSWORD}
+      - KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST}
+      - KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST}
+      - KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_REPORTS_BACKEND_HOST}
+      - KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_REPORTS_FRONTEND_HOST}
+      - KEEPALIVE_USERS_BACKEND_HOST=${KEEPALIVE_USERS_BACKEND_HOST}
+      - KEEPALIVE_USERS_FRONTEND_HOST=${KEEPALIVE_USERS_FRONTEND_HOST}
+      - KEEPALIVE_TENANTS_BACKEND_HOST=${KEEPALIVE_TENANTS_BACKEND_HOST}
+      - KEEPALIVE_TENANTS_FRONTEND_HOST=${KEEPALIVE_TENANTS_FRONTEND_HOST}
+    depends_on:
+      consul:
+        condition: service_healthy
+      rabbitmq:
+        condition: service_healthy
+    networks:
+      - app-network
+
+  users-api:
+    image: ${DOCKER_REPO}/sca-users-api:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    ports:
+      - "${BACKEND_USERS_API_INTERNAL_PORT}:${BACKEND_USERS_API_INTERNAL_PORT}"
+    environment:
+      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT}
+      - ConnectionStrings__UsersDb=Host=postgres;Port=5432;Database=seventh_users;Username=${POSTGRES_USER};Password=${POSTGRES_PASSWORD}
+      - MongoDbSettings__ConnectionString=mongodb://mongodb:27017
+      - ConsulSettings__Address=http://consul:8500
+      - Messaging__RabbitMQ__Host=rabbitmq
+      - Messaging__RabbitMQ__Port=5672
+      - Messaging__RabbitMQ__VirtualHost=${RABBITMQ_USERS_VHOST}
+      - Messaging__RabbitMQ__Username=${RABBITMQ_USERS_OWNER_USER}
+      - Messaging__RabbitMQ__Password=${RABBITMQ_USERS_OWNER_PASSWORD}
+      - Messaging__RabbitMQ__Messaging__ServiceName=users
+      - Messaging__RabbitMQ__Connections__suite__Host=rabbitmq
+      - Messaging__RabbitMQ__Connections__suite__Port=5672
+      - Messaging__RabbitMQ__Connections__suite__VirtualHost=${RABBITMQ_SUITE_VHOST}
+      - Messaging__RabbitMQ__Connections__suite__Username=${RABBITMQ_SUITE_WRITER_USER}
+      - Messaging__RabbitMQ__Connections__suite__Password=${RABBITMQ_SUITE_WRITER_PASSWORD}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      mongodb:
+        condition: service_healthy
+      consul:
+        condition: service_healthy
+      rabbitmq:
+        condition: service_healthy
+    networks:
+      - app-network
+
+  reports-api:
+    image: ${DOCKER_REPO}/sca-reports-api:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    ports:
+      - "${BACKEND_REPORTS_API_INTERNAL_PORT}:${BACKEND_REPORTS_API_INTERNAL_PORT}"
+    environment:
+      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT}
+      - MONGODB_CONNECTION_STRING=${MONGODB_CONNECTION_STRING}
+      - MONGODB_DATABASE=${MONGODB_DATABASE}
+      - SystemBaseConn=${SYSTEM_BASE_CONN}
+      - FRONTEND_CONN=${INTERNAL_HOST}:${FRONTEND_REPORTS_APP_INTERNAL_PORT}
+      - KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST}
+      - KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST}
+      - KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_REPORTS_BACKEND_HOST}
+      - KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_REPORTS_FRONTEND_HOST}
+    networks:
+      - app-network
+
   attendancesystem-api:
-    image: ${DOCKER_REPO}/backend-attendance-system-api:${IMAGEM_RELEASE}
+    image: ${DOCKER_REPO}/backend-attendance-system-api:${IMAGEM_UNSTABLE_LATEST}
     profiles: ["app"]
     ports:
       - "${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}:${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}"
@@ -10,9 +172,6 @@ services:
       - SYSBASE_URL=${SYSTEM_BASE_CONN}
       - SystemBaseConn=${SYSTEM_BASE_CONN}
       - FrotendConn=${EXTERNAL_HOST}:${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}
-    env_file:
-      - path: .env.observability
-        required: false
     networks:
       - app-network
 
@@ -31,6 +190,12 @@ services:
       - BACKEND_ATTENDANCE_API_URL=${EXTERNAL_HOST}:${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}
       - BACKEND_PEOPLE_API_URL=${EXTERNAL_HOST}:${BACKEND_PEOPLE_API_EXTERNAL_PORT}
       - BACKEND_ACCOUNT_API_URL=${EXTERNAL_HOST}:${BACKEND_ACCOUNT_API_EXTERNAL_PORT}
+      - BACKEND_REPORTS_API_URL=${EXTERNAL_HOST}:${BACKEND_REPORTS_API_EXTERNAL_PORT}
+      - BACKEND_USERS_API_URL=${EXTERNAL_HOST}:${BACKEND_USERS_API_EXTERNAL_PORT}
+      - BACKEND_TENANTS_API_URL=${EXTERNAL_HOST}:${BACKEND_TENANTS_API_EXTERNAL_PORT}
+      - FRONTEND_REPORTS_URL=${EXTERNAL_HOST}:${FRONTEND_REPORTS_APP_EXTERNAL_PORT}
+      - FRONTEND_USERS_URL=${EXTERNAL_HOST}:${FRONTEND_USERS_APP_EXTERNAL_PORT}
+      - FRONTEND_TENANTS_URL=${EXTERNAL_HOST}:${FRONTEND_TENANTS_APP_EXTERNAL_PORT}
     command: >
       sh -c "apk add --no-cache gettext &&
             envsubst < /config.template.json > /output/config.json &&
@@ -57,9 +222,76 @@ services:
       config-generator:
         condition: service_completed_successfully
 
