# Server Information

> **Terakhir Diperbarui:** 2026-06-29

---

## Daftar Server

| Role | IP | OS | SSH Command |
|------|----|----|-------------|
| **Reverse Proxy + Docker** | 10.100.1.24 | CentOS Linux 8 | `ssh -m hmac-sha1 root@10.100.1.24 -p 22` |
| **Database (PostgreSQL + SQL Server)** | 10.100.1.25 | Ubuntu 18.04 LTS | `ssh -m hmac-sha1 root@10.100.1.25 -p 22` |
| **Active Directory / LDAP** | 10.100.1.40 | Windows Server 2012 R2 | `ssh -m hmac-sha1 Administrator@10.100.1.40 -p 22` |
| **Main Webserver** | 10.100.1.41 | Windows Server 2012 R2 | `ssh -m hmac-sha1 Administrator@10.100.1.41 -p 22` |
| **NAS QNAP TS-932X** | 10.100.1.10 | QTS 5.2.9 | `ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o IdentitiesOnly=yes -m hmac-sha1 admin@10.100.1.10 -p 22` |
| **Ollama AI VM** | 10.100.1.26 | Ubuntu 22.04 LTS | `ssh -i "$env:USERPROFILE\.ssh\id_rsa_geonet_laptop" -o IdentitiesOnly=yes -m hmac-sha1 root@10.100.1.26 -p 22` |
| **Zabbix** | 10.100.1.42 | Ubuntu 22.04 LTS | `.\scripts\ssh-zabbix.ps1` |
| **MikroTik CCR2004** | 10.100.1.1 | RouterOS 7.5 | `.\scripts\ssh-mikrotik.ps1` |

> QNAP & Ollama: Wajib **PowerShell** (bukan CMD) agar `$env:USERPROFILE` terbaca.
> SSH commands ke server **wajib minta persetujuan user** sebelum dijalankan.

---

## Server 10.100.1.24 — Reverse Proxy + Docker

### Services Running

| Stack | Container | Port Host | Path |
|-------|-----------|-----------|------|
| geonet-console | `geonet-console` | `127.0.0.1:8091` | `/opt/stacks/geonet-console/` |
| databaselist (legacy) | `databaselist` | (legacy) | `/opt/stacks/databaselist/` |
| sqlservercheck | `sqlservercheck` | — | `/opt/stacks/sqlservercheck/` |
| my-portal (Next.js) | `my-portal` | `127.0.0.1:8092` | `/opt/stacks/my-portal/` |

### Nginx Config

| File | Domain |
|------|--------|
| `/etc/nginx/conf.d/production/geonet-console.conf` | `console.gisportal.id` |
| `/etc/nginx/conf.d/production/databaselist.conf` | `databaselist.gisportal.id` |
| `/etc/nginx/conf.d/nas.conf` | `file.gisportal.id` (QNAP OSS proxy) |

### Perintah Umum

```bash
# Cek semua container
docker ps --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}"

# Log container
docker logs geonet-console --tail 50 -f

# Restart container
docker restart geonet-console

# Nginx reload
nginx -t && nginx -s reload
```

---

## Server 10.100.1.25 — Database

```bash
ssh -m hmac-sha1 root@10.100.1.25 -p 22

# PostgreSQL (dalam container di 10.100.1.24 — bukan langsung di .25)
# SQL Server: 10.100.1.25:1433 — dipakai geonet-console untuk database registry

# Akses PostgreSQL (di container dari server 10.100.1.24)
docker exec -it audit-postgres psql -U geonet_app -d databaselist_app
```

---

## Domain Map

| Domain | Backend | Keterangan |
|--------|---------|------------|
| `console.gisportal.id` | 10.100.1.24 → container :8091 | geonet-console |
| `databaselist.gisportal.id` | 10.100.1.24 → container legacy | databaselist legacy |
| `sqlservercheck.gisportal.id` | 10.100.1.24 → container | sqlservercheck |
| `file.gisportal.id/super-apps/` | 10.100.1.24 → QNAP OSS :8010 | Object storage proxy |

---

## Transfer File ke Server (Windows → Linux)

```powershell
# Buat archive
tar -czf "$env:TEMP\geonet-console.tar.gz" `
    --exclude="vendor" --exclude=".git" --exclude="node_modules" `
    -C "D:\Project\app on git\server-connection\geonet-console" .

# Upload via cmd.exe (wajib pakai Start-Process di PowerShell)
Start-Process -FilePath "cmd.exe" -ArgumentList `
    '/c ssh -m hmac-sha1 root@10.100.1.24 -p 22 "cat > /tmp/geonet-console.tar.gz" < "%TEMP%\geonet-console.tar.gz"' `
    -Wait -NoNewWindow

# Extract di server
ssh -m hmac-sha1 root@10.100.1.24 -p 22 "tar -xzf /tmp/geonet-console.tar.gz -C /opt/stacks/geonet-console && rm /tmp/geonet-console.tar.gz"
```

> ⚠️ **JANGAN overwrite `.env`** saat deploy — `.env` server berisi credentials production.

---

## SSL

HTTPS via Let's Encrypt (certbot) di 10.100.1.24. Semua domain `*.gisportal.id` di-terminate di Nginx.

---

## Backup

- Docker volumes: manual backup (belum otomatis)
- `.env` server: disimpan hanya di server (tidak di repo)
- Database backup: manual via `pg_dump` ke NAS QNAP