docs: add production install guide from git source
This commit is contained in:
Wira Basalamah
281
INSTALL-UBUNTU-APP-ZAPPCARE-FROM-GIT.md
Normal file
281
INSTALL-UBUNTU-APP-ZAPPCARE-FROM-GIT.md
Normal file
@ -0,0 +1,281 @@
|
||||
# Deploy WhatsApp Inbox dari Gitea (Ubuntu)
|
||||
|
||||
Dokumen ini untuk deploy `whatsapp-inbox-platform` ke Ubuntu production dengan asumsi:
|
||||
|
||||
- PostgreSQL sudah terinstall
|
||||
- Nginx sudah terinstall
|
||||
- Gitea berjalan di port `3001`
|
||||
- App domain: `app.zappcare.id`
|
||||
- Port `3000` tidak dipakai (dalam panduan ini dipakai `3002`)
|
||||
|
||||
Source code proyek sudah ada di Git:
|
||||
|
||||
- `https://git.iptek.co/wirabasalamah/whatsapp-inbox-platform.git`
|
||||
|
||||
## 0) Persiapan dasar
|
||||
|
||||
Login sebagai user sudo di server:
|
||||
|
||||
```bash
|
||||
ssh user@YOUR_SERVER_IP
|
||||
```
|
||||
|
||||
Update sistem & install dependency dasar:
|
||||
|
||||
```bash
|
||||
sudo apt update && sudo apt upgrade -y
|
||||
sudo apt install -y curl ca-certificates git nginx postgresql postgresql-contrib
|
||||
curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
|
||||
sudo apt install -y nodejs
|
||||
node -v
|
||||
npm -v
|
||||
```
|
||||
|
||||
## 1) Buat user & direktori aplikasi
|
||||
|
||||
```bash
|
||||
sudo useradd --system --home /var/www/whatsapp-inbox --shell /usr/sbin/nologin whatsapp-inbox || true
|
||||
sudo mkdir -p /var/www/whatsapp-inbox
|
||||
sudo chown -R whatsapp-inbox:whatsapp-inbox /var/www/whatsapp-inbox
|
||||
```
|
||||
|
||||
## 2) Buat DB PostgreSQL
|
||||
|
||||
```bash
|
||||
sudo -u postgres psql
|
||||
```
|
||||
|
||||
```sql
|
||||
CREATE USER whatsapp_inbox WITH PASSWORD 'YOUR_DB_PASSWORD';
|
||||
CREATE DATABASE whatsapp_inbox OWNER whatsapp_inbox;
|
||||
\q
|
||||
```
|
||||
|
||||
## 3) Clone source dari Gitea
|
||||
|
||||
```bash
|
||||
sudo -u whatsapp-inbox git clone https://git.iptek.co/wirabasalamah/whatsapp-inbox-platform.git /var/www/whatsapp-inbox
|
||||
cd /var/www/whatsapp-inbox
|
||||
git checkout main
|
||||
git remote -v
|
||||
```
|
||||
|
||||
Catatan:
|
||||
- jika prompt autentikasi muncul, gunakan token/credential Gitea Anda (username: `wira` atau email, token lebih aman daripada password).
|
||||
- jangan simpan password Git di file lain di repo.
|
||||
|
||||
## 4) Install dependency
|
||||
|
||||
```bash
|
||||
cd /var/www/whatsapp-inbox
|
||||
sudo -u whatsapp-inbox npm ci
|
||||
```
|
||||
|
||||
## 5) Setup environment `.env`
|
||||
|
||||
```bash
|
||||
sudo -u whatsapp-inbox cp .env.example .env
|
||||
sudo -u whatsapp-inbox nano .env
|
||||
```
|
||||
|
||||
Minimal konfigurasi:
|
||||
|
||||
```env
|
||||
NODE_ENV=production
|
||||
HOST=127.0.0.1
|
||||
PORT=3002
|
||||
|
||||
DATABASE_URL="postgresql://whatsapp_inbox:YOUR_DB_PASSWORD@127.0.0.1:5432/whatsapp_inbox?schema=public"
|
||||
AUTH_SECRET="ganti_secret_acak_minimal_32_karakter"
|
||||
|
||||
APP_URL="https://app.zappcare.id"
|
||||
NEXT_PUBLIC_APP_URL="https://app.zappcare.id"
|
||||
OPS_BASE_URL="https://app.zappcare.id"
|
||||
|
||||
WHATSAPP_WEBHOOK_VERIFY_TOKEN="ganti_verify_token"
|
||||
WHATSAPP_WEBHOOK_SECRET="ganti_webhook_secret"
|
||||
WHATSAPP_API_TOKEN="ganti_meta_token"
|
||||
WHATSAPP_API_VERSION="v22.0"
|
||||
WHATSAPP_ALLOW_SIMULATED_SEND="false"
|
||||
```
|
||||
|
||||
Tambahkan variabel lain sesuai kebutuhan operasi/retry dari `.env.example`.
|
||||
|
||||
## 6) Migrasi & seed
|
||||
|
||||
```bash
|
||||
cd /var/www/whatsapp-inbox
|
||||
sudo -u whatsapp-inbox npm run db:deploy
|
||||
sudo -u whatsapp-inbox npm run db:seed
|
||||
```
|
||||
|
||||
## 7) Uji jalur aplikasi (manual)
|
||||
|
||||
```bash
|
||||
cd /var/www/whatsapp-inbox
|
||||
sudo -u whatsapp-inbox npm run start -- --hostname 127.0.0.1 --port 3002
|
||||
```
|
||||
|
||||
Di terminal lain:
|
||||
|
||||
```bash
|
||||
curl -I http://127.0.0.1:3002
|
||||
curl -s http://127.0.0.1:3002/api/health | cat
|
||||
```
|
||||
|
||||
Tekan `Ctrl+C` setelah semua sehat lalu lanjut ke service/systemd.
