diff --git a/Dockerfile b/Dockerfile
index f3b6045..b45eb85 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -7,6 +7,7 @@ COPY . /var/www/html/
 
 RUN mkdir -p /var/www/html/uploads \
     && chown -R www-data:www-data /var/www/html \
+    && chmod -R 755 /var/www/html \
     && chmod -R 775 /var/www/html/uploads
 
 EXPOSE 80
diff --git a/install_database.php b/install_database.php
index 9a289e1..b8429c4 100644
--- a/install_database.php
+++ b/install_database.php
@@ -1,7 +1,5 @@
 <?php
-// install_database.php - installer sementara database UAS Tania
-// HAPUS file ini setelah database berhasil diimport.
-
+// install_database.php - jalankan sekali untuk import database.sql, lalu HAPUS file ini.
 set_time_limit(300);
 
 $host = getenv('DB_HOST') ?: 'localhost';
@@ -10,25 +8,23 @@ $pass = getenv('DB_PASS') ?: (getenv('DB_PASSWORD') ?: '');
 $db   = getenv('DB_NAME') ?: 'webgis_kemiskinan';
 $port = (int)(getenv('DB_PORT') ?: 3306);
 
-echo "<h2>Install Database UAS WebGIS Kemiskinan</h2>";
+header('Content-Type: text/html; charset=utf-8');
+echo "<h2>Install Database WebGIS Kemiskinan</h2>";
 echo "<p>Target koneksi: <b>" . htmlspecialchars($host) . ":" . htmlspecialchars((string)$port) . "</b>, database: <b>" . htmlspecialchars($db) . "</b>, user: <b>" . htmlspecialchars($user) . "</b></p>";
 
 $conn = new mysqli($host, $user, $pass, $db, $port);
-
 if ($conn->connect_error) {
     die("<p style='color:red'>Koneksi gagal: " . htmlspecialchars($conn->connect_error) . "</p>");
 }
-
 $conn->set_charset('utf8mb4');
-$sqlFile = __DIR__ . '/database.sql';
 
+$sqlFile = __DIR__ . '/database.sql';
 if (!file_exists($sqlFile)) {
-    die("<p style='color:red'>File database.sql tidak ditemukan di root project.</p>");
+    die("<p style='color:red'>File database.sql tidak ditemukan.</p>");
 }
 
 $sql = file_get_contents($sqlFile);
-
-// Buang CREATE DATABASE / USE agar cocok untuk Coolify normal user.
+// Jaga-jaga kalau file SQL diganti dan masih ada CREATE DATABASE / USE.
 $sql = preg_replace('/CREATE\s+DATABASE\s+(IF\s+NOT\s+EXISTS\s+)?`?[^`\s;]+`?.*?;/is', '', $sql);
 $sql = preg_replace('/USE\s+`?[^`\s;]+`?\s*;/is', '', $sql);
 
@@ -43,12 +39,11 @@ if ($conn->multi_query($sql)) {
         echo "<p style='color:red'>Ada error saat import: " . htmlspecialchars($conn->error) . "</p>";
     } else {
         echo "<p style='color:green;font-weight:bold'>Database berhasil diimport/reset.</p>";
-        echo "<p>Akun login: <b>admin</b> / <b>password</b></p>";
-        echo "<p>Setelah ini, hapus file <code>install_database.php</code> dari repo lalu redeploy.</p>";
+        echo "<p>Akun admin: <b>admin</b> / <b>password</b></p>";
+        echo "<p style='color:#b45309'>Setelah berhasil, hapus file <code>install_database.php</code> dan <code>cek_env.php</code> dari repo lalu redeploy.</p>";
     }
 } else {
     echo "<p style='color:red'>Import gagal: " . htmlspecialchars($conn->error) . "</p>";
 }
-
 $conn->close();
 ?>
diff --git a/koneksi.php b/koneksi.php
index a088c28..2bb710c 100644
--- a/koneksi.php
+++ b/koneksi.php
@@ -1,16 +1,17 @@
 <?php
+// koneksi.php - versi deploy Coolify + tetap aman untuk XAMPP lokal
 $host = getenv('DB_HOST') ?: 'localhost';
 $user = getenv('DB_USER') ?: 'root';
-$password = getenv('DB_PASS') ?: (getenv('DB_PASSWORD') ?: '');
-$database = getenv('DB_NAME') ?: 'webgis_kemiskinan';
+$pass = getenv('DB_PASS') ?: (getenv('DB_PASSWORD') ?: '');
+$db   = getenv('DB_NAME') ?: 'webgis_kemiskinan';
 $port = (int)(getenv('DB_PORT') ?: 3306);
 
-$conn = new mysqli($host, $user, $password, $database, $port);
+$conn = new mysqli($host, $user, $pass, $db, $port);
 
 if ($conn->connect_error) {
     die(json_encode([
         'status' => 'error',
-        'msg' => 'Koneksi database gagal: ' . $conn->connect_error
+        'msg'    => 'Koneksi database gagal: ' . $conn->connect_error
     ]));
 }