From 64c413d131a2e21ed1bc4621ddcf3301fb8c361b Mon Sep 17 00:00:00 2001
From: root <root@arcadia-dev-01.csf2cloud.internal>
Date: Tue, 17 Mar 2026 11:33:24 -0300
Subject: [PATCH] =?UTF-8?q?feat:=20add=20Superset=20BI=20(profile=20bi)=20?=
 =?UTF-8?q?=E2=80=94=20bi.suite.onboardbi.com.br?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docker-compose.prod.yml | 41 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)

diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index ddb2cd6..2d8ec72 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -232,6 +232,46 @@ services:
       - "traefik.http.services.webui.loadbalancer.server.port=8080"
     profiles: [ai]
 
+  # ── Superset BI ───────────────────────────────────────────────────────────────
+  superset:
+    image: apache/superset:latest
+    restart: always
+    environment:
+      SUPERSET_SECRET_KEY: ${SUPERSET_SECRET_KEY}
+      SQLALCHEMY_DATABASE_URI: postgresql+psycopg2://${PGUSER:-arcadia}:${PGPASSWORD}@db:5432/superset
+      SUPERSET_LOAD_EXAMPLES: "no"
+      SUPERSET_ADMIN_USERNAME: ${SUPERSET_ADMIN_USERNAME:-admin}
+      SUPERSET_ADMIN_PASSWORD: ${SUPERSET_ADMIN_PASSWORD}
+      SUPERSET_ADMIN_EMAIL: ${SUPERSET_ADMIN_EMAIL:-admin@onboardbi.com.br}
+    command: >
+      /bin/sh -c "
+        superset db upgrade &&
+        superset fab create-admin
+          --username \"$$SUPERSET_ADMIN_USERNAME\"
+          --firstname Arcadia --lastname Admin
+          --email \"$$SUPERSET_ADMIN_EMAIL\"
+          --password \"$$SUPERSET_ADMIN_PASSWORD\" || true &&
+        superset init &&
+        gunicorn --bind 0.0.0.0:8088 --workers 2 --timeout 120 'superset.app:create_app()'
+      "
+    volumes:
+      - superset_home:/app/superset_home
+    depends_on:
+      db:
+        condition: service_healthy
+    networks:
+      - arcadia-internal
+      - coolify
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=coolify"
+      - "traefik.http.routers.superset.entrypoints=https"
+      - "traefik.http.routers.superset.rule=Host(`bi.${DOMAIN}`)"
+      - "traefik.http.routers.superset.tls=true"
+      - "traefik.http.routers.superset.tls.certresolver=letsencrypt"
+      - "traefik.http.services.superset.loadbalancer.server.port=8088"
+    profiles: [bi]
+
 networks:
   arcadia-internal:
     driver: bridge
@@ -243,3 +283,4 @@ volumes:
   redis_data:
   ollama_models:
   open_webui_data:
+  superset_home: