Full Source Web Đọc Truyện Online Cao Cấp Kết Hợp Tu Luyện Và Thương Mại Dành Cho Site Lớn

TruyenVIP la nen tang doc truyen chu online, gom 2 phan chinh:

  - Backend  : Laravel 12 (PHP 8.2+) - REST API, xac thuc bang Laravel Sanctum
               (Bearer token), xu ly nghiep vu, quan tri, thanh toan, realtime.
  - Frontend : Next.js 16 (App Router) + React 19 + TypeScript + TailwindCSS 4
               - giao dien nguoi doc, trinh doc truyen, trang quan tri (admin).

Dac diem noi bat:​
  - Doc truyen theo chuong, ho tro chuong VIP (mua bang Xu).
  - He thong Xu: nap tien (SePay / VNPay / the cao), ung ho (donate), Affiliate.
  - VIP: goi VIP theo thang, dac quyen, moc thuong VIP (milestone).
  - Tu luyen (cultivation): cap do, rank, exp - "check-in" hang ngay.
  - Nhiem vu (mission), huy hieu (badge), cua hang (shop item, khung avatar,
    hieu ung ten, sticker binh luan).
  - Binh luan (ho tro binh luan an danh, dinh kem anh + sticker), like, bao cao.
  - Bang xep hang, tim kiem, the loai, truyen de cu / truyen hot / truyen full.
  - Quan tri (admin panel): quan ly truyen/chuong/the loai/tag, banner, menu,
    cai dat site (SEO, favicon, bao tri, bat/tat dang ky, bat/tat binh luan),
    nguoi dung (phan quyen admin / mod / partner), don hang, bao cao.
  - Realtime qua Laravel Reverb (websocket) cho thong bao/binh luan.
  - Bao mat: rate limiting (chong spam/DDoS co ban), security headers, phan quyen
    theo vai tro (admin / mod / partner / user).

XEM THÊM ==> Hướng dẫn cài đặt chi tiết

HÌNH ẢNH DEMO

2. YEU CAU HE THONG
--------------------------------------------------------------------------------
  - PHP >= 8.2 (khuyen nghi 8.3) voi cac extension: pdo_mysql, mbstring, openssl,
    tokenizer, xml, ctype, json, bcmath, fileinfo, gd (hoac imagick) cho xu ly anh.
  - Composer 2.x
  - MySQL 8.0+ (hoac MariaDB 10.4+) - du an dung utf8mb4.
  - Node.js >= 20.x va npm 10.x
  - (Tuy chon) Laragon / XAMPP de chay local nhanh.

3. CAI DAT BACKEND (Laravel)
--------------------------------------------------------------------------------
Buoc 1: Di chuyen vao thu muc backend
    cd laravel

Buoc 2: Cai dat thu vien PHP
    composer install

Buoc 3: Tao file cau hinh moi truong
    copy .env.example .env        (Windows)
    cp .env.example .env          (macOS / Linux)

Buoc 4: Chinh sua file .env
    APP_NAME=TruyenVIP
    APP_ENV=local
    APP_KEY=                      (de trong, se tao o buoc 5)
    APP_DEBUG=true                (local: true, production: false)
    APP_URL=http://127.0.0.1:8000
    APP_TIMEZONE=Asia/Ho_Chi_Minh   (neu muon gio VN, mac dinh config la UTC)

    DB_CONNECTION=mysql
    DB_HOST=127.0.0.1
    DB_PORT=3306
    DB_DATABASE=truyenvip
    DB_USERNAME=root
    DB_PASSWORD=

    SESSION_DRIVER=database
    CACHE_STORE=database
    QUEUE_CONNECTION=database

    # Realtime (tuy chon)
    BROADCAST_CONNECTION=reverb
    REVERB_APP_ID=truyenvip
    REVERB_APP_KEY=truyenvip-key
    REVERB_APP_SECRET=truyenvip-secret
    REVERB_HOST=127.0.0.1
    REVERB_PORT=8080
    REVERB_SCHEME=http

    # Luu tru media: local, r2, imagekit, cloudinary (thu tu fallback)
    MEDIA_PROVIDERS=r2,imagekit,cloudinary,local
    # Dien thong tin R2 / ImageKit / Cloudinary neu dung (xem .env.example)

    # Cong thanh toan (neu dung)
    # Xem config/payment.php de biet cac bien can thiet (SePay, VNPay, the cao)

Buoc 5: Tao APP_KEY
    php artisan key:generate

Buoc 6: Tao database 'truyenvip' trong MySQL (co the dung Laragon/phpMyAdmin)

Buoc 7: Chay migration + seed du lieu mau
    php artisan migrate --seed
    (Neu muon xoa sach va tao lai: php artisan migrate:fresh --seed)

Buoc 8: Tao symbolic link cho storage (de hien thi anh upload)
    php artisan storage:link

Buoc 9: Khoi dong backend
    php artisan serve --host=127.0.0.1 --port=8000

    (Tuy chon) Chay realtime websocket:
    php artisan reverb:start

    (Tuy chon) Chay queue worker (xu ly job nen, thanh toan, thong bao):
    php artisan queue:work

4. CAI DAT FRONTEND (Next.js)
--------------------------------------------------------------------------------
Buoc 1: Di chuyen vao thu muc frontend
    cd frontend

Buoc 2: Cai dat thu vien Node
    npm install

Buoc 3: Tao file moi truong .env.local (neu chua co)
    NEXT_PUBLIC_API_URL=http://127.0.0.1:8000/api
    API_URL=http://127.0.0.1:8000/api

    # Realtime (neu dung Reverb) - phai khop voi backend
    NEXT_PUBLIC_REVERB_APP_KEY=truyenvip-key
    NEXT_PUBLIC_REVERB_HOST=127.0.0.1
    NEXT_PUBLIC_REVERB_PORT=8080
    NEXT_PUBLIC_REVERB_SCHEME=http

Buoc 4: Chay o che do phat trien
    npm run dev
    -> Truy cap http://127.0.0.1:3000

Buoc 5 (tuy chon): Build production
    npm run build
    npm run start

5. TAI KHOAN MAU (sau khi chay seeder)
--------------------------------------------------------------------------------
  - Admin   : admin@truyenvip.vn   / password   (toan quyen)
  - Mod     : mod@truyenvip.vn     / password   (quan tri noi dung)
  - Partner : partner@truyenvip.vn / password   (quan ly truyen cua minh)
  - User    : user@truyenvip.vn    / password   (nguoi doc)

  Luu y: Hay doi mat khau cac tai khoan nay truoc khi dua len production.
  Neu seeder cua ban khac, kiem tra trong database/seeders.

6. CAU TRUC THU MUC
--------------------------------------------------------------------------------
  laravel/                      Backend Laravel
    app/
      Http/Controllers/Api/      API cho nguoi doc (public + auth)
      Http/Controllers/Api/Admin/ API quan tri
      Http/Middleware/           RoleMiddleware, SecurityHeaders...
      Models/                    Eloquent models
      Services/                  Nghiep vu (Badge, Media, Mission, Vip...)
    bootstrap/app.php            Cau hinh route / middleware / rate limiter
    config/                      Cau hinh (app, media, payment, truyen...)
    database/migrations/         Schema database
    database/seeders/            Du lieu mau
    routes/api.php               Tat ca route API
    storage/app/public/          File upload (avatars, banners, ...)

  frontend/                     Frontend Next.js
    app/(site)/                  Trang nguoi doc (chuoi route cong khai)
    app/admin/                   Trang quan tri
    components/                  UI components (Header, SiteProvider...)
    lib/                         api client, types, helpers
    public/assets/               Anh tinh (badge, icon...)

