Next-Gen Standalone
High-Performance CBT Server

# 1. Update & Install PostgreSQL
sudo apt update && sudo apt install -y postgresql postgresql-contrib
sudo systemctl enable --now postgresql

# 2. Buat User & Database mc_examgo
sudo -u postgres psql -c "CREATE USER mc_user WITH PASSWORD 'PasswordKuat!2026';"
sudo -u postgres psql -c "CREATE DATABASE mc_examgo OWNER mc_user;"
sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE mc_examgo TO mc_user;"

sudo mkdir -p /opt/mc-examgo/uploads /opt/mc-examgo/logs && cd /opt/mc-examgo
sudo unzip MC-ExamGo-amd64-v1.2.2.zip

# Beri izin eksekusi binary & proteksi .env
sudo chmod +x mc-exam-go-linux-amd64-v1.2.2 mc-exam-go-migrate-linux-amd64
sudo chmod 600 .env

sudo nano /opt/mc-examgo/.env

# Port aplikasi (Biarkan 8080 jika tidak ada bentrok)
SERVER_PORT=8080

# Zona Waktu Ujian: Asia/Jakarta (WIB) | Asia/Makassar (WITA) | Asia/Jayapura (WIT)
DB_TIMEZONE=Asia/Jakarta

# PostgreSQL (Wajib Diisi)
DB_HOST=localhost
DB_PORT=5432
DB_NAME=mc_examgo
DB_USER=mc_user
DB_PASS=PasswordKuat!2026

# Keamanan Sistem (Dual JWT Wajib 64+ Karakter Acak)
JWT_SECRET=isi-dengan-string-acak-panjang-min-64-karakter-admin
JWT_STUDENT_SECRET=isi-dengan-string-acak-panjang-min-64-karakter-siswa

cd /opt/mc-examgo
sudo ./mc-exam-go-migrate-linux-amd64 --seed

sudo nano /etc/systemd/system/mc-examgo.service

[Unit]
Description=MC-ExamGO CBT Daemon Server
After=network.target postgresql.service
Wants=postgresql.service

[Service]
Type=simple
User=root
WorkingDirectory=/opt/mc-examgo
ExecStart=/opt/mc-examgo/mc-exam-go-linux-amd64-v1.2.2
Restart=always
RestartSec=5s
StandardOutput=append:/opt/mc-examgo/logs/app.log
StandardError=append:/opt/mc-examgo/logs/app.log

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload && sudo systemctl enable --now mc-examgo

sudo apt update && sudo apt install -y nginx certbot python3-certbot-nginx

sudo nano /etc/nginx/sites-available/mc-examgo

server {
    listen 80;
    server_name cbts.sekolahanda.sch.id;
    client_max_body_size 100M;

    location / {
        proxy_pass http://127.0.0.1:8080;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout 300s;
    }
}

sudo ln -s /etc/nginx/sites-available/mc-examgo /etc/nginx/sites-enabled/
sudo nginx -t && sudo systemctl reload nginx
sudo certbot --nginx -d cbts.sekolahanda.sch.id

SERVER_PORT=8080
DB_TIMEZONE=Asia/Jakarta

# Database PostgreSQL FastPanel
DB_HOST=127.0.0.1
DB_PORT=5432
DB_NAME=mc_examgo
DB_USER=mc_user
DB_PASS=PasswordKuatYangDibuatTadi

# Dual JWT Secrets (Wajib min. 64 karakter acak)
JWT_SECRET=isi-dengan-string-acak-panjang-min-64-karakter-admin
JWT_STUDENT_SECRET=isi-dengan-string-acak-panjang-min-64-karakter-siswa

# 1. Masuk ke direktori web situs Anda di FastPanel
cd /var/www/*/data/www/cbts.sekolahanda.sch.id

# 2. Beri izin eksekusi binary & proteksi .env
sudo chmod +x mc-exam-go-linux-amd64-v1.2.2 mc-exam-go-migrate-linux-amd64
sudo chmod 600 .env

# 3. Jalankan migrasi database
sudo ./mc-exam-go-migrate-linux-amd64 --seed

sudo nano /etc/systemd/system/mc-examgo.service

[Unit]
Description=MC-ExamGO FastPanel Daemon Server
After=network.target postgresql.service
Wants=postgresql.service

[Service]
Type=simple
User=root
WorkingDirectory=/var/www/USER_ANDA/data/www/cbts.sekolahanda.sch.id
ExecStart=/var/www/USER_ANDA/data/www/cbts.sekolahanda.sch.id/mc-exam-go-linux-amd64-v1.2.2
Restart=always
RestartSec=5s
StandardOutput=append:/var/www/USER_ANDA/data/www/cbts.sekolahanda.sch.id/logs/app.log
StandardError=append:/var/www/USER_ANDA/data/www/cbts.sekolahanda.sch.id/logs/app.log

