# Deploy WhatsApp Inbox dari Gitea (Ubuntu)

Dokumen ini untuk deploy `whatsapp-inbox-platform` ke Ubuntu production dengan asumsi:

- PostgreSQL sudah terinstall
- Nginx sudah terinstall
- Gitea berjalan di port `3001`
- App domain: `app.zappcare.id`
- Port `3000` tidak dipakai (dalam panduan ini dipakai `3002`)

Source code proyek sudah ada di Git:

- `https://git.iptek.co/wirabasalamah/whatsapp-inbox-platform.git`

## 0) Persiapan dasar

Login sebagai user sudo di server:

```bash
ssh user@YOUR_SERVER_IP
```

Update sistem & install dependency dasar:

```bash
sudo apt update && sudo apt upgrade -y
sudo apt install -y curl ca-certificates git nginx postgresql postgresql-contrib
curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
sudo apt install -y nodejs
node -v
npm -v
```

## 1) Buat user & direktori aplikasi

```bash
sudo useradd --system --home /var/www/whatsapp-inbox --shell /usr/sbin/nologin whatsapp-inbox || true
sudo mkdir -p /var/www/whatsapp-inbox
sudo chown -R whatsapp-inbox:whatsapp-inbox /var/www/whatsapp-inbox
```

## 2) Buat DB PostgreSQL

```bash
sudo -u postgres psql
```

```sql
CREATE USER whatsapp_inbox WITH PASSWORD 'YOUR_DB_PASSWORD';
CREATE DATABASE whatsapp_inbox OWNER whatsapp_inbox;
\q
```

## 3) Clone source dari Gitea

```bash
sudo -u whatsapp-inbox git clone https://git.iptek.co/wirabasalamah/whatsapp-inbox-platform.git /var/www/whatsapp-inbox
cd /var/www/whatsapp-inbox
git checkout main
git remote -v
```

Catatan:
- jika prompt autentikasi muncul, gunakan token/credential Gitea Anda (username: `wira` atau email, token lebih aman daripada password).
- jangan simpan password Git di file lain di repo.

## 4) Install dependency

```bash
cd /var/www/whatsapp-inbox
sudo -u whatsapp-inbox npm ci
```

## 5) Setup environment `.env`

```bash
sudo -u whatsapp-inbox cp .env.example .env
sudo -u whatsapp-inbox nano .env
```

Minimal konfigurasi:

```env
NODE_ENV=production
HOST=127.0.0.1
PORT=3002

DATABASE_URL="postgresql://whatsapp_inbox:YOUR_DB_PASSWORD@127.0.0.1:5432/whatsapp_inbox?schema=public"
AUTH_SECRET="ganti_secret_acak_minimal_32_karakter"

APP_URL="https://app.zappcare.id"
NEXT_PUBLIC_APP_URL="https://app.zappcare.id"
OPS_BASE_URL="https://app.zappcare.id"

WHATSAPP_WEBHOOK_VERIFY_TOKEN="ganti_verify_token"
WHATSAPP_WEBHOOK_SECRET="ganti_webhook_secret"
WHATSAPP_API_TOKEN="ganti_meta_token"
WHATSAPP_API_VERSION="v22.0"
WHATSAPP_ALLOW_SIMULATED_SEND="false"
```

Tambahkan variabel lain sesuai kebutuhan operasi/retry dari `.env.example`.

## 6) Migrasi & seed

```bash
cd /var/www/whatsapp-inbox
sudo -u whatsapp-inbox npm run db:deploy
sudo -u whatsapp-inbox npm run db:seed
```

## 7) Uji jalur aplikasi (manual)

```bash
cd /var/www/whatsapp-inbox
sudo -u whatsapp-inbox npm run start -- --hostname 127.0.0.1 --port 3002
```

Di terminal lain:

```bash
curl -I http://127.0.0.1:3002
curl -s http://127.0.0.1:3002/api/health | cat
```

Tekan `Ctrl+C` setelah semua sehat lalu lanjut ke service/systemd.

