Banggai Dukcapil — Civil Registry Service Platform (Layanan Kependudukan)
Overview
Banggai Dukcapil (Layanan Kependudukan) is a government back-office platform for civil-registry services in Kabupaten Banggai. It manages population data and the full lifecycle of citizen service requests — births, deaths, relocation, marriage, divorce, and JKN-KIS health-insurance enrollment — across a multi-stakeholder approval pipeline that spans village operators, the Dukcapil office, and partner agencies (Dinas Sosial, Dinas Kesehatan, BPJS). Built with Next.js 15 (App Router) and React 19 using Server Actions and Server Components, the app acts as a secure Backend-for-Frontend over the Dukcapil backend. It implements nine role levels with route- and action-level access control, a village-to-Dukcapil verification workflow with revision and rejection reasons, a four-stage JKN-KIS verification chain, population analytics dashboards with drill-down choropleth maps (kecamatan to desa), Excel-based citizen data import, master-data management, and account administration. Security is a first-class concern: encrypted session cookies, RSA+AES-256-GCM request/response envelopes on Server Actions, obfuscated IDs in URLs, and a server-side proxy that never exposes the backend token to the browser.
Key Capabilities
- Citizen service requests: birth, death, relocation, marriage, and divorce
- Multi-stakeholder verification workflow (village → Dukcapil) with revision/rejection reasons
- Four-stage JKN-KIS (health insurance) verification: Desa → Dinas Sosial → Dinas Kesehatan → BPJS
- Population analytics dashboards with drill-down choropleth maps (kecamatan → desa)
- Citizen population data with detailed profiles and household member records
- Excel import of citizen data with validation-error reporting and templates
- NIK-based social-assistance data entry
- Master data management (OPD, assistance types, budgets, health facilities)
- Nine-level role-based access control with region and OPD scoping
- Real-time notifications via Socket.IO
- Encrypted sessions, RSA + AES-256-GCM request envelopes, and obfuscated IDs