Qiwako CMS - Documentation

This directory contains detailed documentation for Qiwako CMS.

🚀 Quick Start

New to Qiwako? Mulai dari sini: Quick Start Guide by User Type

📢 Update Penting (Nov 2025)

• Semua halaman tenant kini menggunakan layout, navbar, dan footer yang konsisten & modern.
• Info tenant & versi Qiwako tampil di footer.
• Script maintenance dipindahkan ke scripts/legacy/ untuk workspace lebih bersih.

Panduan cepat berdasarkan peran Anda:
- 👨‍💼 Tenant Admin & User — Panduan dashboard, konten, media, donasi, dan pengelolaan tenant.
- 🔐 Superuser — Token-based access, notifikasi, emergency access, dan audit.
- 🔧 Developer — Setup dev environment, workflow, testing, deployment, dan info scripts/legacy.
- 🌐 Visitor — Cara menjelajah website, fitur donasi, PWA, dan kontak.

📚 Documentation by User Type

🔧 For Developers

• Developer Guide - Developer documentation and contribution guide
• Deployment Guide - Complete deployment guide for production (VPS lokal Indonesia)
• Debug Toolbar Guide - Panduan menggunakan Django Debug Toolbar
• Scripts vs Management Commands - Perbedaan antara scripts/ dan management/commands/
• Testing Guide - Comprehensive testing guide untuk semua fitur Qiwako
• Template Development Guide - Guide for template development

👥 For Tenant Admins & Users

• Tenant User Guide - 📖 Panduan lengkap untuk Tenant Admin & Editor - Tutorial step-by-step cara menggunakan Qiwako CMS
• Template Creation Guide - 🎨 Panduan lengkap membuat template sendiri untuk Tenant Admin - Step-by-step tutorial dengan contoh template lengkap
• Google Analytics Integration - Cara menambahkan Google Analytics ke tenant (termasuk Advanced Analytics Tracking)
• Form Embedding & Settings - Cara embed form di page/post dengan tenant-specific settings (termasuk Google Docs, Google Forms, Typeform, dll)
• Announcement Pop-up System - Sistem pop-up announcement dengan tenant-specific settings, scheduling, dan auto-delete
• User Preferences System - Sistem user preferences dengan theme support (light/dark/auto), language, editor, dan dashboard preferences

🔐 For Superusers

• RBAC - Role-Based Access Control documentation (termasuk Superuser Temporary Access Token dan MFA requirements)
• Superuser Access Control - 🔒 Token-based access control untuk superuser (NO direct access to tenants)
• Superuser Notification Feature - 🔔 Sistem notifikasi otomatis untuk token support baru
• Emergency Access - Emergency Access Request untuk superuser access ketika semua tenant admin keluar
• Policies - Platform-wide policies managed by superuser (MFA requirements, etc.)
• Audit Log Retention - Selective logging dan priority-based retention policy untuk audit logs

🌐 For Visitors & Public Users

• Visitor Guide - 📖 Panduan lengkap untuk pengunjung website - Cara menggunakan website, PWA, donasi, form kontak, dan fitur lainnya
• Features - Comprehensive feature documentation (public-facing features)
• PWA Guide - Progressive Web App implementation (how PWA works for visitors)
• Mobile Guide - Mobile optimization and templates (mobile user experience)

Documentation Index

Core Documentation

• Features - Comprehensive feature documentation
• Security Audit - Security best practices and audit
• Security Audit Report - Detailed security audit report with vulnerability findings
• Security Fixes Summary - Summary of security fixes implemented
• Spam Protection - Spam protection mechanisms
• Brute Force Protection - Account lockout, IP blocking, and admin alerting for brute force attacks
• DDoS Protection - Global rate limiting, request size limits, and pattern detection for DDoS attacks

Feature-Specific Guides

• WebP Implementation - WebP image optimization and lazy loading
• Push Notifications - Push notification setup
• User-Tenant Relationship - Dokumentasi lengkap tentang relasi user dan tenant
• IndexedDB Implementation - Offline data storage dengan IndexedDB
• Staging Environment - Staging environment setup dan quick start
• Platform vs Tenant Settings - Perbandingan komprehensif antara platform settings dan tenant settings
• Documentation System - 🔒 Security-first documentation system dengan access control, content sanitization, dan audit logging (termasuk demo user handling)

Quick Links

• Main README - Project overview and quick start
• Contributing - Contribution guidelines
• Security Policy - Security policy and reporting

For questions or issues, please refer to the main README.md or create an issue in the repository.