# Workstation MULTIMEDIA (Windows 10 Pro):
    ssh multimedia
    ssh admin@10.100.1.14 -p 22
    ssh admin@192.168.0.18 -p 22
    # Hostname: MULTIMEDIA | Dual NIC: 10.100.1.14 (utama, LAN server) + 192.168.0.18 (LAN MikroTik)
    # Dokumentasi lengkap: PC-Multimedia/docs/server.md
    # Key setup (jalankan sekali di PC MULTIMEDIA, PowerShell Admin):
    #   .\server-audit\scripts\setup-ssh-key-multimedia.ps1
    # Key laptop: ~/.ssh/id_ed25519_geonet_proxmox → C:\ProgramData\ssh\administrators_authorized_keys

# Mikrotik :
ssh -m hmac-sha1 admin@10.100.1.1 -p 255
ssh -i "$env:USERPROFILE\.ssh\id_rsa_mikrotik" -o IdentitiesOnly=yes -m hmac-sha1 -p 255 admin@10.100.1.1

ssh -m hmac-sha1 admin@192.168.0.1 -p 255
ssh -i "$env:USERPROFILE\.ssh\id_rsa_mikrotik" -o IdentitiesOnly=yes -m hmac-sha1 -p 255 admin@192.168.0.1
# Opr Proxmox
    ssh root@10.100.1.102

    ## USB passthrough VM 103 (monitoring)
    - USB bus 1 (controller PCI `0000:00:1a.0`) dipassthrough ke VM 103
    - Tujuan: flashdisk/storage docking auto terdeteksi di VM 103
    - Waktu setup: 30 Jun 2026
    - Perintah setup:
      ```bash
      ssh root@10.100.1.102
      qm stop 103
      qm set 103 --delete usb1
      qm set 103 -hostpci0 00:1a.0
      qm start 103
      ```
    - **Rollback** (kembalikan USB bus 1 ke Proxmox):
      ```bash
      ssh root@10.100.1.102
      qm stop 103
      qm set 103 --delete hostpci0
      qm start 103
      ```
    - Catatan: USB 2.0 saja (EHCI). Host kehilangan akses ke port USB bus 1.

# Dev Proxmox
    ssh root@10.100.1.101

# Reverse_proxy (App Server):
    ssh -m hmac-sha1 root@10.100.1.24 -p 22

    ## Disk Cleanup — 1 Jul 2026
    - Sebelum: disk 98% penuh (1.3 GB free / 50 GB)
    - Penyebab: Docker build cache menumpuk 45.29 GB
    - Tindakan: `docker builder prune -af` → hapus 45.29 GB
    - Hasil: disk 50% (26 GB free)
    - Sisa reclaimable: ~7.9 GB dangling images

    ## Rencana Deploy Zammad (ticketing)
    - Target domain: `ticket.gisportal.id`
    - Stack: `/opt/stacks/zammad`
    - Resource dibutuhkan: ~2–3 GB RAM, ~15 GB disk
    - Status: ✅ Resource tersedia, siap deploy
    - Integrasi: feedback dari Super Apps → auto-create tiket Zammad

# Mailserver (Mailcow):
    ssh mailcow
    ssh root@10.100.1.28
    # Key: ~/.ssh/id_ed25519_mailcow — passwordless OK 2026-07-03

# Main_Database:
    ssh -m hmac-sha1 root@10.100.1.25 -p 22

# Main_Webserver:
    ssh -m hmac-sha1 Administrator@10.100.1.41 -p 22

# AD-LDAP:
    ssh -m hmac-sha1 Administrator@10.100.1.40 -p 22

# zabbix:
    ssh -m hmac-sha1 root@10.100.1.42 -p 22


# Ollama (aiopr, Ubuntu 22.04) — POC & inference CPU:
    ssh ollama
    .\scripts\ssh-ollama.ps1
    ssh -i "$env:USERPROFILE\.ssh\id_rsa_geonet_laptop" -o IdentitiesOnly=yes -m hmac-sha1 root@10.100.1.26 -p 22
    ssh -i "$env:USERPROFILE\.ssh\id_rsa_geonet_laptop" -o IdentitiesOnly=yes -m hmac-sha1 geonet@10.100.1.26 -p 22
    # Wajib PowerShell (bukan CMD) agar $env:USERPROFILE terbaca. Jangan pakai password — login key only.
    # setup key geonet (sekali): type $env:USERPROFILE\.ssh\id_rsa_geonet_laptop.pub | ssh -m hmac-sha1 geonet@10.100.1.26 -p 22 "mkdir -p ~/.ssh && chmod 700 ~/.ssh && cat >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys"

# NAS QNAP (TS-932X):
    ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o IdentitiesOnly=yes admin@10.100.1.10 -p 22
    .\scripts\ssh-qnap.ps1
    ssh -m hmac-sha1 admin@10.100.1.10 -p 22

# ArcGIS Enterprise

## ArcGIS Base Development
    - IIS
    - ArcGIS Web Adaptor
    - Portal for ArcGIS
    - ArcGIS Server
    - ArcGIS Data Store (Relational)
    ssh dev51-base
    ssh Administrator@10.100.1.51 -p 22

## ArcGIS Data Store (Object)
    - ArcGIS Data Store (Object)
    ssh dev13-object
    ssh Administrator@10.100.1.52 -p 22

## Key setup (Windows OpenSSH)
    - Key: `~/.ssh/id_ed25519_geonet_proxmox`
    - Public key ditambahkan ke `C:\ProgramData\ssh\administrators_authorized_keys` di masing-masing server
    - Perintah setup (jalankan sekali per server):
      ```powershell
      ssh -t Administrator@10.100.1.51 -p 22 "powershell -Command `"Add-Content -Path 'C:\ProgramData\ssh\administrators_authorized_keys' -Value 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDxlXfuXAb/A2YCji3XWckW37Hs7SP/yen2CQwgV5M4x proxmox-geonet'; icacls C:\ProgramData\ssh\administrators_authorized_keys /inheritance:r; icacls C:\ProgramData\ssh\administrators_authorized_keys /grant SYSTEM:F; icacls C:\ProgramData\ssh\administrators_authorized_keys /grant Administrators:F; Restart-Service sshd`""
      ```