+  reports-app:
+    image: ${DOCKER_REPO}/reports-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_REPORTS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
+  users-app:
+    image: ${DOCKER_REPO}/users-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_USERS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
+  tenants-app:
+    image: ${DOCKER_REPO}/tenants-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_TENANTS_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
+  suite-app:
+    image: ${DOCKER_REPO}/suite-app:${IMAGEM_UNSTABLE_LATEST}
+    profiles: ["app"]
+    volumes:
+      - config-volume:/config-inject:ro
+    entrypoint: >
+      sh -c "cp /config-inject/config.json /usr/share/nginx/html/config.json &&
+             nginx -g 'daemon off;'"
+    ports:
+      - "${FRONTEND_SUITE_APP_INTERNAL_PORT}:${NGINX_DEFAULT_PORT}"
+    networks:
+      - app-network
+    depends_on:
+      config-generator:
+        condition: service_completed_successfully
+
 networks:
   app-network:
     name: attendancesystem-network
 
 volumes:
+  mongodb_data:
+  postgres_data:
+  rabbitmq_data:
   config-volume:

install.sh

@@ -4,7 +4,7 @@
 #  🚀 Instalador - AttendanceSystem
 #  Uso:
 #    bash <(curl -fsSL \
-#      "https://git.seventh.com.br/seventh.p7/attendance-system.install/raw/branch/release%2FV1.4/install.sh")
+#      "https://git.seventh.com.br/seventh.p7/attendance-system.install/raw/branch/feature%2FSVTH-575---install-users/install.sh")
 # ==============================================================
 
 # ── Redireciona stdin para o terminal quando rodado via curl | bash ──
@@ -26,29 +26,34 @@ BOLD='\033[1m'
 DIM='\033[2m'
 NC='\033[0m'
 
-# ─── Sudo ─────────────────────────────────────────────────────
-SUDO=""
-[ "$EUID" -ne 0 ] && SUDO="sudo"
-
-_SUDO_REQUESTED=false
-request_sudo() {
-  [ "$_SUDO_REQUESTED" = "true" ] && return 0
-  [ -z "$SUDO" ] && return 0
-  echo ""
-  print_warn "Esta etapa requer permissões de superusuário."
-  if ! sudo -v; then
-    print_error "Não foi possível obter permissões de superusuário."
-    exit 1
-  fi
-  _SUDO_REQUESTED=true
-}
-
 # ─── Repositório Git ──────────────────────────────────────────
 INSTALL_DIR="attendancesystem"
-BRANCH="${BRANCH:-release/V1.4}"
+BRANCH="${BRANCH:-feature/SVTH-575---install-users}"
 ENV_FILE=""
 GIT_REPO="https://git.seventh.com.br/seventh.p7/attendance-system.install.git"
 
+# ─── RabbitMQ (mensageria entre suite/users/reports) ──────────
+# Um vhost por serviço: quem consome é dono do vhost onde a fila mora.
+# Usuário "owner" tem acesso total ao próprio vhost; "writer" só publica
+# (write-only) no vhost de um serviço vizinho — ver rabbitmq/definitions.json.
+RABBITMQ_SUITE_VHOST="suite"
+RABBITMQ_USERS_VHOST="users"
+RABBITMQ_REPORTS_VHOST="reports"
+
+RABBITMQ_SUITE_OWNER_USER="suite-owner"
+RABBITMQ_SUITE_OWNER_PASSWORD="suite-owner-secret"
+RABBITMQ_USERS_OWNER_USER="users-owner"
+RABBITMQ_USERS_OWNER_PASSWORD="users-owner-secret"
+RABBITMQ_REPORTS_OWNER_USER="reports-owner"
+RABBITMQ_REPORTS_OWNER_PASSWORD="reports-owner-secret"
+
+RABBITMQ_SUITE_WRITER_USER="suite-writer"
+RABBITMQ_SUITE_WRITER_PASSWORD="suite-writer-secret"
+RABBITMQ_USERS_WRITER_USER="users-writer"
+RABBITMQ_USERS_WRITER_PASSWORD="users-writer-secret"
+RABBITMQ_REPORTS_WRITER_USER="reports-writer"
+RABBITMQ_REPORTS_WRITER_PASSWORD="reports-writer-secret"
+
 # ══════════════════════════════════════════════════════════════
 # Utilitários
 # ══════════════════════════════════════════════════════════════
@@ -156,89 +161,6 @@ check_deps() {
   print_ok "Todas as dependências OK"
 }
 
