# AGENTS.md — Cold Start

> Project: `server-audit/`
> Sesi terakhir: [docs/ai-session-summary.md](./docs/ai-session-summary.md)
> Peta lengkap: [docs/context-index.md](./docs/context-index.md)
> Env template: [.env.example](./.env.example)

## Apa ini?

SSOT inventori server GeoNet, audit infrastruktur, dan **runbook SSH key-based access** dari laptop Windows ke seluruh host di LAN `10.100.1.x`.

## Aturan kritis

- **SSOT SSH:** [docs/guide/ssh-access.md](./docs/guide/ssh-access.md) — jangan duplikasi detail key di chat
- **No hardcoded IP di skrip baru** — gunakan variabel / parameter; referensi host di [docs/server.md](./docs/server.md)
- Jangan commit private key, password, atau isi `~/.ssh/` ke repo
- Wajib **PowerShell** (bukan CMD) untuk `$env:USERPROFILE` dan pipe SSH
- Server RHEL/CentOS: `-m hmac-sha1` (alias `-o MACs=hmac-sha1`); log auth di `/var/log/secure`
- Server Ubuntu/Debian: log auth di `/var/log/auth.log`; biasanya tanpa `-m`
- No commit kecuali user minta eksplisit
- **Perubahan material:** append [docs/version.md](./docs/version.md) + update [host.md](./host.md) ringkas

## Lanjut kerja

```
1. AGENTS.md
2. docs/ai-session-summary.md
3. STOP
4. On-demand: docs/guide/ssh-access.md, docs/server.md, host.md, docs/todo.md
```

## Pointer cepat

| Butuh | Buka |
|-------|------|
| SSH setup / status key | [docs/guide/ssh-access.md](./docs/guide/ssh-access.md) |
| Quick SSH commands | [host.md](./host.md) |
| Inventori host | [docs/server.md](./docs/server.md) |
| Setup scripts | [scripts/](./scripts/) |
| Versi / riwayat | [docs/version.md](./docs/version.md) |
| Reverse proxy detail | [.cursor/infra-reverse-proxy.md](./.cursor/infra-reverse-proxy.md) |