debesocial/biiproject-kit-v1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
3baf631b0bfbf333024afe1bbcf9cb39265bc296
biiproject-kit-v1/TECH_STACK.md
T

15 KiB
Raw Blame History

Tech Stack

Daftar lengkap teknologi yang dipakai di proyek ini, beserta penjelasan singkat kegunaannya.

1. Runtime & Bahasa

Teknologi Versi Kegunaan
PHP 8.2+ Bahasa utama backend. Kelas utility pakai declare(strict_types=1).
Node.js 20+ Build asset frontend (Vite) + tooling mobile
PostgreSQL 15+ Database relasional utama (ACID-compliant). Skema pakai FK + cascade penuh.
Redis 7.x Cache, session store, queue, broadcast driver

2. Framework Inti

Package Versi Kegunaan
laravel/framework ^13.0 Framework PHP utama (routing, ORM, middleware, dll)
laravel/sanctum ^4.0 Autentikasi API berbasis token untuk mobile app
laravel/socialite ^5.24 OAuth login (Google, Facebook, GitHub)
laravel/reverb ^1.10 WebSocket server native untuk notifikasi real-time
laravel/pulse ^1.7 Monitoring performa app (request, queue, cache, slow queries)
laravel/horizon ^5.46 Queue dashboard (Redis-backed)
laravel/breeze ^2.3 Scaffolding autentikasi (login, register, reset password)
laravel/tinker ^3.0 REPL interaktif untuk debugging via terminal

3. Database & Storage

Package Versi Kegunaan
predis/predis ^3.4 Client PHP untuk Redis (PSR-compliant)
masbug/flysystem-google-drive-ext ^2.5 Driver Flysystem untuk Google Drive (backup)

Driver S3 sudah built-in di Laravel — cukup set FILESYSTEM_DISK=s3 di .env.

Skema database

  • 40+ tabel, semua bermigrasi (lihat database/migrations/).
  • FK constraint penuh: audit created_by/updated_by → users(id) ON DELETE SET NULL; data milik user → ON DELETE CASCADE (lihat 2026_05_14_110000_add_fk_to_audit_columns.php).
  • Composite indexes pada tabel hot (password_histories, system_setting_revisions, notifications) — lihat 2026_05_14_100000_add_performance_indexes.php.
  • Data retention otomatis via Laravel Prunable trait pada 8 model + telescope:prune + activitylog:clean. Retention policy lengkap ada di SECURITY.md.

4. Autentikasi & Keamanan

Package Versi Kegunaan
laragear/webauthn ^5.0 Passkey / biometric login (FIDO2/WebAuthn) — ⚠️ marked abandoned upstream; replacement: laravel/passkeys
anhskohbo/no-captcha ^3.7 Integrasi Google reCAPTCHA v2/v3 di form login

Built-in (no extra package)

  • 2FA via email OTP + trust-device cookie (file: app/Http/Controllers/Auth/TwoFactorController.php)
  • Password policy — App\Services\Auth\PasswordPolicyService (min/max/charset/expiry/history-reuse-block)
  • IP access control — app/Http/Middleware/IpAccessControl.php (blacklist, admin whitelist, auto-block on burst, HSTS toggle)
  • Security headers — app/Http/Middleware/SecurityHeaders.php (X-Frame, X-CTO, Referrer, Permissions-Policy, X-XSS, HSTS)
  • Session manager — list & force-logout active sessions
  • Impersonate — ImpersonateController dengan guard self/Developer/inactive + loop prevention
  • Single-session enforcement opsional (di-toggle dari Global Settings)

5. Manajemen Hak Akses & Audit (Spatie)

Package Versi Kegunaan
spatie/laravel-permission ^6.24 Sistem role & permission granular
spatie/laravel-activitylog ^4.10 Audit trail — mencatat perubahan data
spatie/laravel-backup ^10.2 Backup database & file ke Local/S3/GDrive
spatie/laravel-medialibrary ^11.21 Upload & manajemen file media (avatar, dokumen)

5b. Dashboard Widget System

Per-user persisted widget layout. Architecture:

Layer Class / File Fungsi
Model DashboardWidgetPreference forUser() merge defaults + DB prefs, sorted by sort_order
Migration 2026_05_16_220000_create_dashboard_widget_preferences_table user_id FK cascade, unique (user_id, widget_key)
Controller DashboardController@saveWidgetPreferences upsert prefs via updateOrCreate
Controller DashboardController@resetWidgetPreferences delete all prefs → restore defaults
Route POST /dashboard/widgets (dashboard.widgets.save) —
Partials resources/views/pages/dashboard/widget-*.blade.php cpu, ram, disk, live-users, queues, quick-actions
JS SortableJS (CDN) drag-to-reorder grid
Broadcasting DashboardStatsUpdated event → Reverb → Echo push stats every minute via dashboard:broadcast-stats

Sidebar Toggle

Sidebar submenus use vanilla JS initSidebarSubmenus() (bottom of navigation.blade.php). Uses data-sidebar-toggle attribute, e.stopPropagation(), and cloneNode() to replace buttons and prevent duplicate listeners. Does not depend on Alpine.js (theme JS conflict prevented Alpine x-on:click from working).

