# AI Session Summary

```yaml
session: 2026-07-06-mikrotik-bootstrap-audit
project: Mikrotik/
version: 0.1.0
status: ready
next: Verifikasi NAT mail gisportal.id vs Mailcow .28 setelah perubahan DNS
agent: Cursor
```

## TL;DR

- Bootstrap repo `Mikrotik/` + **audit live** `10.100.1.1` (RouterOS 7.5, uptime ~1d)
- Mode jaringan: **hybrid dual-WAN** (ISP1 Biznet + ISP2 IDBiz) + failover `check-gateway=ping`
- Backup `/export compact` → `backups/mikrotik-export-2026-07-06.rsc` (NAS FTP pass **diredaksi**)
- Mail publik `117.102.73.102` → NAT ke Mailcow `10.100.1.28` (:25/:587/:993/:465)
- Chat sebelumnya: user tanya riwayat MikroTik — ada di `server-connection/`, belum di chat Cursor

## Lanjut dari sini

1. Dokumentasi NAT mail selaras Mailcow `gisportal.id` — [notes/nat-mail-gisportal.md](./notes/nat-mail-gisportal.md)
2. Sebelum ubah routing: backup baru + append `version.md`
3. Pertimbangkan nonaktifkan PPTP (legacy)

## Jangan

- Commit `nasFtpPass` atau PPP password plaintext
- Edit SPF/DKIM di MikroTik
- Import `.rsc` ke production tanpa maintenance window

## Konteks chat (disimpan)

| Topik | Ringkasan |
|-------|-----------|
| Riwayat MikroTik di chat | Belum troubleshoot eksplisit di Cursor; infra ada di `server-connection/server/` |
| Mailcow gisportal | MX langsung `.102`; NAT port email ke `.28` — DNS SPF di Master Web |
| SSH gagal tanpa key | `Permission denied` — wajib `id_rsa_mikrotik` |