# Server Inventory — PC Multimedia

**Owner:** host/IP, SSH, runtime workstation MULTIMEDIA.  
Indeks lintas project: [Workspace-Context.md](../../Workspace-Context.md) · SSH cepat: [server-audit/host.md](../../server-audit/host.md)

---

## Ringkasan

| Field | Value |
|-------|-------|
| Project | `PC-Multimedia/` |
| Last updated | 2026-07-06 |
| Credential location | Password admin di PC lokal saja; SSH key di laptop `~/.ssh/id_ed25519_geonet_proxmox` |

---

## Host / Server

| Host / IP | Env | Role | OS | Akses | Catatan |
|-----------|-----|------|-----|-------|---------|
| `MULTIMEDIA` / `10.100.1.14` | dev | Workstation (utama) | Windows 10 Pro | `ssh multimedia` | NIC Ethernet — LAN server `10.100.1.0/24`, GW `10.100.1.1` |
| `192.168.0.18` | dev | Workstation (sekunder) | Windows 10 Pro | `ssh admin@192.168.0.18` | NIC Ethernet 2 — LAN MikroTik `192.168.0.0/24`, GW `192.168.0.1` |

**DHCP MikroTik:** `192.168.0.18` — MAC `10:ff:e0:3a:7d:15` (lihat `server-connection/config-check.rsc`)

---

## Aplikasi & Runtime per Host

| Host / IP | Aplikasi | Jenis | Port | Path / Service | Catatan |
|-----------|----------|-------|------|----------------|---------|
| 10.100.1.14 | OpenSSH SSH Server | Windows Service | 22 | `sshd` (Automatic) | Passwordless via `administrators_authorized_keys` |
| 10.100.1.14 | Windows Firewall | Rule | 22 | `OpenSSH-Server-In-TCP` | Inbound Allow TCP 22 |

Wi-Fi: disconnected (audit 6 Jul 2026)

---

## SSH — Konfigurasi

### Dari laptop dev

```text
ssh multimedia              # → 10.100.1.14, user admin, key otomatis
ssh admin@10.100.1.14       # sama, explicit IP
ssh admin@192.168.0.18      # via LAN MikroTik
```

### `~/.ssh/config` (laptop)

```text
Host multimedia 10.100.1.14 192.168.0.18
    HostName 10.100.1.14
    User admin
    Port 22
    IdentityFile ~/.ssh/id_ed25519_geonet_proxmox
    IdentitiesOnly yes
```

### Di PC MULTIMEDIA (key auth untuk admin)

| Item | Path / nilai |
|------|----------------|
| Public key file | `C:\ProgramData\ssh\administrators_authorized_keys` |
| Key | `ssh-ed25519 ... proxmox-geonet` (dari `id_ed25519_geonet_proxmox.pub` laptop) |
| ACL | `SYSTEM:(F)`, `Administrators:(F)`, inheritance disabled |
| Setup ulang | [server-audit/scripts/setup-ssh-key-multimedia.ps1](../../server-audit/scripts/setup-ssh-key-multimedia.ps1) |

> **Penting:** Untuk user di grup Administrators, Windows OpenSSH **mengabaikan** `C:\Users\admin\.ssh\authorized_keys`.

### Host key (ED25519)

Fingerprint: `SHA256:VxUdCFwVQ9lIoX1km6H243NPI1lSo6My1B5YnGX8iX0`

---

## Database

Tidak ada database lokal di workstation ini. Koneksi DB remote (jika dipakai untuk dev GIS):

| Host | Engine | Dipakai untuk | Credential |
|------|--------|---------------|------------|
| `10.100.1.25` | SQL Server + PostgreSQL | Dev DB shared | [ArcGIS Enterprise/.env](../ArcGIS%20Enterprise/.env) (lokal laptop, jangan commit) |

---

## Endpoint & URL

| Env | URL / Host:Port | Env var | Catatan |
|-----|-----------------|---------|---------|
| dev | `admin@10.100.1.14:22` | `HOST_IP_PRIMARY`, `SSH_ALIAS` | Akses utama dari LAN server |
| dev | `admin@192.168.0.18:22` | `HOST_IP_SECONDARY` | Akses dari LAN MikroTik |

---

## Mapping ke path project (monorepo)

| Komponen | Path di monorepo | Keterangan |
|----------|------------------|------------|
| Dokumentasi workstation | `PC-Multimedia/` | SSOT project ini |
| Script setup SSH key | `server-audit/scripts/setup-ssh-key-multimedia.ps1` | Jalankan sekali di PC (Admin) |
| SSH index lintas host | `server-audit/host.md` | Entry cepat `ssh multimedia` |

---

## Dependency server ke project lain

| Host / Service | Project monorepo | Relasi |
|----------------|------------------|--------|
| `10.100.1.51` (DEV11) | ArcGIS Enterprise | Dev GIS server — akses dari workstation |
| `10.100.1.25` | server-connection, GeoNetAgent | Shared DB |
| `10.100.1.1` / `192.168.0.1` | server-audit | MikroTik gateway |

---

## Catatan operasional

- **Dual NIC:** gunakan `10.100.1.14` saat laptop di subnet `10.100.1.x` (sama dengan server infra)
- **Port 22:** terbuka di kedua IP (terverifikasi 6 Jul 2026)
- **Passwordless SSH:** terverifikasi `ssh multimedia hostname` → `MULTIMEDIA`, `whoami` → `multimedia\admin`
- OpenSSH diinstall manual Jul 2026; service `sshd` Running, StartupType Automatic

**Jangan:** simpan password admin atau private key di repo.