# AI Session Summary

```yaml
session: 2026-07-10-ssh-and-ad-ldap
project: server-audit/
version: 0.1.8
status: ready
next: Setup key Zabbix (.42) dan Main Webserver (.41)
agent: Cursor
```

## TL;DR

- Bootstrap `server-audit/` docs standar + SSOT SSH [guide/ssh-access.md](./guide/ssh-access.md)
- Key laptop: `id_rsa_geonet_laptop` + `id_ed25519_mailcow`; alias di `~/.ssh/config`
- Key-only ✅: `.24` reverse-proxy, `.25` main-db, `.28` mailcow, `.26` ollama (`geonet`), `.40` ad-ldap (Win2012 R2)
- AD `.40`: UTF-8 no BOM + `administrators_authorized_keys` + `PubkeyAcceptedAlgorithms +ssh-rsa`

## Lanjut dari sini

1. `scripts/setup-ssh-*` untuk Zabbix `.42` / Webserver `.41` jika perlu
2. Runbook: [guide/ssh-access.md](./guide/ssh-access.md) | Quick: [host.md](../host.md)

## Jangan

- Jangan commit private key / password
- RHEL log: `/var/log/secure` (bukan `auth.log`)
- Wajib PowerShell (`$env:USERPROFILE`); Win admin key di ProgramData bukan `~\.ssh\authorized_keys`