-# ══════════════════════════════════════════════════════════════
-# Configurar limite de log do Docker
-# ══════════════════════════════════════════════════════════════
-
-configure_docker_log_limit() {
-  print_step "Configurando limite de log do Docker..."
-
-  local daemon_json="/etc/docker/daemon.json"
-
-  if [ -f "$daemon_json" ] && grep -q '"max-size"' "$daemon_json"; then
-    print_ok "Limite de log já configurado em ${daemon_json}"
-    return 0
-  fi
-
-  request_sudo
-
-  if [ -f "$daemon_json" ]; then
-    $SUDO cp "$daemon_json" "${daemon_json}.bak"
-    print_warn "Backup do daemon.json criado em ${daemon_json}.bak"
-  fi
-
-  $SUDO mkdir -p "$(dirname "$daemon_json")"
-
-  $SUDO tee "$daemon_json" > /dev/null <<'EOF'
-{
-  "log-driver": "json-file",
-  "log-opts": {
-    "max-size": "100m",
-    "max-file": "5"
-  }
-}
-EOF
-  print_ok "Limite de log configurado em ${daemon_json} (max-size: 100m, max-file: 5)"
-
-  if systemctl is-active --quiet docker; then
-    $SUDO systemctl restart docker
-    print_ok "Docker reiniciado para aplicar a configuração de log"
-  fi
-}
-
-# ══════════════════════════════════════════════════════════════
-# Garantir Docker como serviço systemd
-# ══════════════════════════════════════════════════════════════
-
-ensure_docker_service() {
-  print_step "Verificando serviço do Docker no systemd..."
-
-  if ! command -v systemctl &>/dev/null; then
-    print_error "systemctl não encontrado. Este instalador requer systemd."
-    exit 1
-  fi
-  print_ok "systemctl encontrado"
-
-  if systemctl is-active --quiet docker; then
-    print_ok "Docker já está rodando como serviço systemd"
-    return 0
-  fi
-
-  print_warn "Docker não está ativo como serviço. Configurando..."
-
-  request_sudo
-
-  local override_dir="/etc/systemd/system/docker.service.d"
-  $SUDO mkdir -p "$override_dir"
-  $SUDO tee "$override_dir/restart-policy.conf" > /dev/null <<'EOF'
-[Service]
-Restart=always
-RestartSec=5
-EOF
-
-  $SUDO systemctl daemon-reload
-  $SUDO systemctl enable docker
-  $SUDO systemctl start docker
-
-  if systemctl is-active --quiet docker; then
-    print_ok "Docker habilitado e iniciado como serviço systemd"
-    print_ok "Docker iniciará automaticamente com o SO e será reiniciado se cair"
-  else
-    print_error "Falha ao iniciar o serviço docker. Verifique com: journalctl -u docker"
-    exit 1
-  fi
-}
-
 # ══════════════════════════════════════════════════════════════
 # Clonar / atualizar repositório
 # ══════════════════════════════════════════════════════════════
@@ -259,12 +181,6 @@ clone_repo() {
     print_ok "Arquivos baixados em: $(pwd)/${INSTALL_DIR}"
   fi
 
-  if [ -f "$INSTALL_DIR/configure-host.sh" ]; then
-    cp "$INSTALL_DIR/configure-host.sh" ./configure-host.sh
-    chmod +x ./configure-host.sh
-    print_ok "configure-host.sh disponível neste diretório"
-  fi
-
   ENV_FILE="$INSTALL_DIR/.env.prod"
 }
 
@@ -327,16 +243,46 @@ collect_system_base() {
 
 collect_internal_ports() {
   print_section "3. Portas Internas (rede local)"
+  ask BACKEND_SUITE_API_INTERNAL_PORT             "Backend Suite API"             "${BACKEND_SUITE_API_INTERNAL_PORT:-10101}"
+  ask BACKEND_PEOPLE_API_INTERNAL_PORT            "Backend People API"            "${BACKEND_PEOPLE_API_INTERNAL_PORT:-10100}"
   ask BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT  "Backend AttendanceSystem API"  "${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT:-10102}"
+  ask BACKEND_ACCOUNT_API_INTERNAL_PORT           "Backend Account API"           "${BACKEND_ACCOUNT_API_INTERNAL_PORT:-10103}"
+  ask BACKEND_REPORTS_API_INTERNAL_PORT           "Backend Reports API"           "${BACKEND_REPORTS_API_INTERNAL_PORT:-10105}"
+  ask BACKEND_USERS_API_INTERNAL_PORT             "Backend Users API"             "${BACKEND_USERS_API_INTERNAL_PORT:-10109}"
+  ask BACKEND_TENANTS_API_INTERNAL_PORT           "Backend Tenants API"           "${BACKEND_TENANTS_API_INTERNAL_PORT:-10110}"
+  ask FRONTEND_SUITE_APP_INTERNAL_PORT            "Frontend Suite"                "${FRONTEND_SUITE_APP_INTERNAL_PORT:-4200}"
+  ask FRONTEND_PEOPLE_APP_INTERNAL_PORT           "Frontend People"               "${FRONTEND_PEOPLE_APP_INTERNAL_PORT:-4201}"
   ask FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT "Frontend AttendanceSystem"     "${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT:-4202}"
+  ask FRONTEND_ACCOUNT_APP_INTERNAL_PORT          "Frontend Account"              "${FRONTEND_ACCOUNT_APP_INTERNAL_PORT:-4203}"
+  ask FRONTEND_REPORTS_APP_INTERNAL_PORT          "Frontend Reports"              "${FRONTEND_REPORTS_APP_INTERNAL_PORT:-4205}"
+  ask FRONTEND_USERS_APP_INTERNAL_PORT            "Frontend Users"                "${FRONTEND_USERS_APP_INTERNAL_PORT:-4209}"
+  ask FRONTEND_TENANTS_APP_INTERNAL_PORT          "Frontend Tenants"              "${FRONTEND_TENANTS_APP_INTERNAL_PORT:-4210}"
 }
 
