# Troubleshooting

> **Terakhir Diperbarui:** 2026-06-29

---

## Login gagal — "Invalid credentials"

**Cek:**
1. Server AD 10.100.1.40 reachable dari container
2. `LDAP_BIND_PASSWORD` di `.env` benar
3. Akun AD aktif (tidak expired/locked)

```bash
ssh -m hmac-sha1 root@10.100.1.24 -p 22
docker exec -it geonet-console php artisan tinker
# app(\App\Services\LdapAuthService::class)->attempt('username', 'password')
```

---

## Avatar tidak bisa diupload / ditampilkan

**Penyebab 1:** OSS credentials salah
```bash
docker exec -it geonet-console php artisan tinker
# Storage::disk('oss')->put('test.txt', 'hello')
```

**Penyebab 2:** Bucket ACL ter-reset (tidak public-read)
```bash
curl -X POST http://10.100.1.10:8010/v1/AUTH_super-apps/super-apps \
  -H "X-Auth-Token: <swift-token>" \
  -H "X-Container-Read: .r:*,.rlistings"
```

---

## Container tidak mau start

```bash
ssh -m hmac-sha1 root@10.100.1.24 -p 22
docker ps -a --filter name=geonet-console
docker logs geonet-console --tail 100
```

**Penyebab umum:**
- `APP_KEY` kosong → `docker exec geonet-console php artisan key:generate`
- Port 8091 sudah terpakai → `netstat -tlnp | grep 8091`
- `.env` tidak ada → `cp .env.example .env && nano .env`

---

## Migration gagal saat startup

Error `project_search` DB (10.100.1.25) tidak reachable:
```
SQLSTATE[HY000] [2002] Connection refused
```
Ini **non-critical** — fungsi utama app tetap berjalan. `project_search` hanya untuk Ollama search (belum aktif).

---

## Deploy script error — transfer file

```powershell
# Gunakan cmd.exe method (bukan heredoc di PowerShell)
Start-Process -FilePath "cmd.exe" -ArgumentList `
    '/c ssh -m hmac-sha1 root@10.100.1.24 -p 22 "cat > /tmp/project.tar.gz" < "%TEMP%\project.tar.gz"' `
    -Wait -NoNewWindow
```

Jangan gunakan `&&` di PowerShell — gunakan `;`.

---

## SSH "Could not negotiate a key exchange algorithm"

```powershell
# Tambahkan flag -m hmac-sha1
ssh -m hmac-sha1 root@10.100.1.24 -p 22
```

---

## MikroTik — SSH key tidak diterima

```powershell
# RouterOS 7.5 butuh RSA
.\scripts\setup-ssh-mikrotik.ps1 -KeyType rsa

# Recovery manual (via Winbox):
# /user ssh-keys remove [find user=admin]
# /ip ssh set password-authentication=yes
```

---

## Nginx error setelah config update

```bash
ssh -m hmac-sha1 root@10.100.1.24 -p 22
nginx -t && nginx -s reload
```

---

## Perintah Darurat

```bash
# Restart semua container
docker restart geonet-console audit-postgres

# Cek semua container
docker ps --format "table {{.Names}}\t{{.Status}}"

# Paksa rebuild
docker compose -f /opt/stacks/geonet-console/compose.yaml up -d --build --force-recreate
```