oxpoe/open-isp
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity
Files
996b738c4ef09beabc40aa94bcc66eef577da5f0
open-isp/docs/AUDIT_LENGKAP.md
T
oxpoe eaf05f2811 OPEN-ISP v0.5 (pickle-lime) — rilis open-source perdana 
Aplikasi billing & manajemen ISP (fiber optic) — PWA pelanggan, portal teknisi & kolektor,
admin panel lengkap, multi-vendor OLT, RADIUS, WhatsApp/Telegram, pembayaran QRIS.

Kredit & lisensi (ISC):
- Base kode & repo: alijayanet/billing-rtrw oleh Alijaya Net — terima kasih banyak
  atas base kode dan repo yang bermanfaat.
- Add-on: GoWA, LibreSpeed/OpenSpeedTest, Uptime Kuma, notification-forwarder.
- Dikembangkan menjadi OPEN-ISP oleh oxpoe — https://github.com/oxpoe/open-isp
2026-10-09 05:51:21 +07:00

44 KiB
Raw Blame History

AUDIT LENGKAP APLIKASI BILLING RTRWnet (B481)

Status Aplikasi: BERJALAN & PRODUKSI
Tanggal Audit: Juni 2026
Tipe Sistem: ISP Billing & Management System

1. INFORMASI UMUM APLIKASI

1.1 Identitas Sistem

  • Nama Aplikasi: RTRWNET Management & Billing System
  • Versi: 1.0.0
  • Entry Point: app-customer.js
  • Port Default: 3001 (dapat diubah di settings.json)
  • Host Default: localhost (dapat diubah di settings.json)
  • Runtime: Node.js ≥20.0.0

1.2 Tech Stack

  • Backend Framework: Express.js 4.18.2
  • Database: SQLite (better-sqlite3 11.3.0)
  • Frontend Templating: EJS 3.1.10
  • CSS Framework: Bootstrap 5 + Bootstrap Icons
  • Mapping Library: Leaflet (Peta geografis)
  • WhatsApp Integration: Baileys (@whiskeysockets/baileys 6.7.21)
  • Session Management: express-session 1.18.1
  • File Upload: multer 2.1.1
  • Task Scheduling: node-cron 4.2.1
  • Spreadsheet: xlsx (dari CDN sheetjs)

1.3 Fitur Utama

  1. Portal Pelanggan (Self-service)
  2. Portal Admin (Manajemen lengkap)
  3. Portal Teknisi (Field support)
  4. Portal Agen (Sales & pembayaran)
  5. Portal Kolektor (Approval pembayaran)
  6. Portal Finance (Laporan keuangan)
  7. Billing & Invoicing (Tagihan otomatis)
  8. MikroTik Integration (PPPoE, Hotspot, Voucher)
  9. GenieACS Integration (Manajemen CPE/ONU)
  10. OLT PON Management (SNMP-based)
  11. WhatsApp Automation (Baileys)
  12. Payment Gateway (Midtrans, Tripay, Xendit, Duitku)
  13. GIS Mapping (Peta pelanggan & ODP)
  14. Inventory Management (Gudang)
  15. Ticketing System (Support)
  16. Built-in TR-069 ACS (Lightweight, tanpa GenieACS eksternal)

2. ARSITEKTUR SISTEM

2.1 Struktur Direktori

billing-B481/
├── app-customer.js              ← Entry point utama
├── config/                      ← Konfigurasi sistem
│   ├── database.js             (SQLite initialization)
│   ├── logger.js               (Logging - Winston & Pino)
│   ├── settingsManager.js      (Kelola settings.json)
│   ├── settingsValidator.js    (Validasi konfigurasi)
│   ├── genieacs.js             (GenieACS API connector)
│   ├── genieacs-commands.js    (GenieACS command builder)
│   ├── i18n.js                 (Internationalization)
│   ├── customerTag.js          (Customer tagging logic)
│   └── settingsEncryption.js   (Encryption helpers)
├── services/                    ← Business logic (27 files)
│   ├── billingService.js       (Invoice generation, promo, prorata)
│   ├── customerService.js      (CRUD pelanggan)
│   ├── adminService.js         (Admin management)
│   ├── mikrotikService.js      (RouterOS API)
│   ├── oltService.js           (OLT/SNMP management)
│   ├── onuProvisionService.js  (ONU provisioning)
│   ├── telegramBot.js          (Telegram integration)
│   ├── cronService.js          (Task scheduling)
│   ├── paymentService.js       (Payment gateways)
│   ├── voucherPaymentService.js (E-voucher)
│   ├── monitoringService.js    (Health check)
│   └── ...17 services lainnya
├── routes/                      ← API endpoints & page rendering
│   ├── customerPortal.js       (Customer login, profile, billing)
│   ├── adminPortal.js          (Admin panel)
│   ├── techPortal.js           (Teknisi portal)
│   ├── agentPortal.js          (Agen sales & pembayaran)
│   ├── collectorPortal.js      (Kolektor approval)
│   ├── financePortal.js        (Finance reports)
│   ├── voucherPaymentAPI.js    (Voucher API)
│   ├── settingsAPI.js          (Settings management API)
│   └── admin/                  (Admin sub-routes)
├── middleware/                  ← Middleware Express
│   ├── errorHandler.js         (Error handling)
│   ├── settingsMiddleware.js   (Settings injection)
│   └── attendanceUpload.js     (Attendance upload)
├── views/                       ← EJS Templates (78 files)
│   ├── customer/               (Customer portal pages)
│   ├── admin/                  (Admin portal pages)
│   ├── tech/                   (Teknisi pages)
│   ├── agent/                  (Agen pages)
│   ├── collector/              (Kolektor pages)
│   ├── partials/               (Reusable components)
│   └── ...public pages
├── public/                      ← Static files
│   ├── css/                    (Bootstrap, custom styles)
│   ├── img/                    (Logo, heroes)
│   ├── js/                     (Frontend logic)
│   ├── uploads/                (QRIS, payment proof, tickets)
│   ├── sw.js                   (Service worker PWA)
│   └── manifest.webmanifest    (PWA manifest)
├── database/                    ← SQLite database
│   └── billing.db              (Main database file)
├── scripts/                     ← Utility scripts
│   ├── fix-database.sh         (Database migration)
│   ├── verify-database.js      (Database check)
│   └── ...test & migration scripts
├── locales/                     ← i18n translations
│   ├── en.json                 (English)
│   └── id.json                 (Indonesian)
├── settings.json               ← Application configuration
├── package.json                ← Dependencies
└── .env                        ← Environment variables (optional)