 collect_external_ports() {
   print_section "4. Portas Externas (NAT/acesso remoto)"
   echo -e "  ${DIM}Pressione ENTER para usar a mesma porta interna.${NC}\n"
 
+  ask BACKEND_SUITE_API_EXTERNAL_PORT             "Backend Suite API"             "${BACKEND_SUITE_API_EXTERNAL_PORT:-$BACKEND_SUITE_API_INTERNAL_PORT}"
+  ask BACKEND_PEOPLE_API_EXTERNAL_PORT            "Backend People API"            "${BACKEND_PEOPLE_API_EXTERNAL_PORT:-$BACKEND_PEOPLE_API_INTERNAL_PORT}"
   ask BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT  "Backend AttendanceSystem API"  "${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT:-$BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}"
+  ask BACKEND_ACCOUNT_API_EXTERNAL_PORT           "Backend Account API"           "${BACKEND_ACCOUNT_API_EXTERNAL_PORT:-$BACKEND_ACCOUNT_API_INTERNAL_PORT}"
+  ask BACKEND_REPORTS_API_EXTERNAL_PORT           "Backend Reports API"           "${BACKEND_REPORTS_API_EXTERNAL_PORT:-$BACKEND_REPORTS_API_INTERNAL_PORT}"
+  ask BACKEND_USERS_API_EXTERNAL_PORT             "Backend Users API"             "${BACKEND_USERS_API_EXTERNAL_PORT:-$BACKEND_USERS_API_INTERNAL_PORT}"
+  ask BACKEND_TENANTS_API_EXTERNAL_PORT           "Backend Tenants API"           "${BACKEND_TENANTS_API_EXTERNAL_PORT:-$BACKEND_TENANTS_API_INTERNAL_PORT}"
+  ask FRONTEND_SUITE_APP_EXTERNAL_PORT            "Frontend Suite"                "${FRONTEND_SUITE_APP_EXTERNAL_PORT:-$FRONTEND_SUITE_APP_INTERNAL_PORT}"
+  ask FRONTEND_PEOPLE_APP_EXTERNAL_PORT           "Frontend People"               "${FRONTEND_PEOPLE_APP_EXTERNAL_PORT:-$FRONTEND_PEOPLE_APP_INTERNAL_PORT}"
   ask FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT "Frontend AttendanceSystem"     "${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT:-$FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}"
+  ask FRONTEND_ACCOUNT_APP_EXTERNAL_PORT          "Frontend Account"              "${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT:-$FRONTEND_ACCOUNT_APP_INTERNAL_PORT}"
+  ask FRONTEND_REPORTS_APP_EXTERNAL_PORT          "Frontend Reports"              "${FRONTEND_REPORTS_APP_EXTERNAL_PORT:-$FRONTEND_REPORTS_APP_INTERNAL_PORT}"
+  ask FRONTEND_USERS_APP_EXTERNAL_PORT            "Frontend Users"                "${FRONTEND_USERS_APP_EXTERNAL_PORT:-$FRONTEND_USERS_APP_INTERNAL_PORT}"
+  ask FRONTEND_TENANTS_APP_EXTERNAL_PORT          "Frontend Tenants"              "${FRONTEND_TENANTS_APP_EXTERNAL_PORT:-$FRONTEND_TENANTS_APP_INTERNAL_PORT}"
+}
+
+collect_rabbitmq() {
+  print_section "5. RabbitMQ"
+  ask RABBITMQ_USER     "Usuário admin do RabbitMQ"  "${RABBITMQ_USER:-admin}"
+  ask RABBITMQ_PASSWORD "Senha admin do RabbitMQ"     "${RABBITMQ_PASSWORD:-admin}"
 }
 