## 8) Buat service systemd untuk app

Buat `/etc/systemd/system/whatsapp-inbox.service`:

```ini
[Unit]
Description=WhatsApp Inbox (Next.js)
After=network.target postgresql.service

[Service]
Type=simple
User=whatsapp-inbox
Group=whatsapp-inbox
WorkingDirectory=/var/www/whatsapp-inbox
EnvironmentFile=/var/www/whatsapp-inbox/.env
ExecStart=/usr/bin/npm run start -- --hostname 127.0.0.1 --port 3002
Restart=always
RestartSec=5
LimitNOFILE=65535

[Install]
WantedBy=multi-user.target
```

Enable:

```bash
sudo systemctl daemon-reload
sudo systemctl enable --now whatsapp-inbox
sudo systemctl status whatsapp-inbox
```

## 9) Buat service retry worker

Buat `/etc/systemd/system/whatsapp-inbox-retry.service`:

```ini
[Unit]
Description=WhatsApp Inbox Campaign Retry Daemon
After=network.target whatsapp-inbox.service

[Service]
Type=simple
User=whatsapp-inbox
Group=whatsapp-inbox
WorkingDirectory=/var/www/whatsapp-inbox
EnvironmentFile=/var/www/whatsapp-inbox/.env
ExecStart=/usr/bin/npm run job:campaign-retry:daemon
Restart=always
RestartSec=5

[Install]
WantedBy=multi-user.target
```

Enable:

```bash
sudo systemctl daemon-reload
sudo systemctl enable --now whatsapp-inbox-retry
sudo systemctl status whatsapp-inbox-retry
```

## 10) Konfigurasi Nginx + HTTPS ke app.zappcare.id

Buat `/etc/nginx/sites-available/app.zappcare.id`:

```nginx
server {
    listen 80;
    server_name app.zappcare.id;
    location /.well-known/acme-challenge/ {
        root /var/www/html;
    }
    location / {
        return 301 https://$host$request_uri;
    }
}

server {
    listen 443 ssl http2;
    server_name app.zappcare.id;
    client_max_body_size 20m;
    proxy_buffering off;

    ssl_certificate     /etc/letsencrypt/live/app.zappcare.id/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/app.zappcare.id/privkey.pem;

    location / {
        proxy_pass http://127.0.0.1:3002;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout 120s;
        proxy_send_timeout 120s;
    }
}
```

Aktifkan dan reload:

```bash
sudo ln -s /etc/nginx/sites-available/app.zappcare.id /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl reload nginx
```

Install certbot dan issue SSL:

```bash
sudo apt install -y certbot python3-certbot-nginx
sudo certbot --nginx -d app.zappcare.id
```

## 11) Validasi akhir

```bash
curl -I https://app.zappcare.id
curl -s https://app.zappcare.id/api/health | cat
APP_URL=https://app.zappcare.id NEXT_PUBLIC_APP_URL=https://app.zappcare.id OPS_BASE_URL=https://app.zappcare.id npm run ops:readiness
APP_URL=https://app.zappcare.id NEXT_PUBLIC_APP_URL=https://app.zappcare.id OPS_BASE_URL=https://app.zappcare.id npm run ops:smoke
```

## 12) Update dan rollback ringan

Update:

```bash
cd /var/www/whatsapp-inbox
git pull origin main
sudo -u whatsapp-inbox npm ci
sudo -u whatsapp-inbox npm run db:deploy
sudo -u whatsapp-inbox npm run ci:verify
sudo systemctl restart whatsapp-inbox
sudo systemctl restart whatsapp-inbox-retry
```

Rollback cepat (jika perlu):

```bash
cd /var/www/whatsapp-inbox
git log --oneline -n 5
git checkout <commit-id-sebelumnya>
sudo systemctl restart whatsapp-inbox
```

## 13) Catatan produksi

- App service berjalan di `127.0.0.1:3002` (internal), Nginx mengekspose ke `https://app.zappcare.id`.
- Tidak menyimpan secrets di git.
- Gunakan `npm run ops:readiness` secara berkala setelah deploy/reboot.