AUDIT APLIKASI TERINSTALL — INDEKS
===================================
Tanggal audit : 2026-06-10
Sumber host   : server/host.txt

Catatan audit dipisah per host agar mudah diperiksa:

  server/existing-network-geonet.txt → baseline koneksi + failover Fase 1
  server/mikrotik-failover-phase1-backup.txt → BACKUP Fase 1 (restore point Hybrid)
  server/mikrotik-failover-design.txt→ rencana failover ISP1→ISP2
  server/mikrotik-hybrid-design.txt  → rencana hybrid PCC+Netwatch+check-gateway
  server/mikrotik-audit.txt        → 10.100.1.1  (gateway perimeter)
  server/reverse-proxy-audit.txt   → 10.100.1.24 (proxy.lan)
  server/main-database-audit.txt   → 10.100.1.25 (DB-OPR)
  server/main-webserver-audit.txt  → 10.100.1.41 (app)
  server/ad-ldap-audit.txt         → 10.100.1.40 (ad-server)


RINGKASAN CEPAT
---------------
| Host            | IP           | SSH                                      | Peran utama                    | File audit               |
|-----------------|--------------|------------------------------------------|--------------------------------|--------------------------|
| Mikrotik        | 10.100.1.1   | .\scripts\ssh-mikrotik.ps1               | Gateway, NAT, firewall, VPN    | mikrotik-audit.txt       |
| Reverse_proxy   | 10.100.1.24  | ssh -m hmac-sha1 root@10.100.1.24 -p 22  | Nginx + Docker + monitoring    | reverse-proxy-audit.txt  |
| Main_Database   | 10.100.1.25  | ssh -m hmac-sha1 root@10.100.1.25 -p 22  | SQL Server 2019 + PostgreSQL   | main-database-audit.txt  |
| Main_Webserver  | 10.100.1.41  | ssh -m hmac-sha1 Administrator@10.100.1.41 -p 22 | IIS + GIS web + Gitea  | main-webserver-audit.txt |
| AD-LDAP         | 10.100.1.40  | ssh -m hmac-sha1 Administrator@10.100.1.40 -p 22 | AD DC + DNS + ADFS + mail | ad-ldap-audit.txt        |

SSH Windows (10.100.1.40 / .41): private key OK, auth via administrators_authorized_keys.


DIAGRAM HUBUNGAN
----------------

  Internet / User
        |
        v
  [ Mikrotik 10.100.1.1 ]
        |
        +---> AD-LDAP 10.100.1.40 (ad-server) — domain gisportal.id
        |
        v
  +---------------------------+
  | REVERSE PROXY 10.100.1.24 |
  | nginx + Docker stacks     |
  +---------------------------+
        |
        +---> Main_Webserver 10.100.1.41 (app) — IIS, GIS portal
        |
        +---> Main_Database 10.100.1.25 — MSSQL + PostgreSQL
        |
        +---> Geonet Console / sqlservercheck (Docker di proxy)
              console.gisportal.id | geonet-console @ :8091