 # ══════════════════════════════════════════════════════════════
@@ -358,10 +304,24 @@ collect_config() {
   else
     collect_internal_ports
     # Copia internas → externas automaticamente
+    BACKEND_SUITE_API_EXTERNAL_PORT="$BACKEND_SUITE_API_INTERNAL_PORT"
+    BACKEND_PEOPLE_API_EXTERNAL_PORT="$BACKEND_PEOPLE_API_INTERNAL_PORT"
     BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT="$BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT"
+    BACKEND_ACCOUNT_API_EXTERNAL_PORT="$BACKEND_ACCOUNT_API_INTERNAL_PORT"
+    BACKEND_REPORTS_API_EXTERNAL_PORT="$BACKEND_REPORTS_API_INTERNAL_PORT"
+    BACKEND_USERS_API_EXTERNAL_PORT="$BACKEND_USERS_API_INTERNAL_PORT"
+    BACKEND_TENANTS_API_EXTERNAL_PORT="$BACKEND_TENANTS_API_INTERNAL_PORT"
+    FRONTEND_SUITE_APP_EXTERNAL_PORT="$FRONTEND_SUITE_APP_INTERNAL_PORT"
+    FRONTEND_PEOPLE_APP_EXTERNAL_PORT="$FRONTEND_PEOPLE_APP_INTERNAL_PORT"
     FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT="$FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT"
+    FRONTEND_ACCOUNT_APP_EXTERNAL_PORT="$FRONTEND_ACCOUNT_APP_INTERNAL_PORT"
+    FRONTEND_REPORTS_APP_EXTERNAL_PORT="$FRONTEND_REPORTS_APP_INTERNAL_PORT"
+    FRONTEND_USERS_APP_EXTERNAL_PORT="$FRONTEND_USERS_APP_INTERNAL_PORT"
+    FRONTEND_TENANTS_APP_EXTERNAL_PORT="$FRONTEND_TENANTS_APP_INTERNAL_PORT"
     print_ok "Portas externas definidas iguais às internas."
   fi
+
+  collect_rabbitmq
 }
 
 # ══════════════════════════════════════════════════════════════
@@ -384,12 +344,16 @@ show_summary() {
     echo -e "      Porta   : ${BOLD}${SYSTEM_BASE_PORT}${NC}"
     echo ""
     echo -e "  ${BOLD}[3] Portas Internas${NC}"
-    echo -e "      Backend  Attendance : ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}${NC}"
+    echo -e "      Backend  Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${BACKEND_SUITE_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_PEOPLE_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ACCOUNT_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_REPORTS_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_USERS_API_INTERNAL_PORT}${NC} / ${BOLD}${BACKEND_TENANTS_API_INTERNAL_PORT}${NC}"
-    echo -e "      Frontend Attendance : ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}${NC}"
+    echo -e "      Frontend Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${FRONTEND_SUITE_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_PEOPLE_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ACCOUNT_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_REPORTS_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_USERS_APP_INTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_TENANTS_APP_INTERNAL_PORT}${NC}"
     echo ""
     echo -e "  ${BOLD}[4] Portas Externas${NC}"
-    echo -e "      Backend  Attendance : ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}${NC}"
+    echo -e "      Backend  Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${BACKEND_SUITE_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_PEOPLE_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_ACCOUNT_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_REPORTS_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_USERS_API_EXTERNAL_PORT}${NC} / ${BOLD}${BACKEND_TENANTS_API_EXTERNAL_PORT}${NC}"
-    echo -e "      Frontend Attendance : ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}${NC}"
+    echo -e "      Frontend Suite/People/Attendance/Account/Reports/Users/Tenants : ${BOLD}${FRONTEND_SUITE_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_PEOPLE_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_REPORTS_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_USERS_APP_EXTERNAL_PORT}${NC} / ${BOLD}${FRONTEND_TENANTS_APP_EXTERNAL_PORT}${NC}"
+    echo ""
+    echo -e "  ${BOLD}[5] RabbitMQ${NC}"
+    echo -e "      Usuário : ${BOLD}${RABBITMQ_USER}${NC}"
+    echo -e "      Senha   : ${BOLD}********${NC}"
     echo ""
     echo -e "  ──────────────────────────────────────────────────────────────"
     echo -e "  ${GREEN}${BOLD}[C]${NC} Confirmar e continuar   ${RED}${BOLD}[X]${NC} Cancelar instalação"
@@ -403,6 +367,7 @@ show_summary() {
       2) collect_system_base ;;
       3) collect_internal_ports ;;
       4) collect_external_ports ;;
+      5) collect_rabbitmq ;;
       C) break ;;
       X)
         echo ""
@@ -410,7 +375,7 @@ show_summary() {
         exit 0
         ;;
       *)
-        print_warn "Opção inválida. Digite 1-4, C ou X."
+        print_warn "Opção inválida. Digite 1-5, C ou X."
         ;;
     esac
   done
@@ -425,17 +390,71 @@ generate_envs() {
 
   local BASE_DIR="$INSTALL_DIR"
   local SYSTEM_BASE_CONN="${SYSTEM_BASE_HOST}:${SYSTEM_BASE_PORT}"
+
   local KEEPALIVE_BACKEND="${EXTERNAL_HOST}:${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}"
   local KEEPALIVE_FRONTEND="${EXTERNAL_HOST}:${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}"
 
