# Server Inventory — GeoNet LAN

**Owner:** `server-audit/`  
**Last updated:** 2026-07-10  
**Credential location:** Private key di `~/.ssh/` laptop; password server tidak didokumentasikan di repo.

Cold start SSH: [guide/ssh-access.md](./guide/ssh-access.md) | Quick ref: [../host.md](../host.md)

---

## Ringkasan

| Field | Value |
|-------|-------|
| Project | `server-audit/` |
| Network | LAN `10.100.1.0/24` (+ `192.168.0.x` MikroTik) |
| Gateway | MikroTik `10.100.1.1` port 255 |
| Publik NAT | `117.102.73.x` → reverse-proxy `.24` |

---

## Host / Server

| Host / IP | Hostname | Env | Role | OS | SSH alias | Key laptop | MAC hmac-sha1 |
|-----------|----------|-----|------|-----|-----------|------------|---------------|
| `10.100.1.1` | — | prod | Gateway NAT/firewall | RouterOS | — | `id_rsa_mikrotik` | ✅ port 255 |
| `10.100.1.14` | MULTIMEDIA | dev | Workstation GIS | Windows 10 | `multimedia` | `id_ed25519_geonet_proxmox` | — |
| `10.100.1.24` | proxy | prod | Reverse proxy, Docker stacks | RHEL/CentOS | `reverse-proxy` | `id_rsa_geonet_laptop` | ✅ |
| `10.100.1.25` | — | prod | PostgreSQL + SQL Server | RHEL/CentOS | `main-db` | `id_rsa_geonet_laptop` | ✅ |
| `10.100.1.26` | aiopr | prod | Ollama inference CPU | Ubuntu 22.04 | `ollama` | `id_rsa_geonet_laptop` | ✅ |
| `10.100.1.28` | mailserver | prod | Mailcow dockerized | Ubuntu | `mailcow` | `id_ed25519_mailcow` | — |
| `10.100.1.40` | — | prod | Active Directory LDAP | Windows Server 2012 R2 | `ad-ldap` | `id_rsa_geonet_laptop` | ✅ |
| `10.100.1.41` | — | prod | Main webserver | Windows Server | — | TBD | ✅ |
| `10.100.1.42` | — | prod | Zabbix monitoring | Linux | — | TBD | ✅ |
| `10.100.1.51`–`.53` | — | dev | ArcGIS Enterprise | Windows Server | `dev51-base` | `id_ed25519_geonet_proxmox` | — |
| `10.100.1.10` | — | prod | QNAP NAS TS-932X | QTS | — | `id_ed25519` | opsional |
| `10.100.1.101` | — | dev | Proxmox Dev | Proxmox | — | — | — |
| `10.100.1.102` | — | prod | Proxmox Opr | Proxmox | — | — | — |

**Status key-only (2026-07-10):** `.24`, `.25`, `.28`, `.26` (geonet) verified ✅

---

## Aplikasi & Runtime per Host

| Host | Aplikasi | Jenis | Port | Path / Catatan |
|------|----------|-------|------|----------------|
| `.24` | nginx | reverse proxy | 443 | `/etc/nginx/conf.d/` |
| `.24` | Docker stacks | Docker Compose | — | `/opt/stacks/` (Dockge) |
| `.24` | GeoNet collector | Docker | 8000 | `geonetagent-collector` |
| `.25` | PostgreSQL 12 | DB | 5432 | `geonetagent_dev` |
| `.25` | SQL Server | DB | 1433 | — |
| `.26` | Ollama | systemd | 11434 | CPU inference |
| `.28` | Mailcow | Docker | 443 | `/opt/stacks/mailcow` |
| `.42` | Zabbix | monitoring | — | — |

---

## Auth log per OS

| OS family | Log path |
|-----------|----------|
| RHEL/CentOS (`.24`, `.25`) | `/var/log/secure` |
| Ubuntu/Debian (`.26`, `.28`) | `/var/log/auth.log` |
| journald (semua Linux) | `journalctl -u sshd -n 20` |

---

## Mapping ke monorepo

| Komponen | Path monorepo |
|----------|---------------|
| SSH SSOT | `server-audit/docs/guide/ssh-access.md` |
| nginx config docs | `nginx/` |
| Mailcow | `Mailcow/` |
| GeoNetAgent collector | `GeoNetAgent/` |
| Deploy scripts | `server-connection/scripts/` |

---

## Catatan operasional

- Laptop developer harus di jaringan `10.100.1.x` untuk SSH langsung
- SCP dari Windows ke Linux lama: `-o MACs=hmac-sha1`
- Windows Server SSH: public key ke `C:\ProgramData\ssh\administrators_authorized_keys`

**Jangan:** password, private key, API token di file ini.