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload && sudo systemctl enable --now mc-examgo
sudo systemctl status mc-examgo

# Port aplikasi
SERVER_PORT=8080

# Zona Waktu Ujian
DB_TIMEZONE=Asia/Jakarta

# PostgreSQL Windows
DB_HOST=localhost
DB_PORT=5432
DB_NAME=mc_examgo
DB_USER=postgres
DB_PASS=password_postgresql_anda

# Keamanan Sistem (Dual JWT Wajib 64+ Karakter Acak)
JWT_SECRET=isi-karakter-acak-panjang-min-64-karakter-admin
JWT_STUDENT_SECRET=isi-karakter-acak-berbeda-untuk-siswa

cd C:\MC-ExamGo-Win
mc-exam-go-migrate.exe --seed

cd C:\MC-ExamGo-Win
mc-exam-go-windows-amd64-v1.2.2.exe

# 1. Naikkan batas open file descriptor sesi saat ini ke 65.535
sudo ulimit -n 65535

# 2. Tambahkan tuning TCP Network ke /etc/sysctl.conf
sudo bash -c 'cat << "EOF" >> /etc/sysctl.conf
net.core.somaxconn = 65535
net.ipv4.tcp_max_syn_backlog = 65535
net.ipv4.tcp_tw_reuse = 1
net.ipv4.ip_local_port_range = 1024 65535
EOF'

# 3. Terapkan perubahan kernel secara instan
sudo sysctl -p

sudo nano /etc/nginx/nginx.conf

user www-data;
worker_processes auto;
worker_rlimit_nofile 65535; # Batas file descriptor worker

events {
    worker_connections 20480; # Izinkan hingga 20.480 koneksi per worker
    multi_accept on;
    use epoll;
}

# 1. Pipa koneksi persisten ke Go Backend (Letakkan di luar blok server {})
upstream mc_examgo_backend {
    server 127.0.0.1:8080;
    keepalive 512; # Mencegah Nginx membuka-tutup port lokal berulang kali
}

# 2. Blok server situs Anda
server {
    server_name cbts.sekolahanda.sch.id;

    location / {
        proxy_pass http://mc_examgo_backend;
        proxy_http_version 1.1;

        # Dukungan WebSocket / SSE & Telemetri Real-time
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;

        # Forward Headers
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header CF-Connecting-IP $http_cf_connecting_ip;

        # Buffer Tuning untuk Traffic Masif
        proxy_buffer_size 128k;
        proxy_buffers 4 256k;
        proxy_busy_buffers_size 256k;

        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
    }
}

sudo nginx -t && sudo systemctl reload nginx

# 1. Perluas Rentang Port Dinamis TCP (Ephemeral Ports) ke 64.511 port
netsh int ipv4 set dynamicport tcp start=1025 num=64511
netsh int ipv6 set dynamicport tcp start=1025 num=64511

# 2. Percepat Daur Ulang Socket TCP yang Selesai (30 detik, default 240 detik)
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" -Name "TcpTimedWaitDelay" -Value 30 -Type DWord
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" -Name "MaxUserPort" -Value 65534 -Type DWord

# 3. Kunci Skema Daya CPU ke High Performance (Intel / AMD Full Boost Clock)
powercfg /setactive 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c

# ------------------------------------------------------------------------------
# OPTIMASI POSTGRESQL 16+ (RAM 32GB, NVMe SSD, 1.800 SISWA CONCURRENT)
# ------------------------------------------------------------------------------

# 1. KONEKSI POOLING
max_connections = 300                 # Cukup untuk pool Go (150) + Admin + Cadangan

# 2. MEMORI BUFFER
shared_buffers = 2GB                  # Maksimal 2GB-4GB di Windows
huge_pages = off                      # Wajib OFF di Windows
effective_cache_size = 18GB           # 60% dari total RAM untuk query planner
work_mem = 16MB                       # Memori sorting per operasi query
maintenance_work_mem = 512MB          # Memori untuk index & vacuum

# 3. STORAGE & CHECKPOINT (NVMe SSD High IOPS)
checkpoint_completion_target = 0.9    # Meratakan penulisan checkpoint ke SSD
checkpoint_timeout = 15min
min_wal_size = 1GB
max_wal_size = 8GB
random_page_cost = 1.1                # Nilai optimal untuk NVMe PCIe SSD
effective_io_concurrency = 200        # Paralelisasi baca-tulis SSD

# 4. QUERY PLANNER & PARALLEL WORKERS
max_worker_processes = 16
max_parallel_workers_per_gather = 4
max_parallel_workers = 16
max_parallel_maintenance_workers = 4

k6 run stress_vps.js