+  local KEEPALIVE_BACKEND_REPORTS="${EXTERNAL_HOST}:${BACKEND_REPORTS_API_EXTERNAL_PORT}"
+  local KEEPALIVE_FRONTEND_REPORTS="${EXTERNAL_HOST}:${FRONTEND_REPORTS_APP_EXTERNAL_PORT}"
+
+  local KEEPALIVE_BACKEND_USERS="${EXTERNAL_HOST}:${BACKEND_USERS_API_EXTERNAL_PORT}"
+  local KEEPALIVE_FRONTEND_USERS="${EXTERNAL_HOST}:${FRONTEND_USERS_APP_EXTERNAL_PORT}"
+
+  local KEEPALIVE_BACKEND_TENANTS="${EXTERNAL_HOST}:${BACKEND_TENANTS_API_EXTERNAL_PORT}"
+  local KEEPALIVE_FRONTEND_TENANTS="${EXTERNAL_HOST}:${FRONTEND_TENANTS_APP_EXTERNAL_PORT}"
+
   cat > "$BASE_DIR/.env.prod" <<EOF
 ASPNETCORE_ENVIRONMENT=Production
 DOCKER_REPO=seventhltda
 IMAGEM_LATEST=latest
 IMAGEM_UNSTABLE_LATEST=unstable-latest
-IMAGEM_RELEASE=rc-1.4
+IMAGEM_RELEASE=2.0
 NGINX_DEFAULT_PORT=80
 
+# ── MongoDB ───────────────────────────────────────────────
+MONGO_PORT=27017
+MONGODB_CONNECTION_STRING=mongodb://mongodb:27017/suitedb
+MONGODB_DATABASE=suitedb
+
+# ── PostgreSQL ────────────────────────────────────────────
+POSTGRES_PORT=5432
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=postgres
+POSTGRES_DB=attendancesystem
+
+# ── Consul ────────────────────────────────────────────────
+CONSUL_HTTP_PORT=8500
+CONSUL_DNS_PORT=8600
+
+# ── RabbitMQ ──────────────────────────────────────────────
+RABBITMQ_PORT=5672
+RABBITMQ_MANAGEMENT_PORT=15672
+RABBITMQ_VHOST=/
+RABBITMQ_USER=${RABBITMQ_USER}
+RABBITMQ_PASSWORD=${RABBITMQ_PASSWORD}
+
+# ── RabbitMQ (mensageria entre suite/users/reports) ──────
+# Um vhost por serviço: quem consome é dono do vhost onde a fila mora.
+# Usuário "owner" tem acesso total ao próprio vhost; "writer" só publica
+# (write-only) no vhost de um serviço vizinho — ver rabbitmq/definitions.json.
+RABBITMQ_SUITE_VHOST=${RABBITMQ_SUITE_VHOST}
+RABBITMQ_USERS_VHOST=${RABBITMQ_USERS_VHOST}
+RABBITMQ_REPORTS_VHOST=${RABBITMQ_REPORTS_VHOST}
+
+RABBITMQ_SUITE_OWNER_USER=${RABBITMQ_SUITE_OWNER_USER}
+RABBITMQ_SUITE_OWNER_PASSWORD=${RABBITMQ_SUITE_OWNER_PASSWORD}
+RABBITMQ_USERS_OWNER_USER=${RABBITMQ_USERS_OWNER_USER}
+RABBITMQ_USERS_OWNER_PASSWORD=${RABBITMQ_USERS_OWNER_PASSWORD}
+RABBITMQ_REPORTS_OWNER_USER=${RABBITMQ_REPORTS_OWNER_USER}
+RABBITMQ_REPORTS_OWNER_PASSWORD=${RABBITMQ_REPORTS_OWNER_PASSWORD}
+
+RABBITMQ_SUITE_WRITER_USER=${RABBITMQ_SUITE_WRITER_USER}
+RABBITMQ_SUITE_WRITER_PASSWORD=${RABBITMQ_SUITE_WRITER_PASSWORD}
+RABBITMQ_USERS_WRITER_USER=${RABBITMQ_USERS_WRITER_USER}
+RABBITMQ_USERS_WRITER_PASSWORD=${RABBITMQ_USERS_WRITER_PASSWORD}
+RABBITMQ_REPORTS_WRITER_USER=${RABBITMQ_REPORTS_WRITER_USER}
+RABBITMQ_REPORTS_WRITER_PASSWORD=${RABBITMQ_REPORTS_WRITER_PASSWORD}
+
 # ── Sistema Base ──────────────────────────────────────────
 SYSTEM_BASE_CONN=${SYSTEM_BASE_CONN}
 SYSTEM_BASE_HOST=${SYSTEM_BASE_HOST}
@@ -446,68 +465,109 @@ INTERNAL_HOST=${INTERNAL_HOST}
 EXTERNAL_HOST=${EXTERNAL_HOST}
 
 # ── Backend ───────────────────────────────────────────────
+BACKEND_SUITE_API_INTERNAL_PORT=${BACKEND_SUITE_API_INTERNAL_PORT}
+BACKEND_SUITE_API_EXTERNAL_PORT=${BACKEND_SUITE_API_EXTERNAL_PORT}
+
 BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT=${BACKEND_ATTENDANCESYSTEM_API_INTERNAL_PORT}
 BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT=${BACKEND_ATTENDANCESYSTEM_API_EXTERNAL_PORT}
 
+BACKEND_PEOPLE_API_INTERNAL_PORT=${BACKEND_PEOPLE_API_INTERNAL_PORT}
+BACKEND_PEOPLE_API_EXTERNAL_PORT=${BACKEND_PEOPLE_API_EXTERNAL_PORT}
+
+BACKEND_ACCOUNT_API_INTERNAL_PORT=${BACKEND_ACCOUNT_API_INTERNAL_PORT}
+BACKEND_ACCOUNT_API_EXTERNAL_PORT=${BACKEND_ACCOUNT_API_EXTERNAL_PORT}
+
+BACKEND_REPORTS_API_INTERNAL_PORT=${BACKEND_REPORTS_API_INTERNAL_PORT}
+BACKEND_REPORTS_API_EXTERNAL_PORT=${BACKEND_REPORTS_API_EXTERNAL_PORT}
+
+BACKEND_USERS_API_INTERNAL_PORT=${BACKEND_USERS_API_INTERNAL_PORT}
+BACKEND_USERS_API_EXTERNAL_PORT=${BACKEND_USERS_API_EXTERNAL_PORT}
+
+BACKEND_TENANTS_API_INTERNAL_PORT=${BACKEND_TENANTS_API_INTERNAL_PORT}
+BACKEND_TENANTS_API_EXTERNAL_PORT=${BACKEND_TENANTS_API_EXTERNAL_PORT}
+
 BACKEND_ATTENDANCESYSTEM_API_APPLICATIONNAME=AttendanceSystem
 BACKEND_ATTENDANCESYSTEM_API_NAME=attendancesystem-api
 
 # ── Frontend ──────────────────────────────────────────────
+FRONTEND_SUITE_APP_INTERNAL_PORT=${FRONTEND_SUITE_APP_INTERNAL_PORT}
+FRONTEND_SUITE_APP_EXTERNAL_PORT=${FRONTEND_SUITE_APP_EXTERNAL_PORT}
+
 FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT=${FRONTEND_ATTENDANCESYSTEM_APP_INTERNAL_PORT}
 FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT=${FRONTEND_ATTENDANCESYSTEM_APP_EXTERNAL_PORT}
 
-# ── Portas de integração com outros módulos da suite ──────
+FRONTEND_PEOPLE_APP_INTERNAL_PORT=${FRONTEND_PEOPLE_APP_INTERNAL_PORT}
-FRONTEND_SUITE_APP_EXTERNAL_PORT=
+FRONTEND_PEOPLE_APP_EXTERNAL_PORT=${FRONTEND_PEOPLE_APP_EXTERNAL_PORT}
-FRONTEND_ACCOUNT_APP_EXTERNAL_PORT=
+
-FRONTEND_PEOPLE_APP_EXTERNAL_PORT=
+FRONTEND_ACCOUNT_APP_INTERNAL_PORT=${FRONTEND_ACCOUNT_APP_INTERNAL_PORT}
-BACKEND_SUITE_API_EXTERNAL_PORT=
+FRONTEND_ACCOUNT_APP_EXTERNAL_PORT=${FRONTEND_ACCOUNT_APP_EXTERNAL_PORT}
-BACKEND_PEOPLE_API_EXTERNAL_PORT=
+
-BACKEND_ACCOUNT_API_EXTERNAL_PORT=
+FRONTEND_REPORTS_APP_INTERNAL_PORT=${FRONTEND_REPORTS_APP_INTERNAL_PORT}
+FRONTEND_REPORTS_APP_EXTERNAL_PORT=${FRONTEND_REPORTS_APP_EXTERNAL_PORT}
+
+FRONTEND_USERS_APP_INTERNAL_PORT=${FRONTEND_USERS_APP_INTERNAL_PORT}
+FRONTEND_USERS_APP_EXTERNAL_PORT=${FRONTEND_USERS_APP_EXTERNAL_PORT}
+
+FRONTEND_TENANTS_APP_INTERNAL_PORT=${FRONTEND_TENANTS_APP_INTERNAL_PORT}
+FRONTEND_TENANTS_APP_EXTERNAL_PORT=${FRONTEND_TENANTS_APP_EXTERNAL_PORT}
 
 # ── Keepalive ─────────────────────────────────────────────
 KEEPALIVE_ATTENDANCE_SYSTEM_BACKEND_HOST=${KEEPALIVE_BACKEND}
 KEEPALIVE_ATTENDANCE_SYSTEM_FRONTEND_HOST=${KEEPALIVE_FRONTEND}
+
+KEEPALIVE_REPORTS_BACKEND_HOST=${KEEPALIVE_BACKEND_REPORTS}
+KEEPALIVE_REPORTS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_REPORTS}
+
+KEEPALIVE_USERS_BACKEND_HOST=${KEEPALIVE_BACKEND_USERS}
+KEEPALIVE_USERS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_USERS}
+
+KEEPALIVE_TENANTS_BACKEND_HOST=${KEEPALIVE_BACKEND_TENANTS}
+KEEPALIVE_TENANTS_FRONTEND_HOST=${KEEPALIVE_FRONTEND_TENANTS}
+
 EOF
   print_ok ".env.prod gerado"
 }
 
 # ══════════════════════════════════════════════════════════════
-# Carregar / inicializar .env.observability
+# Gerar definitions.json do RabbitMQ (vhosts/usuários/permissões)
 # ══════════════════════════════════════════════════════════════
 