|
||||
|
||||
## 8) Buat service systemd untuk app
|
||||
|
||||
Buat `/etc/systemd/system/whatsapp-inbox.service`:
|
||||
|
||||
```ini
|
||||
[Unit]
|
||||
Description=WhatsApp Inbox (Next.js)
|
||||
After=network.target postgresql.service
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=whatsapp-inbox
|
||||
Group=whatsapp-inbox
|
||||
WorkingDirectory=/var/www/whatsapp-inbox
|
||||
EnvironmentFile=/var/www/whatsapp-inbox/.env
|
||||
ExecStart=/usr/bin/npm run start -- --hostname 127.0.0.1 --port 3002
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
LimitNOFILE=65535
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
```
|
||||
|
||||
Enable:
|
||||
|
||||
```bash
|
||||
sudo systemctl daemon-reload
|
||||
sudo systemctl enable --now whatsapp-inbox
|
||||
sudo systemctl status whatsapp-inbox
|
||||
```
|
||||
|
||||
## 9) Buat service retry worker
|
||||
|
||||
Buat `/etc/systemd/system/whatsapp-inbox-retry.service`:
|
||||
|
||||
```ini
|
||||
[Unit]
|
||||
Description=WhatsApp Inbox Campaign Retry Daemon
|
||||
After=network.target whatsapp-inbox.service
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=whatsapp-inbox
|
||||
Group=whatsapp-inbox
|
||||
WorkingDirectory=/var/www/whatsapp-inbox
|
||||
EnvironmentFile=/var/www/whatsapp-inbox/.env
|
||||
ExecStart=/usr/bin/npm run job:campaign-retry:daemon
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
```
|
||||
|
||||
Enable:
|
||||
|
||||
```bash
|
||||
sudo systemctl daemon-reload
|
||||
sudo systemctl enable --now whatsapp-inbox-retry
|
||||
sudo systemctl status whatsapp-inbox-retry
|
||||
```
|
||||
|
||||
## 10) Konfigurasi Nginx + HTTPS ke app.zappcare.id
|
||||
|
||||
Buat `/etc/nginx/sites-available/app.zappcare.id`:
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 80;
|
||||
server_name app.zappcare.id;
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/html;
|
||||
}
|
||||
location / {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
}
|
||||
|
||||
server {
|
||||
listen 443 ssl http2;
|
||||
server_name app.zappcare.id;
|
||||
client_max_body_size 20m;
|
||||
proxy_buffering off;
|
||||
|
||||
ssl_certificate /etc/letsencrypt/live/app.zappcare.id/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/app.zappcare.id/privkey.pem;
|
||||
|
||||
location / {
|
||||
proxy_pass http://127.0.0.1:3002;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Connection "";
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_read_timeout 120s;
|
||||
proxy_send_timeout 120s;
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
Aktifkan dan reload:
|
||||
|
||||
```bash
|
||||
sudo ln -s /etc/nginx/sites-available/app.zappcare.id /etc/nginx/sites-enabled/
|
||||
sudo nginx -t
|
||||
sudo systemctl reload nginx
|
||||
```
|
||||
|
||||
Install certbot dan issue SSL:
|
||||
|
||||
```bash
|
||||
sudo apt install -y certbot python3-certbot-nginx
|
||||
sudo certbot --nginx -d app.zappcare.id
|
||||
```
|
||||
|
||||
## 11) Validasi akhir
|
||||
|
||||
```bash
|
||||
curl -I https://app.zappcare.id
|
||||
curl -s https://app.zappcare.id/api/health | cat
|
||||
APP_URL=https://app.zappcare.id NEXT_PUBLIC_APP_URL=https://app.zappcare.id OPS_BASE_URL=https://app.zappcare.id npm run ops:readiness
|
||||
APP_URL=https://app.zappcare.id NEXT_PUBLIC_APP_URL=https://app.zappcare.id OPS_BASE_URL=https://app.zappcare.id npm run ops:smoke
|
||||
```
|
||||
|
||||
## 12) Update dan rollback ringan
|
||||
|
||||
Update:
|
||||
|
||||
```bash
|
||||
cd /var/www/whatsapp-inbox
|
||||
git pull origin main
|
||||
sudo -u whatsapp-inbox npm ci
|
||||
sudo -u whatsapp-inbox npm run db:deploy
|
||||
sudo -u whatsapp-inbox npm run ci:verify
|
||||
sudo systemctl restart whatsapp-inbox
|
||||
sudo systemctl restart whatsapp-inbox-retry
|
||||
```
|
||||
|
||||
Rollback cepat (jika perlu):
|
||||
|
||||
```bash
|
||||
cd /var/www/whatsapp-inbox
|
||||
git log --oneline -n 5
|
||||
git checkout <commit-id-sebelumnya>
|
||||
sudo systemctl restart whatsapp-inbox
|
||||
```
|
||||
|
||||
## 13) Catatan produksi
|
||||
|
||||
- App service berjalan di `127.0.0.1:3002` (internal), Nginx mengekspose ke `https://app.zappcare.id`.
|
||||
- Tidak menyimpan secrets di git.
|
||||
- Gunakan `npm run ops:readiness` secara berkala setelah deploy/reboot.
|
||||
Reference in New Issue
Block a user