# Version History

**Owner:** riwayat versi `server-audit/` — **APPEND** setiap perubahan material.

---

## [0.1.8] - 2026-07-10

- AD-LDAP `10.100.1.40` (`ad-server`): key-only verified (`KEY_AUTH_OK`)
- Login: `ssh ad-ldap`

---

## [0.1.7] - 2026-07-10

- AD `.40`: force overwrite authorized_keys; dual write ProgramData + profile; enable `ssh-rsa`; uncomment Match Group
- Client: `PubkeyAcceptedAlgorithms +ssh-rsa` di alias `ad-ldap`

---

## [0.1.6] - 2026-07-10

- Fix AD `.40` setup: tulis `administrators_authorized_keys` sebagai **UTF-8 no BOM** (bukan UTF-16 dari Add-Content)
- ACL ketat SYSTEM + Administrators only

---

## [0.1.5] - 2026-07-10

- Script SSH key-only AD-LDAP `.40` (Win2012 R2): `scripts/setup-ssh-ad-ldap.ps1`
- Alias `ad-ldap` di `~/.ssh/config` + `ssh-config.example`
- Key: `id_rsa_geonet_laptop` → `administrators_authorized_keys` (bukan user profile authorized_keys)

---

## [0.1.4] - 2026-07-10

- Ollama `10.100.1.26`: key-only verified untuk user `geonet` (`KEY_AUTH_OK`)
- Alias `ssh ollama` diupdate ke `User geonet` di `~/.ssh/config`

---

## [0.1.3] - 2026-07-10

- Mailcow `10.100.1.28`: key-only verified (`KEY_AUTH_OK`) via PowerShell
- Login: `ssh mailcow`
- Catatan: perintah dengan `$env:USERPROFILE` gagal di CMD — wajib PowerShell

---

## [0.1.2] - 2026-07-10

- Main DB `10.100.1.25`: key-only verified (`KEY_AUTH_OK`)
- Login: `ssh main-db`

---

## [0.1.1] - 2026-07-10

- Dokumentasi SSOT SSH key-based access: `docs/guide/ssh-access.md`
- Bootstrap struktur docs standar AI-Agent-Standards (`AGENTS.md`, `docs/*`)
- Setup laptop: `id_rsa_geonet_laptop` + `id_ed25519_mailcow` + `~/.ssh/config`
- reverse-proxy `.24`: key-only verified (`KEY_AUTH_OK`)
- Script setup: `setup-ssh-reverse-proxy.ps1`, `setup-ssh-main-db.ps1`, `setup-ssh-mailcow.ps1`
- Temuan operasional: RHEL `.24` log auth di `/var/log/secure` (bukan `auth.log`)
- Update `host.md` dengan status key dan link ke runbook

---

## [0.1.0] - 2026-07-10

- Bootstrap dokumentasi standar (AGENTS.md + docs/)
- Inisialisasi project `server-audit` sebagai SSOT inventori server GeoNet
- Migrasi referensi dari `host.md` dan `.cursor/server.md` ke struktur `docs/`