  HUONG_DAN_CAI_DAT.txt         Tai lieu nay
  TRUYEN_BUILD_PROGRESS.md      Nhat ky tien do phat trien

7. CAC LENH THUONG DUNG
--------------------------------------------------------------------------------
  Backend:
    php artisan serve                 Chay server dev
    php artisan migrate               Chay migration
    php artisan migrate:fresh --seed  Tao lai DB + du lieu mau
    php artisan db:seed               Chay seeder
    php artisan optimize:clear        Xoa cache (config/route/view)
    php artisan config:cache          Cache cau hinh (production)
    php artisan route:cache           Cache route (production)
    php artisan queue:work            Chay queue worker
    php artisan reverb:start          Chay websocket server

  Frontend:
    npm run dev       Chay dev server
    npm run build     Build production
    npm run start     Chay ban build
    npm run lint      Kiem tra lint
    npx tsc --noEmit  Kiem tra TypeScript

8. BAO MAT VA CHONG SPAM / DDOS
--------------------------------------------------------------------------------
  - Rate limiting (cau hinh trong app/Providers/AppServiceProvider.php):
      + auth    : 5 request/phut/IP  (dang nhap, dang ky - chong brute force)
      + comment : 10 request/phut    (chong spam binh luan)
      + upload  : 10 request/phut    (chong spam upload file)
      + topup   : 5 request/phut     (chong spam tao don nap)
      + api     : 600 request/phut   (gioi han chung theo user/IP)
  - Security headers (app/Http/Middleware/SecurityHeaders.php):
      X-Content-Type-Options, X-Frame-Options, X-XSS-Protection,
      Referrer-Policy, Permissions-Policy, HSTS (production).
  - Xac thuc bang Sanctum Bearer token; phan quyen theo vai tro qua RoleMiddleware.
  - Validate du lieu dau vao chat che (Laravel Validation).
  - Khuyen nghi production:
      + Dat APP_DEBUG=false
      + Bat HTTPS, bat HSTS
      + Dat lai tat ca mat khau mac dinh
      + Cau hinh firewall / CDN (Cloudflare) de chong DDoS lop mang
      + Backup database dinh ky

9. XU LY SU CO THUONG GAP
--------------------------------------------------------------------------------
  - Loi 419 / 401 khi goi API: kiem tra token Sanctum con han va header
    Authorization: Bearer <token>.
  - Anh upload khong hien: chay `php artisan storage:link` va kiem tra
    MEDIA_PROVIDERS + quyen ghi thu muc storage/.
  - Loi CORS: kiem tra NEXT_PUBLIC_API_URL va cau hinh trong bootstrap/app.php.
  - Realtime khong chay: dam bao `php artisan reverb:start` dang chay va cac
    bien REVERB_* khop giua backend va frontend.
  - Loi 429 (Too Many Requests): ban dang bi rate limit, cho mot lat roi thu lai.
  - Cache loi sau khi sua cau hinh: chay `php artisan optimize:clear`.
  - Loi 500 "Attempted to lazy load [...] but lazy loading is disabled": o moi
    truong local, Model::shouldBeStrict bat che do nghiem. Hay eager-load quan he
    bi thieu (them vao `with(...)`) thay vi go bo shouldBeStrict.
  - Loi "The attribute [decor_id] ... was not retrieved": nguyen nhan khi load
    User voi cot rut gon (vi du `with('owner:id,name')`). Accessor decor/name_effect
    da tu kiem tra cot ton tai, nhung nen `select` them `decor_id, name_effect_id`
    khi can hien thi khung/hieu ung ten.
  - Loi 500 khi sua truyen trung slug: slug duoc tao tu dong va phai duy nhat, ke ca
    voi truyen da xoa mem (soft delete). Model da bao gom withTrashed() khi kiem tra.

10. GHI CHU TRIEN KHAI (PRODUCTION)
--------------------------------------------------------------------------------
  - Chay `composer install --optimize-autoloader --no-dev`.
  - Chay `php artisan config:cache && php artisan route:cache && php artisan view:cache`.
  - Build frontend: `npm run build` roi chay `npm run start` (hoac deploy len Vercel).
  - Cau hinh web server (Nginx/Apache) tro ve thu muc `laravel/public`.
  - Cau hinh HTTPS (Let's Encrypt) va domain cho ca API lan frontend.
  - Dat bien moi truong bao mat, khong commit file .env len git.

================================================================================
  Het. Chuc ban cai dat thanh cong!
================================================================================

Nguồn: Topcode.vn