2.2 Flow Aplikasi

Startup Process:

  1. node app-customer.js → Load app-customer.js
  2. Inisialisasi database SQLite (config/database.js)
  3. Load settings dari settings.json
  4. Setup middleware (session, CSRF, i18n)
  5. Mount portals (customer, admin, tech, agent, collector)
  6. Start cron jobs (billing, isolir, pengingat tagihan)
  7. Listen pada port settings.json.server_port

Request Flow (Contoh: Customer Login):

GET /customer/login
  ↓ (Express routing)
  ↓ (Session middleware)
  ↓ (i18n middleware)
  ↓ (customerPortal.js router)
  ↓ (No auth required - render login page)
  ↓ (EJS template rendering)
  ← Response: HTML page

POST Login Flow:

POST /customer/login
  ↓ (Body parsing middleware)
  ↓ (CSRF check via Referer/Origin)
  ↓ (customerPortal.js - findCustomerProfileByLoginId)
  ↓ (Database query: SELECT * FROM customers WHERE id/email/phone = ?)
  ↓ (Verify kredensial)
  ↓ (Set session.userId)
  ↓ (Redirect ke /customer/dashboard)
  ← Response: 302 redirect

3. DATABASE & SCHEMA

3.1 Karakteristik Database

  • Type: SQLite (better-sqlite3)
  • File Location: database/billing.db
  • Journal Mode: WAL (Write-Ahead Logging)
  • Foreign Keys: Enabled
  • Timezone Function: NOW_LOCAL() berdasarkan setting timezone

3.2 Tabel Utama

Berdasarkan config/database.js, tabel yang di-initialize:

  1. Konfigurasi & Settings

    • settings (key-value store untuk pengaturan runtime)
    • expense_categories (kategori pengeluaran)

  2. Master Data

    • packages (Paket layanan - name, price, speed_down, speed_up)
    • customers (Pelanggan - phone, email, paket, PPPoE, GenieACS tag)
    • routers (MikroTik router - host, user, password, port)
    • olts (OLT devices - host, community SNMP, port, brand)
    • odps (ODP - Optical Distribution Point - koordinat, lokasi)

  3. Billing & Invoicing

    • invoices (Tagihan - customer_id, period_year, period_month, amount, status)
    • payments (Pembayaran - invoice_id, amount, method, gateway, proof)
    • payment_approvals (Approval kolektor - pending approval)

  4. PPPoE Management

    • pppoe_users (User PPPoE - username, secret, speed profile)
    • pppoe_traffic_samples (Traffic monitoring - bytes in/out, timestamp)

  5. Hotspot

    • hotspot_users (User hotspot - username, password)
    • hotspot_sessions (Session aktif)

  6. Voucher

    • voucher_batches (Batch voucher - name, quantity, amount, price)
    • vouchers (Individual vouchers - code, batch_id, status)

  7. GenieACS & TR-069

    • acsdevices atau genieacs_devices (Daftar perangkat ACS)
    • acs_sessions (Session TR-069)

  8. OLT & ONU

    • onu_mapping (Pemetaan ONU ke pelanggan - olt_id, onu_port)
    • onu_provision (Status provisioning ONU)

  9. Operasional

    • audit_trail (Log audit untuk aktivitas sensitif)
    • expenses (Catatan pengeluaran)
    • cash_in (Catatan pemasukan)
    • technicians (Daftar teknisi + login)
    • cashiers (Daftar kasir)
    • agents (Daftar agen)
    • collectors (Daftar kolektor)
    • tickets (Tiket support)
    • inventory_items (Item gudang)
    • attendance (Kehadiran karyawan)
    • digiflazz_transactions (Pulsa/data digital transaksi)
    • vomit_log (Log webhook pembayaran)

3.3 Skema Relasi

customers (1) ──→ (N) invoices
            ├─→ (N) payments
            ├─→ (N) pppoe_users
            ├─→ (N) tickets
            └─→ (1) packages

packages (1) ──→ (N) customers
           └─→ (N) pppoe_profiles

routers (1) ──→ (N) pppoe_users
        └─→ (N) hotspot_users

olts (1) ──→ (N) onu_mapping
    ├─→ (N) onu_provision
    └─→ (1) odps

voucher_batches (1) ──→ (N) vouchers
agents (1) ──→ (N) payments (via agent commission)

4. ENDPOINTS & ROUTES

4.1 Portal Pelanggan (/customer)

File: routes/customerPortal.js

Authentication Routes:

Method Endpoint Fitur
GET /customer/login Form login pelanggan
POST /customer/login Proses login (ID/email/phone)
GET /customer/logout Logout & destroy session
GET /customer/register Form registrasi pelanggan baru
POST /customer/register Proses registrasi
POST /customer/login-with-otp Login dengan OTP (jika enabled)

Dashboard & Info: | GET | /customer/dashboard | Dashboard utama pelanggan | | GET | /customer/billing | Riwayat tagihan | | GET | /customer/payment | Halaman pembayaran | | GET | /customer/invoice/:id | Detail invoice (cetak) | | GET | /customer/terms | Syarat & ketentuan | | GET | /customer/privacy | Kebijakan privasi |

CPE/Device Management: | GET | /customer/device/:id | Detail perangkat (SSID, password) | | POST | /customer/device/:id/reboot | Reboot CPE | | POST | /customer/device/:id/wifi-change | Ubah SSID/password Wi-Fi | | POST | /customer/device/:id/identify | Identify perangkat (blink LED) |

Support & Ticketing: | GET | /customer/tickets | Daftar tiket pelanggan | | POST | /customer/tickets/create | Buat tiket baru | | POST | /customer/tickets/:id/reply | Reply tiket |

Payments: | POST | /customer/pay | Initiate pembayaran (gateway) | | GET | /customer/payment/callback | Callback payment gateway | | POST | /api/webhook/v1/payment-notif | Webhook pembayaran generik |

Voucher: | GET | /customer/voucher | Halaman beli voucher | | POST | /customer/voucher/buy | Beli voucher hotspot |

4.2 Portal Admin (/admin)

File: routes/adminPortal.js

Authentication:

Method Endpoint Fitur
GET /admin/login Form login admin
POST /admin/login Proses login admin
GET /admin/logout Logout admin

Dashboard & Reporting: | GET | /admin/dashboard | Dashboard ringkasan | | GET | /admin/reports | Report keuangan/agregasi | | GET | /admin/billing/report | Laporan billing | | GET | /admin/agents/report | Laporan agen |

Pelanggan Management: | GET | /admin/customers | Daftar pelanggan | | GET | /admin/customers/search | Search pelanggan | | GET | /admin/customers/:id | Detail pelanggan | | POST | /admin/customers | Tambah pelanggan | | PUT | /admin/customers/:id | Edit pelanggan | | DELETE | /admin/customers/:id | Hapus pelanggan | | POST | /admin/customers/:id/isolate | Isolir pelanggan | | POST | /admin/customers/:id/unisolate | Buka isolir | | POST | /admin/customers/reset-promo | Reset siklus promo | | GET | /admin/customers/import | Form impor pelanggan | | POST | /admin/customers/import | Upload & impor Excel | | GET | /admin/customers/export | Export daftar pelanggan |

Billing & Invoicing: | GET | /admin/billing/invoices | Daftar invoice | | GET | /admin/billing/invoices/:id | Detail invoice | | POST | /admin/billing/generate | Generate tagihan bulanan | | POST | /admin/billing/generate-single | Generate untuk 1 pelanggan | | POST | /admin/billing/unpay | Batalkan pembayaran | | POST | /admin/billing/prorata-susulan | Prorata bulan pasang | | GET | /admin/billing/print/:id | Cetak invoice |

Pembayaran & Gateway: | GET | /admin/payments | Daftar pembayaran | | POST | /admin/payments/verify | Verifikasi pembayaran | | GET | /admin/payments/webhook-logs | Log webhook pembayaran | | POST | /admin/payments/process | Manual bayar invoice | | GET | /admin/settings/gateways | Konfigurasi payment gateway |

Paket Layanan: | GET | /admin/packages | Daftar paket | | POST | /admin/packages | Tambah paket | | PUT | /admin/packages/:id | Edit paket | | DELETE | /admin/packages/:id | Hapus paket |

MikroTik Management: | GET | /admin/mikrotik/routers | Daftar router | | POST | /admin/mikrotik/routers | Tambah router | | PUT | /admin/mikrotik/routers/:id | Edit router | | POST | /admin/mikrotik/test-connection | Test koneksi router | | GET | /admin/mikrotik/pppoe/profiles | Profil PPPoE | | GET | /admin/mikrotik/pppoe/users | Daftar user PPPoE | | GET | /admin/mikrotik/pppoe/active-sessions | Sesi PPPoE aktif | | GET | /admin/mikrotik/hotspot/users | User hotspot | | GET | /admin/mikrotik/hotspot/active | Sesi hotspot aktif | | GET | /admin/mikrotik/voucher/batches | Batch voucher | | POST | /admin/mikrotik/voucher/generate | Generate voucher | | POST | /admin/mikrotik/voucher/print | Cetak voucher | | GET | /admin/mikrotik/voucher/export | Export voucher CSV |

GenieACS & CPE: | GET | /admin/genieacs/devices | Daftar perangkat | | GET | /admin/genieacs/devices/:id | Detail perangkat | | POST | /admin/genieacs/devices/:id/set-ssid | Ubah SSID massal | | POST | /admin/genieacs/devices/:id/reboot | Reboot perangkat | | POST | /admin/genieacs/devices/:id/provision | Provision parameter |

OLT & ONU Management: | GET | /admin/olts | Daftar OLT | | POST | /admin/olts | Tambah OLT | | PUT | /admin/olts/:id | Edit OLT | | GET | /admin/olts/:id/onuses | ONU per OLT | | POST | /admin/olts/:id/onu-reboot | Reboot ONU | | POST | /admin/olts/:id/onu-authorize | Otorisasi ONU | | POST | /admin/olts/:id/onu-rename | Rename ONU |

Peta & Geografis: | GET | /admin/map | Peta interaktif pelanggan & ODP | | GET | /admin/map/customer-data | JSON data pelanggan untuk peta | | POST | /admin/map/save-route | Simpan jalur kabel |

Agen Management: | GET | /admin/agents | Daftar agen | | POST | /admin/agents | Tambah agen | | PUT | /admin/agents/:id | Edit agen | | POST | /admin/agents/:id/topup | Top-up saldo agen | | GET | /admin/agents/:id/transactions | Transaksi agen | | GET | /admin/agents/digiflazz | Dashboard Digiflazz |

Tiket & Support: | GET | /admin/tickets | Daftar tiket | | GET | /admin/tickets/:id | Detail tiket | | POST | /admin/tickets/:id/assign | Assign ke teknisi | | POST | /admin/tickets/:id/close | Tutup tiket |

Pengguna Internal: | GET | /admin/users/technicians | Daftar teknisi | | POST | /admin/users/technicians | Tambah teknisi | | PUT | /admin/users/technicians/:id | Edit teknisi | | GET | /admin/users/cashiers | Daftar kasir | | POST | /admin/users/cashiers | Tambah kasir | | GET | /admin/users/collectors | Daftar kolektor |

WhatsApp & Notifikasi: | GET | /admin/whatsapp/status | Status koneksi WhatsApp | | POST | /admin/whatsapp/auth | Otorisasi WhatsApp (QR code) | | POST | /admin/whatsapp/logout | Logout WhatsApp | | GET | /admin/whatsapp/broadcast | Form broadcast massal | | POST | /admin/whatsapp/broadcast/send | Kirim broadcast | | POST | /admin/whatsapp/broadcast/pause | Pause broadcast | | POST | /admin/whatsapp/test-notification | Test notifikasi |

Inventory & Maintenance: | GET | /admin/inventory | Daftar inventory | | POST | /admin/inventory | Tambah item | | PUT | /admin/inventory/:id | Edit item | | POST | /admin/inventory/:id/adjust | Adjustment stok |

Backup & Settings: | GET | /admin/backup | Halaman backup | | POST | /admin/backup/create | Buat backup | | POST | /admin/backup/restore | Restore backup | | POST | /admin/backup/delete | Hapus backup file | | GET | /admin/settings | Halaman settings | | POST | /admin/settings/save | Simpan settings | | POST | /admin/settings/test-connection | Test koneksi berbagai service |

Audit & Monitoring: | GET | /admin/audit-logs | Riwayat audit | | GET | /admin/monitoring | Status sistem |

4.3 Portal Teknisi (/tech)

File: routes/techPortal.js

Method Endpoint Fitur
GET /tech/login Login teknisi
POST /tech/login Proses login
GET /tech/dashboard Dashboard teknisi
GET /tech/tickets Pool tiket untuk teknisi
POST /tech/tickets/:id/take Ambil tiket
POST /tech/tickets/:id/update Update progress tiket
POST /tech/tickets/:id/complete Selesaikan tiket
GET /tech/map Peta pelanggan & rute
GET /tech/customers/new Input pelanggan baru
POST /tech/customers/new Submit pelanggan baru
GET /tech/devices Daftar perangkat GenieACS
GET /tech/monitoring Monitoring sistem
POST /tech/attendance/check-in Check-in kehadiran (GPS)
POST /tech/attendance/check-out Check-out kehadiran

4.4 Portal Agen (/agent)

File: routes/agentPortal.js

Method Endpoint Fitur
GET /agent/login Login agen
POST /agent/login Proses login agen
GET /agent/dashboard Dashboard agen
GET /agent/billing/check Cek tagihan pelanggan
POST /agent/billing/pay Bayar tagihan (saldo agen)
GET /agent/voucher Halaman jual voucher
POST /agent/voucher/buy Beli voucher dari stok
POST /agent/voucher/print Cetak struk transaksi
GET /agent/digiflazz Dashboard produk digital
POST /agent/digiflazz/buy Beli pulsa/data
GET /agent/digiflazz/status Cek status transaksi
GET /agent/balance Saldo akun agen
GET /agent/transactions Riwayat transaksi

4.5 Portal Kolektor (/collector)

File: routes/collectorPortal.js

Method Endpoint Fitur
GET /collector/login Login kolektor
POST /collector/login Proses login
GET /collector/dashboard Dashboard kolektor
GET /collector/billing/check Cek tagihan pelanggan
POST /collector/billing/request Buat request pembayaran
GET /collector/requests Daftar request pending
GET /collector/history Riwayat approval

4.6 Portal Finance (/finance)

File: routes/financePortal.js

Method Endpoint Fitur
GET /finance/dashboard Dashboard keuangan
GET /finance/summary Ringkasan pemasukan/pengeluaran
GET /finance/expenses Laporan pengeluaran
POST /finance/expenses Catat pengeluaran
GET /finance/cashflow Laporan arus kas

4.7 Public Routes (Tanpa Login)

Method Endpoint Fitur
GET / Redirect ke /customer/login
GET /login Alias singkat customer login
GET /isolated Halaman isolir statis (redirect MikroTik)
GET /isolated/status Polling status pelanggan isolir
GET /public/check-billing Cek tagihan tanpa login
GET /public/voucher Halaman beli voucher publik
GET /qris/static.jpg QRIS statis untuk pembayaran
GET /uploads/qris/:filename Download QRIS image
GET /health Health check endpoint
POST /webhook/digiflazz Webhook Digiflazz callback
POST /acs Built-in TR-069 ACS endpoint

4.8 Settings & Configuration API

File: routes/settingsAPI.js

Method Endpoint Fitur
GET /api/settings Ambil settings (cached)
POST /api/settings Update settings
POST /api/settings/test-genieacs Test koneksi GenieACS
POST /api/settings/test-mikrotik Test koneksi MikroTik
POST /api/settings/test-tripay Test koneksi Tripay
POST /api/settings/test-midtrans Test koneksi Midtrans
GET /api/backup/list Daftar backup files

4.9 Voucher Payment API

File: routes/voucherPaymentAPI.js

Method Endpoint Fitur
GET /api/voucher/available List voucher tersedia
POST /api/voucher/purchase Beli voucher (JSON API)
GET /api/voucher/status/:code Cek status voucher

5. FITUR-FITUR UTAMA

5.1 Billing & Invoicing

Service: services/billingService.js

Fitur:

  • ✅ Generate tagihan bulanan otomatis (trigger: 1 bulan 00:01)
  • ✅ Harga Promo: Diskon N siklus pertama per pelanggan
  • ✅ Prorata: Tagihan proportional untuk bulan pasang
  • ✅ Susulan Prorata: Tambahan tagihan untuk menutup bulan pasang
  • ✅ Status Invoice: Draft → Pending → Paid → Overdue → Cancelled
  • ✅ Reset Promo Cycles: Admin dapat reset ulang harga promo
  • ✅ Cetak Invoice: PDF-ready HTML format

Database Tables:

  • invoices (id, customer_id, period_year, period_month, amount, status, notes)
  • payments (id, invoice_id, amount, method, gateway, proof, timestamp)
  • payment_approvals (id, payment_id, approver_id, status)

5.2 MikroTik Integration

Service: services/mikrotikService.js

Fitur:

  • ✅ Multi-router support (multiple MikroTik instances)
  • ✅ RouterOS 7 compatible
  • ✅ PPPoE: Profil, user/secret, sesi aktif, monitor trafik
  • ✅ Hotspot: Profil, user, sesi aktif
  • ✅ Jam Kalong: Ganti profil malam/siang otomatis (cron 00:00 & 06:00)
  • ✅ FUP (Fair Usage Policy): Monitor GB & ganti profil turun kecepatan
  • ✅ Usage Tracking: Sinkron pemakaian setiap 10 menit dari sesi aktif
  • ✅ Voucher: Generate batch, sinkron, cetak, export CSV
  • ✅ Backup Konfigurasi: Download backup dari router

Supported Operations:

  • Add/Remove PPPoE user
  • Monitor active sessions
  • Change profile (traffic shaping)
  • Generate voucher codes
  • Export/import configuration

5.3 GenieACS & TR-069

Services:

  • services/acsServerService.js (Built-in lightweight ACS)
  • services/customerDeviceService.js (CPE/ONU device management)
  • routes/acsPortal.js (GenieACS REST API integration)

Fitur:

  • ✅ Built-in ACS server (lightweight, tanpa GenieACS eksternal opsional)
  • ✅ Multi-ACS support (fallback ke GenieACS eksternal jika built-in disabled)
  • ✅ Device discovery & provisioning otomatis
  • ✅ Change SSID/password Wi-Fi
  • ✅ Reboot CPE
  • ✅ Parameter provisioning
  • ✅ Monitor RX Power (optical signal strength)
  • ✅ Bulk SSID update

Configuration:

{
  "use_builtin_acs": true,
  "genieacs_url": "http://192.168.x.x:7557",
  "genieacs_monitoring_enabled": true,
  "genieacs_rxpower_threshold": -27
}

ACS URL untuk ONU:

  • http://[IP-SERVER]:[PORT]/acs
  • Contoh: http://192.168.1.100:3001/acs

5.4 OLT & ONU Management

Service: services/oltService.js, services/onuProvisionService.js

Fitur:

  • ✅ Multi-OLT support (Telnet, SNMP, REST API)
  • ✅ SNMP monitoring: Statistik ONU per port
  • ✅ Telnet: Konfigurasi ZTE OLT (OMCI)
  • ✅ REST API: go-api-c320 untuk ZTE (VLAN/Bridge)
  • ✅ ONU Actions:
    • Reboot ONU
    • Rename ONU
    • Otorisasi ONU baru
    • Konfigurasi WAN (Telnet/OMCI/TR069/REST)
    • Konfigurasi VLAN & Bridge

OLT Brands Supported:

  • ZTE C-series (Telnet, REST)
  • Huawei
  • FiberHome
  • VSOL
  • C-Data
  • China Mobile, Telecom, Unicom

5.5 GIS Mapping & Geografis

Services: routes/admin/maps.js, routes/tech/map

Frontend Library: Leaflet + OpenStreetMap/Google Hybrid

Fitur:

  • ✅ Peta interaktif dengan marker pelanggan & ODP
  • ✅ Garis hubung pelanggan ke ODP
  • ✅ Polyline jalur kabel per pelanggan (simpan/load)
  • ✅ Popup detail: status, paket, trafik real-time
  • ✅ Basemap toggle: OSM & Satelit
  • ✅ GPS lokasi teknisi (peta teknisi)
  • ✅ Rute Google Maps integration
  • ✅ WhatsApp chat button di popup
  • ✅ Drag-drop lokasi pelanggan baru

Koordinat Default:

{
  "office_lat": "-6.252118625253105",
  "office_lng": "107.9205270612316"  ← Titik acuan peta
}

5.6 WhatsApp Automation (Baileys)

Service: services/telegramBot.js (typo filename, actually WhatsApp)

Fitur:

  • ✅ Koneksi WhatsApp via Baileys (login QR code)
  • ✅ Broadcast massal dengan jeda/antrian
  • ✅ Notifikasi tagihan pembayaran otomatis
  • ✅ Pengingat H-1 isolir (cron 09:00)
  • ✅ Admin commands (menu, billing tools, pulsa Digiflazz)
  • ✅ Agent commands (beli pulsa, cek saldo)
  • ✅ Jeda/pause/stop broadcast
  • ✅ Reset autentikasi session
  • ✅ Variasi pesan otomatis (randomize)

Commands:

Admin:
  /admin       → Menu admin
  /billing     → Billing tools
  /mikrotik    → MikroTik tools
  /digiflazz   → Cek saldo Digiflazz
  /topup       → Top-up saldo agen

Agent:
  /buy         → Beli pulsa Digiflazz
  /status      → Cek status transaksi

5.7 Payment Gateways

Service: services/paymentService.js

Supported Gateways:

  • ✅ Midtrans (Verifone): Snap, QRIS, e-wallet
  • ✅ Tripay: Bank transfer, e-wallet, QRIS
  • ✅ Xendit: Invoice API
  • ✅ Duitku: Bank transfer, QRIS
  • ✅ Generic Webhook: Endpoint POST /api/webhook/v1/payment-notif

Fitur Payment:

  • ✅ Multi-gateway routing
  • ✅ QRIS dinamis per invoice
  • ✅ QRIS statis untuk pembayaran umum
  • ✅ Kode unik per invoice (automatic)
  • ✅ Webhook callback notification
  • ✅ Payment verification & auto-settle
  • ✅ Automatic WhatsApp notification
  • ✅ Offline/manual payment entry (kasir)
  • ✅ Payment proof upload (foto struk)

Configuration:

{
  "default_gateway": "tripay",
  "midtrans_enabled": true,
  "tripay_enabled": false,
  "xendit_enabled": true,
  "duitku_enabled": true
}

5.8 Agen & Sales Management

Services: services/agentService.js, Digiflazz integration

Fitur:

  • ✅ Multi-agen support
  • ✅ Saldo agen (top-up oleh admin)
  • ✅ Bayar tagihan pelanggan dari saldo agen
  • ✅ Jual voucher hotspot
  • ✅ Transaksi pulsa/data digital Digiflazz
  • ✅ Laporan transaksi agen
  • ✅ Harga khusus per agen
  • ✅ Commission tracking

Digiflazz Integration:

  • ✅ Webhook untuk update status transaksi
  • ✅ Sync produk (kategori, brand, nominal)
  • ✅ Cek saldo Digiflazz
  • ✅ Admin dashboard Digiflazz
  • ✅ Signature-based authentication

5.9 Ticketing System

Service: services/ticketService.js

Fitur:

  • ✅ Pelanggan bisa buat tiket
  • ✅ Teknisi assign tiket dari pool
  • ✅ Update progress tiket
  • ✅ Lampiran foto tiket
  • ✅ Reply & follow-up
  • ✅ Close tiket dengan resolusi

5.10 Inventory & Warehouse

Service: services/inventoryService.js

Fitur:

  • ✅ CRUD kategori & item
  • ✅ Tracking stok
  • ✅ Adjustment & penyesuaian
  • ✅ Alert stok rendah
  • ✅ Riwayat transaksi inventory

5.11 Monitoring & Health Check

Services: services/monitoringService.js, services/diagnosticsService.js

Fitur:

  • ✅ CPU, RAM, Disk usage
  • ✅ Konektivitas ke GenieACS
  • ✅ Konektivitas ke MikroTik
  • ✅ Konektivitas ke OLT
  • ✅ Database size
  • ✅ Public endpoint: GET /health (lightweight)

5.12 Cron Jobs (Otomasi Terjadwal)

Service: services/cronService.js

Jadwal:

Waktu Fitur Command
1 bulan, 00:01 Generate tagihan bulanan generateMonthlyInvoices()
Setiap hari 02:00 Isolir otomatis pelanggan jatuh tempo autoIsolatePlansExpired()
Setiap hari 09:00 Pengingat tagihan H-1 via WhatsApp sendBillingReminders()
00:00 & 06:00 Jam Kalong (ganti profil PPPoE) handleTimeBasedProfileChange()
Setiap 10 menit Sinkron usage PPPoE syncUsageTracking()
Setiap jam FUP check & profile tuning checkFUPQuota()

5.13 Backup & Restoration

Service: services/backupService.js

Fitur:

  • ✅ Backup database (SQLite)
  • ✅ Backup settings.json
  • ✅ Backup kombinasi (database + settings)
  • ✅ Restore dari backup file
  • ✅ Auto-cleanup backup lama (retention policy)
  • ✅ Scheduled backup (opsional)

5.14 Audit Trail & Logging

Services: services/auditTrailService.js, logging via Winston/Pino

Fitur:

  • ✅ Log aktivitas sensitif (login, pembayaran, settings)
  • ✅ Timestamp + user + action
  • ✅ Cleanup audit trail otomatis (default 90 hari)
  • ✅ Export audit log

5.15 Attendance & Geofencing

Service: services/attendanceService.js

Fitur:

  • ✅ Check-in/check-out dengan GPS
  • ✅ Geofencing: validasi radius dari kantor (default 100m)
  • ✅ Foto kehadiran upload
  • ✅ Riwayat kehadiran per karyawan
  • ✅ Report kehadiran

Configuration:

{
  "attendance_geofencing": true,
  "attendance_radius": 100,
  "office_lat": "-6.252118625253105",
  "office_lng": "107.9205270612316"
}

6. KEAMANAN & OTENTIKASI

6.1 Authentication Methods

  1. Session-based (Express-session)

    • Session secret: settings.json.session_secret (HARUS diganti)
    • Storage: Memory (upgrade ke Redis untuk production)
    • TTL: Configurable

  2. Role-based Access Control (RBAC)

    • Super Admin (unrestricted)
    • Admin (most features)
    • Kasir (payment-only)
    • Teknisi (support tasks)
    • Kolektor (approval-only)
    • Agen (sales-only)
    • Pelanggan (self-service)

  3. OTP Login (Opsional)

    • via WhatsApp atau SMS
    • settings.json.login_otp_enabled = true

6.2 CSRF Protection

Implementasi: Referer/Origin checking (middleware di app-customer.js)

  • Hanya untuk POST/PUT/DELETE
  • Check header referer/origin terhadap domain lokal
  • Aman untuk production tanpa perlu CSRF token di EJS

6.3 Encryption & Secrets

  • Database encryption: opsional di config/settingsEncryption.js
  • Session secret: settings.json.session_secret (HARUS random)
  • API keys: Stored di settings.json (recommended: external .env atau secrets manager)
  • Password: TODO implement bcrypt hashing (current: plaintext risky!)

6.4 Security Best Practices (TODO)

⚠️ Recommendations for Production:

  1. ✅ Session secret → random string (24+ characters)
  2. ✅ HTTPS everywhere (reverse proxy: nginx)
  3. ✅ Rate limiting (brute force protection)
  4. ✅ Input validation & sanitization
  5. ❌ Password hashing → Implement bcrypt
  6. ❌ CORS → Restrict allowed origins
  7. ❌ API authentication → Token-based (JWT)
  8. ❌ Audit logging → Already implemented
  9. ❌ Admin API key → Currently weak, use strong random key
  10. ❌ Settings encryption → For sensitive data (credentials)

7. FRONTEND & UI

7.1 Template Engine

  • EJS: 78 template files total

7.2 Frontend Framework

  • Bootstrap 5.x (CDN atau local)
  • Bootstrap Icons (bi bi-*)
  • jQuery (minimal usage)
  • Chart.js / Apex Charts (untuk grafik)
  • Leaflet (untuk peta)

7.3 View Structure (78 files)

views/
├── admin/           (Admin portal pages)
├── agent/           (Agen portal pages)
├── collector/       (Kolektor portal pages)
├── customer/        (Pelanggan portal pages)
├── tech/            (Teknisi portal pages)
├── partials/        (Reusable components)
├── login.ejs        (Default login)
├── dashboard.ejs    (Dashboard template)
├── isolated.ejs     (Halaman isolir)
└── ...public pages

7.4 CSS & Styling

  • Bootstrap 5 utility classes (primary framework)
  • Custom CSS: public/css/style.css, public/css/admin.css
  • Responsive design (mobile-first)
  • Dark mode: opsional (implementasi partial)

7.5 Frontend Features

  • ✅ Lazy loading (CSS, images, icons)
  • ✅ Service Worker (PWA) - public/sw.js
  • ✅ PWA manifest - public/manifest.webmanifest
  • ✅ Offline caching (limited)
  • ✅ Real-time peta (Leaflet, WebSocket opsional)
  • ✅ Form validation (client + server)
  • ✅ Responsive tables (horizontal scroll pada mobile)

8. INTERNATIONALIZATION (i18n)

Configuration: config/i18n.js

Supported Languages:

  • 🇮🇩 Indonesian (id) - default
  • 🇬🇧 English (en) - alternative

Translation Files:

  • locales/id.json (Indonesian UI strings)
  • locales/en.json (English UI strings)

Usage:

GET /lang/en → Set session language to English
GET /?lang=en → Query parameter override

Template Usage:

<%= i18n.t('key_name') %>

9. CONFIGURATION & SETTINGS

9.1 settings.json Structure

{
  // GenieACS
  "genieacs_url": "http://...",
  "genieacs_username": "...",
  "genieacs_password": "...",
  "genieacs_monitoring_enabled": true,
  "genieacs_rxpower_threshold": -27,

  // Company Info
  "company_header": "ALIJAYA NET",
  "company_manager": "ALIJAYA NET",
  "company_phone": "6281947215703",
  "company_email": "...",
  "company_address": "...",

  // Server
  "server_port": 3001,
  "server_host": "localhost",
  "timezone": "Asia/Jakarta",

