feat: aggregate dashboard metrics server-side

convex/crons.ts

@@ -3,12 +3,17 @@ import { api } from "./_generated/api"
 
 const crons = cronJobs()
 
+// Keep the handler available but only register it when explicitly enabled in Convex env.
+const reportsCronEnabled = process.env.REPORTS_CRON_ENABLED === "true"
+
+if (reportsCronEnabled) {
   crons.interval(
     "report-export-runner",
     { minutes: 15 },
     api.reports.triggerScheduledExports,
     {}
   )
+}
 
 crons.daily(
   "auto-pause-internal-lunch",

convex/schema.ts

@@ -726,4 +726,21 @@ export default defineSchema({
     .index("by_tenant_company", ["tenantId", "companyId"])
     .index("by_tenant_default", ["tenantId", "isDefault"])
     .index("by_tenant", ["tenantId"]),
+
+  analyticsCache: defineTable({
+    tenantId: v.string(),
+    cacheKey: v.string(),
+    payload: v.any(),
+    expiresAt: v.number(),
+    _ttl: v.optional(v.number()),
+  })
+    .index("by_key", ["tenantId", "cacheKey"]),
+
+  analyticsLocks: defineTable({
+    tenantId: v.string(),
+    cacheKey: v.string(),
+    expiresAt: v.number(),
+    _ttl: v.optional(v.number()),
+  })
+    .index("by_key", ["tenantId", "cacheKey"]),
 });

stack.yml

@@ -26,6 +26,8 @@ services:
       NEXT_PUBLIC_APP_URL: "${NEXT_PUBLIC_APP_URL}"
       BETTER_AUTH_URL: "${BETTER_AUTH_URL}"
       BETTER_AUTH_SECRET: "${BETTER_AUTH_SECRET}"
+      REPORTS_CRON_SECRET: "${REPORTS_CRON_SECRET}"
+      REPORTS_CRON_BASE_URL: "${REPORTS_CRON_BASE_URL}"
       # Mantém o SQLite fora do repositório
       DATABASE_URL: "file:/app/data/db.sqlite"
       # Usado para forçar novo rollout a cada deploy (setado pelo CI)
@@ -76,6 +78,9 @@ services:
       - MACHINE_PROVISIONING_SECRET=${MACHINE_PROVISIONING_SECRET}
       - MACHINE_TOKEN_TTL_MS=${MACHINE_TOKEN_TTL_MS:-2592000000}
       - FLEET_SYNC_SECRET=${FLEET_SYNC_SECRET:-}
+      - REPORTS_CRON_SECRET=${REPORTS_CRON_SECRET}
+      - REPORTS_CRON_BASE_URL=${REPORTS_CRON_BASE_URL}
+      - REPORTS_CRON_ENABLED=${REPORTS_CRON_ENABLED:-false}
     deploy:
       mode: replicated
       replicas: 1
@@ -85,8 +90,9 @@ services:
         failure_action: rollback
       resources:
         limits:
-          # Convex vinha sendo finalizado por OOM (ExitCode 137) com limite de 5G.
-          # Aumentamos para 6G para aproveitar melhor os 8G da VPS sem mudar a infra.
+          # Limite conservador para evitar que o backend afete o host inteiro.
+          memory: "12G"
+        reservations:
           memory: "6G"
       restart_policy:
         condition: any
@@ -105,10 +111,10 @@ services:
       - traefik_public
     healthcheck:
       test: ["CMD-SHELL", "curl -sf http://localhost:3210/version >/dev/null || exit 1"]
-      interval: 10s
+      interval: 30s
       timeout: 10s
-      retries: 5
-      start_period: 20s
+      retries: 10
+      start_period: 120s
 
   convex_dashboard:
     image: ghcr.io/get-convex/convex-dashboard:latest