feat: add Superset BI (profile bi) — bi.suite.onboardbi.com.br

docker-compose.prod.yml

@@ -232,6 +232,46 @@ services:
       - "traefik.http.services.webui.loadbalancer.server.port=8080"
     profiles: [ai]
 
+  # ── Superset BI ───────────────────────────────────────────────────────────────
+  superset:
+    image: apache/superset:latest
+    restart: always
+    environment:
+      SUPERSET_SECRET_KEY: ${SUPERSET_SECRET_KEY}
+      SQLALCHEMY_DATABASE_URI: postgresql+psycopg2://${PGUSER:-arcadia}:${PGPASSWORD}@db:5432/superset
+      SUPERSET_LOAD_EXAMPLES: "no"
+      SUPERSET_ADMIN_USERNAME: ${SUPERSET_ADMIN_USERNAME:-admin}
+      SUPERSET_ADMIN_PASSWORD: ${SUPERSET_ADMIN_PASSWORD}
+      SUPERSET_ADMIN_EMAIL: ${SUPERSET_ADMIN_EMAIL:-admin@onboardbi.com.br}
+    command: >
+      /bin/sh -c "
+        superset db upgrade &&
+        superset fab create-admin
+          --username \"$$SUPERSET_ADMIN_USERNAME\"
+          --firstname Arcadia --lastname Admin
+          --email \"$$SUPERSET_ADMIN_EMAIL\"
+          --password \"$$SUPERSET_ADMIN_PASSWORD\" || true &&
+        superset init &&
+        gunicorn --bind 0.0.0.0:8088 --workers 2 --timeout 120 'superset.app:create_app()'
+      "
+    volumes:
+      - superset_home:/app/superset_home
+    depends_on:
+      db:
+        condition: service_healthy
+    networks:
+      - arcadia-internal
+      - coolify
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=coolify"
+      - "traefik.http.routers.superset.entrypoints=https"
+      - "traefik.http.routers.superset.rule=Host(`bi.${DOMAIN}`)"
+      - "traefik.http.routers.superset.tls=true"
+      - "traefik.http.routers.superset.tls.certresolver=letsencrypt"
+      - "traefik.http.services.superset.loadbalancer.server.port=8088"
+    profiles: [bi]
+
 networks:
   arcadia-internal:
     driver: bridge
@@ -243,3 +283,4 @@ volumes:
   redis_data:
   ollama_models:
   open_webui_data:
+  superset_home: