# SSH Host Reference — GeoNet LAN

> **SSOT lengkap:** [docs/guide/ssh-access.md](docs/guide/ssh-access.md)  
> **Inventori:** [docs/server.md](docs/server.md) | **Cold start:** [AGENTS.md](AGENTS.md)  
> Last updated: 2026-07-10

## Status key-only (laptop ini)

| Host | Alias | Key | Status |
|------|-------|-----|--------|
| `10.100.1.24` | `reverse-proxy` | `id_rsa_geonet_laptop` | ✅ 2026-07-10 |
| `10.100.1.25` | `main-db` | `id_rsa_geonet_laptop` | ✅ 2026-07-10 |
| `10.100.1.28` | `mailcow` | `id_ed25519_mailcow` | ✅ 2026-07-10 |
| `10.100.1.26` | `ollama` | `id_rsa_geonet_laptop` | ✅ 2026-07-10 (`geonet`) |
| `10.100.1.40` | `ad-ldap` | `id_rsa_geonet_laptop` | ✅ 2026-07-10 |

---

# Workstation MULTIMEDIA (Windows 10 Pro):
    ssh multimedia
    ssh admin@10.100.1.14 -p 22
    ssh admin@192.168.0.18 -p 22
    # Hostname: MULTIMEDIA | Dual NIC: 10.100.1.14 (utama, LAN server) + 192.168.0.18 (LAN MikroTik)
    # Dokumentasi lengkap: PC-Multimedia/docs/server.md
    # Key setup (jalankan sekali di PC MULTIMEDIA, PowerShell Admin):
    #   .\server-audit\scripts\setup-ssh-key-multimedia.ps1
    # Key laptop: ~/.ssh/id_ed25519_geonet_proxmox → C:\ProgramData\ssh\administrators_authorized_keys

# Mikrotik :
ssh -m hmac-sha1 admin@10.100.1.1 -p 255
ssh -i "$env:USERPROFILE\.ssh\id_rsa_mikrotik" -o IdentitiesOnly=yes -m hmac-sha1 -p 255 admin@10.100.1.1

ssh -m hmac-sha1 admin@192.168.0.1 -p 255
ssh -i "$env:USERPROFILE\.ssh\id_rsa_mikrotik" -o IdentitiesOnly=yes -m hmac-sha1 -p 255 admin@192.168.0.1
# Opr Proxmox
    ssh root@10.100.1.102

    ## USB passthrough VM 103 (monitoring)
    - USB bus 1 (controller PCI `0000:00:1a.0`) dipassthrough ke VM 103
    - Tujuan: flashdisk/storage docking auto terdeteksi di VM 103
    - Waktu setup: 30 Jun 2026
    - Perintah setup:
      ```bash
      ssh root@10.100.1.102
      qm stop 103
      qm set 103 --delete usb1
      qm set 103 -hostpci0 00:1a.0
      qm start 103
      ```
    - **Rollback** (kembalikan USB bus 1 ke Proxmox):
      ```bash
      ssh root@10.100.1.102
      qm stop 103
      qm set 103 --delete hostpci0
      qm start 103
      ```
    - Catatan: USB 2.0 saja (EHCI). Host kehilangan akses ke port USB bus 1.

# Dev Proxmox
    ssh root@10.100.1.101

# Reverse_proxy (App Server):
    ssh reverse-proxy
    ssh -m hmac-sha1 root@10.100.1.24 -p 22
    # Key: ~/.ssh/id_rsa_geonet_laptop — passwordless ✅ 2026-07-10
    # Setup: .\server-audit\scripts\setup-ssh-reverse-proxy.ps1

    ## Disk Cleanup — 1 Jul 2026
    - Sebelum: disk 98% penuh (1.3 GB free / 50 GB)
    - Penyebab: Docker build cache menumpuk 45.29 GB
    - Tindakan: `docker builder prune -af` → hapus 45.29 GB
    - Hasil: disk 50% (26 GB free)
    - Sisa reclaimable: ~7.9 GB dangling images

    ## Rencana Deploy Zammad (ticketing)
    - Target domain: `ticket.gisportal.id`
    - Stack: `/opt/stacks/zammad`
    - Resource dibutuhkan: ~2–3 GB RAM, ~15 GB disk
    - Status: ✅ Resource tersedia, siap deploy
    - Integrasi: feedback dari Super Apps → auto-create tiket Zammad

# Mailserver (Mailcow):
    ssh mailcow
    ssh root@10.100.1.28
    # Key: ~/.ssh/id_ed25519_mailcow — passwordless ✅ 2026-07-10

# Main_Database:
    ssh main-db
    ssh -m hmac-sha1 root@10.100.1.25 -p 22
    # Key: ~/.ssh/id_rsa_geonet_laptop — passwordless ✅ 2026-07-10

# Main_Webserver:
    ssh -m hmac-sha1 Administrator@10.100.1.41 -p 22

# AD-LDAP (Windows Server 2012 R2):
    ssh ad-ldap
    ssh -m hmac-sha1 Administrator@10.100.1.40 -p 22
    # Key laptop ini: ~/.ssh/id_rsa_geonet_laptop → C:\ProgramData\ssh\administrators_authorized_keys
    # Setup: .\server-audit\scripts\setup-ssh-ad-ldap.ps1
    # Status: passwordless ✅ 2026-07-10 (Win2012 R2)

# zabbix:
    ssh -m hmac-sha1 root@10.100.1.42 -p 22


# Ollama (aiopr, Ubuntu 22.04) — POC & inference CPU:
    ssh ollama
    .\server-connection\scripts\ssh-ollama.ps1 -User geonet
    ssh -i "$env:USERPROFILE\.ssh\id_rsa_geonet_laptop" -o IdentitiesOnly=yes -m hmac-sha1 geonet@10.100.1.26 -p 22
    # Key geonet: passwordless ✅ 2026-07-10 (user operasional)
    # root@10.100.1.26 — belum upload key (opsional)

# NAS QNAP (TS-932X):
    ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o IdentitiesOnly=yes admin@10.100.1.10 -p 22
    .\scripts\ssh-qnap.ps1
    ssh -m hmac-sha1 admin@10.100.1.10 -p 22

# ArcGIS Enterprise

## ArcGIS Base Development
    - IIS
    - ArcGIS Web Adaptor
    - Portal for ArcGIS
    - ArcGIS Server
    - ArcGIS Data Store (Relational)
    ssh dev51-base
    ssh Administrator@10.100.1.51 -p 22

## ArcGIS Data Store (Object)
    - ArcGIS Data Store (Object)
    ssh dev13-object
    ssh Administrator@10.100.1.52 -p 22

## Key setup (Windows OpenSSH)
    - Key: `~/.ssh/id_ed25519_geonet_proxmox`
    - Public key ditambahkan ke `C:\ProgramData\ssh\administrators_authorized_keys` di masing-masing server
    - Perintah setup (jalankan sekali per server):
      ```powershell
      ssh -t Administrator@10.100.1.51 -p 22 "powershell -Command `"Add-Content -Path 'C:\ProgramData\ssh\administrators_authorized_keys' -Value 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDxlXfuXAb/A2YCji3XWckW37Hs7SP/yen2CQwgV5M4x proxmox-geonet'; icacls C:\ProgramData\ssh\administrators_authorized_keys /inheritance:r; icacls C:\ProgramData\ssh\administrators_authorized_keys /grant SYSTEM:F; icacls C:\ProgramData\ssh\administrators_authorized_keys /grant Administrators:F; Restart-Service sshd`""
      ```