6. Modular & Arsitektur

Package Versi Kegunaan
nwidart/laravel-modules ^13.0 Memisahkan fitur ke folder Modules/ agar codebase rapi

Custom Exception Hierarchy

App\Exceptions\* — domain-specific exceptions instead of generic \Exception:

  • SystemConfigException::unknownKey(), ::imageUploadFailed()
  • BackupOperationException::missingBinary(), ::diskNotConfigured(), ::restoreFailed()
  • MonitoringException::unsupportedOs(), ::probeFailed()

7. Admin Panel & API Docs

Package Versi Kegunaan
filament/filament ^5.5 Admin panel builder (resource management cepat)
darkaonline/l5-swagger ^11.0 Auto-generate Swagger/OpenAPI docs dari annotation. Spec di storage/api-docs/.

8. Monitoring & Error Tracking

Package Versi Kegunaan
sentry/sentry-laravel ^4.25 Error monitoring & performance tracking untuk production

Set SENTRY_LARAVEL_DSN di .env untuk mengaktifkan. Log error otomatis terkirim ke Sentry dashboard.

Endpoint GET /api/health mengembalikan status database/redis/storage/queue. Kembalikan 503 hanya saat ada check yang fail — warn (disk >90%) tetap 200.

9. Frontend Build

Package Versi Kegunaan
vite ^7.0 Build tool — hot reload & bundling JS/CSS
laravel-vite-plugin ^2.0 Integrasi Vite dengan Blade
tailwindcss ^4.2 CSS utility-first
@tailwindcss/forms ^0.5.2 Plugin Tailwind untuk styling form
alpinejs ^3.4 Reactive JS ringan (toggle, modal, tabs)
axios ^1.15 HTTP client untuk AJAX
laravel-echo ^2.3 Client untuk subscribe ke WebSocket channel
pusher-js ^8.5 Transport layer untuk Echo (kompatibel Reverb)
rollup ^4.60 Module bundler (digunakan Vite secara internal)
concurrently ^9.0 Menjalankan beberapa command paralel saat dev

Dev Script (composer run dev)

Menjalankan beberapa proses secara paralel:

Proses Command
SERVER php artisan serve --host=0.0.0.0 --port=8000
VITE npm run dev
QUEUE php artisan queue:listen --tries=1

Scheduled Tasks (Production)

Waktu Command Fungsi
Setiap menit dashboard:broadcast-stats Broadcast stats dashboard ke WebSocket channel admin.monitoring (withoutOverlapping)
Setiap menit MaintenanceManagementService::autoCheckAndRelease() Auto-release maintenance mode
Setiap menit WorkerHeartbeatJob Queue worker monitoring
Setiap 30 menit system:health-check System health check
Harian 03:00 model:prune Pruning OtpCode, UserTrustedDevice, AiHealingLog, PasswordHistory, dll
Harian 03:05 telescope:prune --hours=48 Hapus Telescope entries > 48 jam
Harian activitylog:clean Hapus activity log > 365 hari
Senin 07:00 backups:verify Verifikasi integritas backup
Senin 07:05 permissions:audit --json Audit permission (log only)
Senin 08:00 system:send-digest Weekly health digest ke admin
Dinamis DB backup + cleanup Frekuensi dikonfigurasi dari Global Settings

Untuk dev penuh (termasuk Reverb + Scheduler), pakai Sail (./vendor/bin/sail up -d).

10. Frontend Library (CDN/Blade)

Dimuat via CDN di template Blade:

Library Kegunaan
Bootstrap 5 Layout grid & komponen UI
Bootstrap Icons Ikon SVG
jQuery DOM manipulation & AJAX
SweetAlert2 Dialog & notifikasi toast
CKEditor 5 WYSIWYG editor (Privacy Policy, ToS, About, dll)
FilePond Upload file drag-and-drop
Animate.css Animasi entrance/exit elemen
Marked.js Render Markdown untuk laporan analisis AI
Choices.js Dropdown searchable & multi-select
SortableJS Drag-to-reorder dashboard widget grid (loaded via CDN in dashboard.blade.php)
Google Fonts Inter, Outfit, Fira Code

11. Development & Quality Tools

Code Quality

Package Versi Kegunaan
laravel/pint ^1.24 Code formatter (PSR-12). Wajib hijau sebelum merge.
larastan/larastan ^3.9 Static analysis Laravel-aware (PHPStan). Level 5 + baseline.
laravel/sail ^1.41 Docker dev environment (app + Postgres + Redis)
laravel/pail ^1.2 Live log viewer di terminal
laravel/telescope ^5.20 Debug tool (request, query, job, mail) — hanya dev
laravel/boost ^2.0 AI assistant untuk Laravel dev