-_observability_defaults() {
+generate_rabbitmq_definitions() {
-  local env_file="$1"
+  local BASE_DIR="$INSTALL_DIR"
-  cat > "$env_file" <<'EOF'
+  mkdir -p "$BASE_DIR/rabbitmq"
-SeventhLogs__CustomLevel__Warning__0=Microsoft.AspNetCore
+
-SeventhLogs__CustomLevel__Warning__1=Microsoft.AspNetCore.Hosting.Diagnostics
+  cat > "$BASE_DIR/rabbitmq/definitions.json" <<EOF
-SeventhLogs__CustomLevel__Warning__2=System.Net.Http.HttpClient.OtlpTraceExporter.ClientHandler
+{
-SeventhLogs__CustomLevel__Warning__3=System.Net.Http.HttpClient.OtlpTraceExporter.LogicalHandler
+  "vhosts": [
-EOF
+    {"name": "${RABBITMQ_SUITE_VHOST}"},
+    {"name": "${RABBITMQ_USERS_VHOST}"},
+    {"name": "${RABBITMQ_REPORTS_VHOST}"}
+  ],
+  "users": [
+    {"name": "${RABBITMQ_USER}", "password": "${RABBITMQ_PASSWORD}", "tags": ["administrator"]},
+    {"name": "${RABBITMQ_SUITE_OWNER_USER}", "password": "${RABBITMQ_SUITE_OWNER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_USERS_OWNER_USER}", "password": "${RABBITMQ_USERS_OWNER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_REPORTS_OWNER_USER}", "password": "${RABBITMQ_REPORTS_OWNER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_SUITE_WRITER_USER}", "password": "${RABBITMQ_SUITE_WRITER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_USERS_WRITER_USER}", "password": "${RABBITMQ_USERS_WRITER_PASSWORD}", "tags": []},
+    {"name": "${RABBITMQ_REPORTS_WRITER_USER}", "password": "${RABBITMQ_REPORTS_WRITER_PASSWORD}", "tags": []}
+  ],
+  "permissions": [
+    {"user": "${RABBITMQ_SUITE_OWNER_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_USERS_OWNER_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_REPORTS_OWNER_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+
+    {"user": "${RABBITMQ_SUITE_WRITER_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
+    {"user": "${RABBITMQ_USERS_WRITER_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
+    {"user": "${RABBITMQ_REPORTS_WRITER_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": "^$", "write": ".*", "read": "^$"},
+
+    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_SUITE_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_USERS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"},
+    {"user": "${RABBITMQ_USER}", "vhost": "${RABBITMQ_REPORTS_VHOST}", "configure": ".*", "write": ".*", "read": ".*"}
+  ]
 }
-
+EOF
-load_observability_env() {
+  print_ok "rabbitmq/definitions.json gerado"
-  local env_file="${INSTALL_DIR}/.env.observability"
-
-  if [ ! -f "$env_file" ]; then
-    _observability_defaults "$env_file"
-    print_ok ".env.observability criado com configurações padrão"
-    return
-  fi
-
-  print_warn "Configuração de observabilidade encontrada em ${env_file}"
-
-  if confirm "Deseja manter as configurações atuais?"; then
-    print_ok ".env.observability mantido sem alterações"
-    return
-  fi
-
-  if confirm "Não manter as configurações atuais do arquivo .env.observability vai redefinir para as configurações padrões, você realmente deseja fazer isso?"; then
-    print_ok ".env.observability mantido sem alterações"
-    return
-  fi  
-
-  _observability_defaults "$env_file"
-  print_ok ".env.observability redefinido para as configurações padrão"
 }
 
 # ══════════════════════════════════════════════════════════════
@@ -525,12 +585,15 @@ start_environment() {
   echo -e "  ║     ✅  Instalação concluída com sucesso!    ║"
   echo -e "  ╚══════════════════════════════════════════════╝${NC}"
   echo ""
-  echo -e "  Menu do usuário: Monitoramento V1"
+  echo -e "  Acesse o sistema em:"
+  echo -e "  ${CYAN}${BOLD}  ${SYSTEM_BASE_CONN}${NC}"
+  echo -e "  Menu do usuário: Monitoramento (beta)"
   echo ""
   echo -e "  Comandos úteis (dentro da pasta ${BOLD}${INSTALL_DIR}${NC}):"
   echo -e "    ${BOLD}make install${NC} → sobe o projeto"
   echo -e "    ${BOLD}make update${NC}  → atualiza o projeto"
   echo -e "    ${BOLD}make app${NC}   → sobe apenas a aplicação"
+  echo -e "    ${BOLD}make infra${NC} → sobe apenas a infra (MongoDB, PostgreSQL, Consul, RabbitMQ)"
   echo -e "    ${BOLD}make nuke-project${NC}  → limpa o projeto"
   echo -e "    ${BOLD}make nuke${NC}  → limpa tudo (cuidado!)"
   echo ""
@@ -543,15 +606,13 @@ start_environment() {
 main() {
   print_banner
   check_deps
-  ensure_docker_service
-  configure_docker_log_limit
   clone_repo
   load_existing_env   # detecta .env.prod existente
-  load_observability_env
   collect_config      # wizard com navegação
   show_summary        # resumo com menu de edição
-  generate_envs
 
+  generate_envs
+  generate_rabbitmq_definitions
 
   if confirm "Deseja subir o ambiente agora?"; then
     start_environment

rabbitmq/definitions.conf

@@ -0,0 +1 @@
+management.load_definitions = /etc/rabbitmq/definitions.json