  // Security
  "session_secret": "change-this-to-random-secret-key",
  "admin_username": "admin",
  "admin_password": "admin123",
  "admin_api_key": "admin-api-key-change-this",

  // MikroTik
  "mikrotik_host": "192.168.8.1",
  "mikrotik_user": "admin",
  "mikrotik_password": "admin",
  "mikrotik_port": 8728,

  // Billing
  "isolir_day": 20,

  // Payment Gateways
  "default_gateway": "tripay",
  "tripay_enabled": false,
  "tripay_api_key": "...",
  "midtrans_enabled": true,
  "midtrans_server_key": "...",
  "xendit_enabled": true,
  "duitku_enabled": true,

  // WhatsApp
  "whatsapp_enabled": true,
  "whatsapp_broadcast_delay": 60,

  // Geographic
  "office_lat": "-6.252...",
  "office_lng": "107.920...",
  "attendance_geofencing": true,
  "attendance_radius": 100,

  // Features
  "login_otp_enabled": false,
  "telegram_enabled": false,
  "use_builtin_acs": true,
  "auto_backup_enabled": false
}

9.2 Environment Variables (.env)

  • NODE_ENV (development/production)
  • MY_WEBHOOK_SECRET (generic webhook security)
  • Optional: sensitive credentials

9.3 Settings Management API

Endpoints:

  • GET /api/settings → Get cached settings
  • POST /api/settings → Update settings (admin only)
  • POST /api/settings/test-* → Test connectivity

10. DEPENDENCIES & LIBRARIES

10.1 Production Dependencies

{
  "express": "^4.18.2",           // Web framework
  "express-session": "^1.18.1",   // Session management
  "ejs": "^3.1.10",               // Template engine
  "better-sqlite3": "^11.3.0",    // SQLite driver
  "multer": "^2.1.1",             // File upload
  "axios": "^1.6.7",              // HTTP client
  "node-cron": "^4.2.1",          // Task scheduling
  "dotenv": "^16.3.1",            // ENV file loading
  "@whiskeysockets/baileys": "^6.7.21",  // WhatsApp API
  "net-snmp": "^3.26.1",          // SNMP protocol
  "ssh2": "^1.15.0",              // SSH/Telnet
  "winston": "^3.8.2",            // Logging
  "pino": "^9.6.0",               // Logger alternative
  "node-telegram-bot-api": "^0.66.0",  // Telegram bot
  "qrcode": "^1.5.4",             // QR code generation
  "routeros-client": "^1.1.1",    // MikroTik API
  "jimp": "^1.6.1",               // Image manipulation
  "jsqr": "^1.4.0",               // QR code reading
  "@zxing/library": "^0.21.3",    // Barcode library
  "qrcode-terminal": "^0.12.0",   // Terminal QR display
  "xlsx": "^0.20.1"               // Excel parsing
}

10.2 Dev Dependencies

{
  "nodemon": "^3.1.14"            // Auto-restart on file change
}

10.3 Version Constraints

  • Node.js: ≥20.0.0 (modern features)
  • NPM: ≥9.0.0 (recommended)
  • Overrides: Specific fixed versions untuk security patches

11. OPERATIONAL REQUIREMENTS

11.1 Prerequisites

  • ✅ Node.js 20+
  • ✅ Linux/Ubuntu, Armbian, Windows, atau macOS
  • ✅ Network access ke: GenieACS, MikroTik, OLT, Internet (untuk CDN/gateways)
  • ✅ Port availability: 3001 (configurable)

11.2 Installation

git clone https://github.com/alijayanet/billing-rtrw.git
cd billing-rtrw
cp env-example.txt .env
npm install

11.3 Running Aplikasi

Development:

npm run dev

Production (Manual):

npm start

Production (PM2 - Recommended):

npm install -g pm2
pm2 start app-customer.js --name billing-rtrw
pm2 startup
pm2 save

11.4 Database Migration

Jika error "no such column: hotspot_username":

Opsi 1 (Auto-fix):

bash scripts/fix-database.sh

Opsi 2 (Manual verify):

node scripts/verify-database.js

11.5 Backup Execution

Auto-backup (jika enabled):

{
  "auto_backup_enabled": true
}

Manual backup:

  • Via Admin Panel → Backup → Create
  • Atau: POST /api/backup/create

12. MONITORING & TROUBLESHOOTING

12.1 Health Check

  • Endpoint: GET /health (public)
  • Response: { status: 'ok', timestamp, database, services }

12.2 Logging

  • Log files: Konfigurasi via Winston/Pino
  • Location: logs/ directory (opsional)
  • Level: info, warn, error
  • Console output: Development mode

12.3 Common Issues & Solutions

Issue: Aplikasi crash saat startup

  • Solusi 1: Cek settings.json valid JSON
  • Solusi 2: Database corrupted → Hapus database/billing.db, restart
  • Solusi 3: Port 3001 sudah digunakan → Ganti di settings.json

Issue: Database locked error

  • Solusi: SQLite WAL mode conflict → Restart aplikasi
  • Atau: Hapus database/billing.db-shm dan database/billing.db-wal

Issue: GenieACS connection failed

  • Solusi: Cek URL di settings.json
  • Verifikasi: POST /api/settings/test-genieacs

Issue: MikroTik tidak terhubung

  • Solusi: Cek kredensial & API port (default 8728)
  • Verifikasi: POST /api/settings/test-mikrotik

Issue: WhatsApp tidak terkoneksi

  • Solusi: Login ulang via QR code
  • Admin Panel → WhatsApp → Logout → Auth again

Issue: Payment gateway error

  • Solusi: Cek API key & secret
  • Verifikasi: POST /api/settings/test-[gateway]

13. PRODUCTION CHECKLIST

13.1 Pre-Deployment

Security:

  • ✅ Ganti session_secret dengan random string 32+ char
  • ✅ Ganti admin_password dengan password kuat
  • ✅ Ganti admin_api_key dengan API key random
  • ✅ Implementasi bcrypt untuk password hashing
  • ✅ Enable HTTPS (reverse proxy: nginx)
  • ✅ Setup firewall rules
  • ✅ Restrict access ke admin panel (/admin)
  • ✅ Remove debug logging pada production

Configuration:

  • ✅ Set NODE_ENV=production
  • ✅ Konfigurasi semua payment gateways
  • ✅ Setup WhatsApp authentication
  • ✅ Setup backup folder (auto-backup enabled)
  • ✅ Configure timezone sesuai lokasi
  • ✅ Setup OLT & GenieACS credentials

