feat(prod): production deployment fixes - env loader, mongoose module, CSS static files, security hardening, PDF export, new UI components
This commit is contained in:
Rafif-Riqullah-Siregar committed
1 parent
a403f752f3
commit
46f33eb088
69 files changed
+7367
-744
No files matched your search
@@ -0,0 +1,174 @@
|
||||
// scripts/restore-proxy.js
|
||||
// Pulihkan proxy.php + htaccess yang rusak via SFTP
|
||||
'use strict';
|
||||
|
||||
const SftpClient = require('ssh2-sftp-client');
|
||||
const { Client } = require('ssh2');
|
||||
const https = require('https');
|
||||
|
||||
const CONFIG = {
|
||||
host: '103.185.47.52', port: 2222,
|
||||
username: 'adminbackend', password: 'htEo7x6LsBQiEHHH',
|
||||
readyTimeout: 60000
|
||||
};
|
||||
|
||||
const ROOT = '/home/adminbackend/web/demoplace.my.id/public_html';
|
||||
|
||||
// ── PHP Proxy (forward semua ke Next.js port 3000) ──────────────────────
|
||||
const PROXY_PHP = `<?php
|
||||
/**
|
||||
* BackOne DPI - PHP Reverse Proxy
|
||||
* Meneruskan semua request ke Next.js port 3000
|
||||
*/
|
||||
define('NEXTJS_URL', 'http://127.0.0.1:3000');
|
||||
|
||||
$uri = $_SERVER['REQUEST_URI'] ?? '/';
|
||||
$method = $_SERVER['REQUEST_METHOD'] ?? 'GET';
|
||||
$target = NEXTJS_URL . $uri;
|
||||
|
||||
$fwdHeaders = [
|
||||
'X-Forwarded-For: ' . ($_SERVER['HTTP_X_FORWARDED_FOR'] ?? $_SERVER['REMOTE_ADDR'] ?? '127.0.0.1'),
|
||||
'X-Forwarded-Proto: https',
|
||||
'X-Real-IP: ' . ($_SERVER['REMOTE_ADDR'] ?? ''),
|
||||
'Host: ' . ($_SERVER['HTTP_HOST'] ?? 'demoplace.my.id'),
|
||||
];
|
||||
|
||||
$allHeaders = getallheaders() ?: [];
|
||||
$skip = ['host','connection','transfer-encoding','keep-alive','content-length'];
|
||||
foreach ($allHeaders as $name => $value) {
|
||||
if (!in_array(strtolower($name), $skip)) {
|
||||
$fwdHeaders[] = "$name: $value";
|
||||
}
|
||||
}
|
||||
|
||||
$body = in_array($method, ['POST','PUT','PATCH','DELETE']) ? file_get_contents('php://input') : null;
|
||||
|
||||
$ch = curl_init();
|
||||
curl_setopt_array($ch, [
|
||||
CURLOPT_URL => $target,
|
||||
CURLOPT_CUSTOMREQUEST => $method,
|
||||
CURLOPT_HTTPHEADER => $fwdHeaders,
|
||||
CURLOPT_POSTFIELDS => $body,
|
||||
CURLOPT_RETURNTRANSFER => true,
|
||||
CURLOPT_HEADER => true,
|
||||
CURLOPT_FOLLOWLOCATION => false,
|
||||
CURLOPT_TIMEOUT => 30,
|
||||
CURLOPT_CONNECTTIMEOUT => 5,
|
||||
CURLOPT_ENCODING => '',
|
||||
]);
|
||||
|
||||
$response = curl_exec($ch);
|
||||
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
||||
$headerSize = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
|
||||
$curlError = curl_error($ch);
|
||||
curl_close($ch);
|
||||
|
||||
if ($response === false) {
|
||||
http_response_code(502);
|
||||
header('Content-Type: text/plain');
|
||||
echo 'BackOne: Gagal terhubung ke Next.js. Error: ' . $curlError;
|
||||
exit;
|
||||
}
|
||||
|
||||
$responseHeaders = substr($response, 0, $headerSize);
|
||||
$responseBody = substr($response, $headerSize);
|
||||
|
||||
http_response_code($httpCode ?: 200);
|
||||
|
||||
$skipRes = ['transfer-encoding','connection','keep-alive','content-encoding'];
|
||||
foreach (explode("\\r\\n", $responseHeaders) as $header) {
|
||||
$header = trim($header);
|
||||
if (empty($header) || preg_match('/^HTTP\\//i', $header)) continue;
|
||||
$colonPos = strpos($header, ':');
|
||||
if ($colonPos === false) continue;
|
||||
$headerName = strtolower(trim(substr($header, 0, $colonPos)));
|
||||
if (in_array($headerName, $skipRes)) continue;
|
||||
header($header, false);
|
||||
}
|
||||
|
||||
echo $responseBody;
|
||||
`;
|
||||
|
||||
// ── .htaccess (routing ke proxy.php) ──────────────────────────────────
|
||||
const HTACCESS = `# BackOne DPI — Apache .htaccess
|
||||