Testing

Package Versi Kegunaan
pestphp/pest ^4.0 Testing framework modern
pestphp/pest-plugin-laravel ^4.0 Helper Pest untuk Laravel
mockery/mockery ^1.6 Library mocking untuk test
fakerphp/faker ^1.23 Generator data dummy
nunomaduro/collision ^8.6 Error reporting yang readable di terminal

Test Suite Statistics

Kategori File Tests
Feature: Auth + WebAuthn + Social + 2FA + Impersonate 9 ~50
Feature: AccessControl (User/Role/Permission) 3 37
Feature: Middleware (IP, ActivePermission, Legal, PwdExpiry, SecurityHeaders, CheckTabPermission) 6 30
Feature: Services (SystemConfig, PasswordPolicy, Backup) 3 31
Feature: Performance (N+1 regression) 1 3
Feature: Database (FK + Cascade) 1 9
Feature: API (Health, MobileConfig, Rate-limit, OTP, AuthAPI, DeviceToken) 6 25
Feature: Dashboard (widget prefs, broadcast event) 2 18
Feature: Helpers (ApiResponse, PasswordRule) 2 18
Unit: Pure logic (Formatter, Caster, Helpers, Exceptions) 5 88
Granular tab permission system — +62
Total 38 371

Run via ./vendor/bin/sail artisan test. Avg runtime ~35s.

12. CI/CD

Workflow di .github/workflows/ci.yml (GitHub Actions). 3 job paralel:

Job Tools
test Pest 4 (Postgres 15 + Redis 7 service containers)
lint pint --test + composer audit + permissions:audit
static-analysis Larastan level 5 + baseline

Push ke main/develop/config/advanced dan PR ke main/develop mentrigger pipeline.

13. Integrasi Eksternal (Opsional)

Sebagian besar diatur dari Global Settings di admin panel — tidak perlu edit .env.

Layanan Kegunaan
OpenAI GPT AI assistant di admin panel
Google Gemini AI assistant alternatif
Anthropic Claude AI assistant alternatif
DeepSeek AI assistant alternatif
xAI Grok AI assistant alternatif
Mistral AI AI assistant alternatif
OpenRouter Gateway multi-provider AI
SAP NW RFC Koneksi ke sistem SAP ERP
Google Drive Cloud backup
Amazon S3 Cloud backup
SMTP (Mailgun/SES) Pengiriman email transaksional
Telegram Bot Notifikasi ke channel Telegram (incl. firewall block alert)
Google reCAPTCHA Anti-bot di form login
Firebase Cloud Messaging Push notification ke mobile (device token)
Sentry Error monitoring & performance tracing

Ringkasan Arsitektur

┌─────────────────────────────────────────────────────────┐
│              Browser / Mobile App (React Native)         │
└────────────┬────────────────────────────────┬───────────┘
             │ HTTPS (+ security headers)     │ HTTPS + WS
             ▼                                ▼
       ┌──────────┐                     ┌──────────┐
       │  Nginx   │◄────────────────────│  Reverb  │  WebSocket
       └─────┬────┘                     └─────┬────┘
             ▼                                ▼
       ┌──────────────────────────────────────────────┐
       │    Laravel 13 (PHP-FPM)                      │
       │                                              │
       │   Global middleware:                         │
       │   ┌──────────────────────────────────────┐   │
       │   │ SecurityHeaders                      │   │
       │   │ IpAccessControl                      │   │
       │   │ PasswordExpiry                       │   │
       │   │ CheckLegalAgreement                  │   │
       │   │ ThrottleRequests (per route)         │   │
       │   └──────────────────────────────────────┘   │
       │                                              │
       │  ┌──────────┐ ┌──────────┐ ┌─────────────┐  │
       │  │  Web     │ │  API v1  │ │   Reverb    │  │
       │  │  Routes  │ │ Sanctum  │ │  Broadcast  │  │
       │  └────┬─────┘ └────┬─────┘ └──────┬──────┘  │
       └───────┼────────────┼──────────────┼──────────┘
               │            │              │
    ┌──────────▼───┐   ┌────▼──┐   ┌──────▼─────┐
    │ PostgreSQL 15 │   │Redis 7│   │ Filesystem │
    │ (data utama)  │   │cache, │   │ local/S3/  │
    │ FK + indexes  │   │queue, │   │ GDrive     │
    │ + cascade     │   │session│   │            │
    └───────────────┘   └───────┘   └────────────┘
                              │
                       ┌──────▼──────┐
                       │   Sentry    │
                       │ (error mon) │
                       └─────────────┘
Reference in New Issue View Git Blame Copy Permalink