Database:

  • ✅ Run full database verification
  • ✅ Setup automated backup (cron job)
  • ✅ Test restore backup process
  • ✅ Monitor database size

Monitoring:

  • ✅ Setup error logging & alerts
  • ✅ Setup uptime monitoring (healthcheck)
  • ✅ Setup database backup verification
  • ✅ Setup audit trail cleanup (cron)

13.2 Post-Deployment

Verification:

  • ✅ Test semua portal (customer, admin, tech, agent, collector)
  • ✅ Test billing generation
  • ✅ Test payment webhook
  • ✅ Test WhatsApp notification
  • ✅ Test MikroTik integration
  • ✅ Test GenieACS/ONU management
  • ✅ Test backup & restore

Monitoring:

  • ✅ Monitor error logs untuk first 24 hours
  • ✅ Monitor database growth
  • ✅ Monitor CPU/RAM usage
  • ✅ Monitor connectivity to external services

14. PERFORMANCE OPTIMIZATION

14.1 Already Implemented

  • ✅ Lazy loading CSS & Bootstrap Icons
  • ✅ Parallel database queries
  • ✅ Service Worker caching
  • ✅ Hotspot users cache (15 seconds)
  • ✅ Settings cache (in-memory)
  • ✅ Database indexes (better-sqlite3 auto-indexes)

14.2 Recommendations

  • ⚠️ Setup Redis untuk session store (replace memory store)
  • ⚠️ Enable database query caching
  • ⚠️ Implement CDN untuk static assets
  • ⚠️ Setup load balancing (PM2 cluster mode atau nginx upstream)
  • ⚠️ Optimize large dataset queries dengan pagination
  • ⚠️ Monitor & cleanup old audit trails regularly

15. FILE SIZE & STATISTICS

15.1 Codebase Statistics

  • Total Template Files: 78 EJS files
  • Total Service Files: 27 service modules
  • Total Route Files: 12 router modules
  • Configuration Files: 10 config modules
  • Database File Size: ~5-50 MB (depends on data volume)

15.2 Directory Sizes (approximate)

views/              ~500 KB (78 EJS templates)
public/             ~1-2 MB (static assets)
database/           ~5-50 MB (SQLite + WAL)
node_modules/       ~200-300 MB (dependencies)
scripts/            ~50 KB (utility scripts)

16. DOKUMENTASI & RESOURCES

16.1 Official Resources

16.2 Key Documentation Files

  • README.md - Overview fitur & instalasi
  • OLT_OID_REFERENCE.md - OLT SNMP OID reference
  • env-example.txt - Environment variables example
  • scripts/fix-database.sh - Database migration helper

16.3 Configuration Examples

  • settings.json - Main configuration (DOCUMENTED above)
  • package.json - Dependencies & scripts

17. FITUR LANJUTAN & INTEGRASI

17.1 TR-069 Built-in ACS (Lightweight)

Keuntungan:

  • Tanpa GenieACS eksternal yang mahal
  • Berjalan di process yang sama dengan aplikasi billing
  • Lightweight: hanya ~50-100 MB RAM
  • Kompatibel dengan berbagai brand ONU

Setup ONU:

ACS URL: http://[IP-SERVER]:3001/acs
Periodic Inform: 300-600 detik

17.2 Multi-language Support

  • Indonesian (id) - Primary
  • English (en) - Secondary
  • Extensible untuk bahasa lain

17.3 PWA (Progressive Web App)

  • Service Worker: public/sw.js
  • Manifest: public/manifest.webmanifest
  • Offline support (limited)
  • Installable pada mobile

17.4 Advanced Payment Integration

  • Multiple gateway failover
  • Webhook signature verification
  • Auto-settlement on payment received
  • Manual payment entry untuk offline/bank transfer

17.5 GIS & Location Services

  • Real-time customer location
  • Technician GPS tracking
  • Route optimization (Google Maps integration)
  • Distance-based metrics

18. KESIMPULAN AUDIT

18.1 Status Kesehatan Aplikasi

✅ PRODUCTION-READY dengan catatan:

18.2 Kekuatan Sistem

  1. ✅ Comprehensive feature set (billing → network management)
  2. ✅ Multi-portal architecture (flexibility per role)
  3. ✅ Robust integration ecosystem (MikroTik, GenieACS, OLT, payment)
  4. ✅ Lightweight & efficient (SQLite, no external dependencies)
  5. ✅ Good code organization (services, routes, middleware pattern)
  6. ✅ Automation via cron jobs (billing, isolir, reminders)
  7. ✅ Internationalization support (i18n ready)

18.3 Areas for Improvement

  1. ⚠️ Security hardening:

    • Implement bcrypt untuk password storage
    • Add rate limiting
    • Enhance CORS configuration
    • JWT-based API authentication

  2. ⚠️ Performance optimization:

    • Redis untuk session store
    • Database query caching
    • CDN untuk static assets
    • Load balancing setup

  3. ⚠️ Testing coverage:

    • Unit tests (services)
    • Integration tests (routes)
    • API tests (endpoints)

  4. ⚠️ Documentation:

    • API documentation (Swagger/OpenAPI)
    • Database schema documentation
    • Deployment guide (Docker, K8s)

  5. ⚠️ Code quality:

    • ESLint configuration
    • Code style guidelines
    • Input validation framework

18.4 Rekomendasi Immediate Actions

  1. ✅ DONE: Generate audit documentation (file ini)
  2. ⏳ NEXT: Backup aplikasi & database
  3. ⏳ NEXT: Test semua fitur di staging environment
  4. ⏳ NEXT: Setup monitoring & alerting
  5. ⏳ NEXT: Create runbook operasional

18.5 Long-term Roadmap

  • Modernize dengan TypeScript
  • Add comprehensive testing suite
  • Containerize dengan Docker
  • Setup CI/CD pipeline
  • Add API documentation (Swagger)
  • Enhance security (OAuth2, JWT)
  • Performance monitoring (APM)

Audit Date: Juni 2026
Audit Status: ✅ COMPLETE
Document Version: 1.0
Last Updated: 2026-06-19

Jangan lupa: Simpan backup dokumentasi ini di lokasi aman!

Reference in new issue View Git Blame Copy Permalink