# Redirect HTTP ke HTTPS
|
||||
RewriteEngine On
|
||||
RewriteCond %{HTTPS} !=on
|
||||
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
|
||||
|
||||
# Static Next.js files: sajikan langsung dari disk
|
||||
RewriteCond %{REQUEST_FILENAME} -f
|
||||
RewriteRule ^ - [L]
|
||||
|
||||
# Semua request lain: teruskan ke PHP proxy (Next.js port 3000)
|
||||
RewriteRule ^(.*)$ /proxy.php [L,QSA]
|
||||
`;
|
||||
|
||||
async function main() {
|
||||
console.log('\n╔══════════════════════════════════════════════════════════╗');
|
||||
console.log('║ BackOne DPI — Pulihkan proxy.php & .htaccess ║');
|
||||
console.log('╚══════════════════════════════════════════════════════════╝\n');
|
||||
|
||||
// ── Upload via SFTP ──────────────────────────────────────────────────
|
||||
console.log('▶ Upload proxy.php dan .htaccess via SFTP...');
|
||||
const sftp = new SftpClient();
|
||||
await sftp.connect(CONFIG);
|
||||
|
||||
await sftp.put(Buffer.from(PROXY_PHP, 'utf8'), `${ROOT}/proxy.php`);
|
||||
console.log(' ✅ proxy.php diupload');
|
||||
|
||||
await sftp.put(Buffer.from(HTACCESS, 'utf8'), `${ROOT}/.htaccess`);
|
||||
console.log(' ✅ .htaccess diupload (dengan newline yang benar)');
|
||||
|
||||
await sftp.end();
|
||||
|
||||
// ── Verifikasi via SSH ───────────────────────────────────────────────
|
||||
console.log('\n▶ Verifikasi di server...');
|
||||
const conn = new Client();
|
||||
await new Promise((r, j) => { conn.on('ready', r).on('error', j).connect(CONFIG); });
|
||||
console.log('[SSH] Terhubung!\n');
|
||||
|
||||
await new Promise((resolve) => {
|
||||
conn.exec(
|
||||
`echo "=== .htaccess ===" && cat ${ROOT}/.htaccess && ` +
|
||||
`echo "" && echo "=== proxy.php (5 baris awal) ===" && head -5 ${ROOT}/proxy.php && ` +
|
||||
`echo "" && echo "=== Test port 3000 ===" && curl -sk -o /dev/null -w "HTTP %{http_code}" http://127.0.0.1:3000/login && echo "" && ` +
|
||||
`echo "=== Test port 8009/8080 ===" && curl -sk -o /dev/null -w "Apache 8009: %{http_code}" http://127.0.0.1:8009/ && echo "" && curl -sk -o /dev/null -w "Apache 8080: %{http_code}" http://103.185.47.52:8080/login && echo ""`,
|
||||
(err, s) => {
|
||||
if (err) { resolve(); return; }
|
||||
s.on('data', d => process.stdout.write(d.toString()))
|
||||
.stderr.on('data', d => process.stdout.write(d.toString()))
|
||||
.on('close', () => { resolve(); });
|
||||
}
|
||||
);
|
||||
});
|
||||
|
||||
conn.end();
|
||||
|
||||
// ── Test external ────────────────────────────────────────────────────
|
||||
console.log('\n▶ Test domain dari luar (tunggu 3 detik)...');
|
||||
await new Promise(r => setTimeout(r, 3000));
|
||||
|
||||
for (const path of ['/', '/login', '/api/health']) {
|
||||
const r = await new Promise(resolve => {
|
||||
const req = https.get(`https://demoplace.my.id${path}`,
|
||||
{ timeout: 12000, rejectUnauthorized: false },
|
||||
res => {
|
||||
let body = '';
|
||||
res.on('data', d => body += d);
|
||||
res.on('end', () => resolve({ status: res.statusCode, body: body.substring(0, 80), location: res.headers.location }));
|
||||
}
|
||||
);
|
||||
req.on('error', e => resolve({ status: 0, error: e.message }));
|
||||
req.on('timeout', () => { req.destroy(); resolve({ status: 0, error: 'timeout' }); });
|
||||
});
|
||||
|
||||
const icon = r.status === 200 ? '✅' : r.status === 301 || r.status === 307 ? '↩️ ' : '❌';
|
||||
console.log(` ${icon} https://demoplace.my.id${path} → HTTP ${r.status} ${r.error || ''}`);
|
||||
if (r.location) console.log(` → ${r.location}`);
|
||||
}
|
||||
|
||||
console.log('\n✅ Selesai! Refresh https://demoplace.my.id/login\n');
|
||||
}
|
||||
|
||||
main().catch(err => { console.error('[FATAL]', err.message); process.exit(1); });
|
||||
Reference in new issue
Block a user