# GeoNet infra — salin ke %USERPROFILE%\.ssh\config
# SSOT: server-audit/docs/guide/ssh-access.md
# Wajib PowerShell. MAC hmac-sha1 untuk RHEL/CentOS.

Host reverse-proxy
    HostName 10.100.1.24
    User root
    Port 22
    IdentityFile ~/.ssh/id_rsa_geonet_laptop
    IdentitiesOnly yes
    MACs hmac-sha1

Host main-db
    HostName 10.100.1.25
    User root
    Port 22
    IdentityFile ~/.ssh/id_rsa_geonet_laptop
    IdentitiesOnly yes
    MACs hmac-sha1

Host ollama
    HostName 10.100.1.26
    User geonet
    Port 22
    IdentityFile ~/.ssh/id_rsa_geonet_laptop
    IdentitiesOnly yes
    MACs hmac-sha1

Host mailcow
    HostName 10.100.1.28
    User root
    Port 22
    IdentityFile ~/.ssh/id_ed25519_mailcow
    IdentitiesOnly yes

Host ad-ldap
    HostName 10.100.1.40
    User Administrator
    Port 22
    IdentityFile ~/.ssh/id_rsa_geonet_laptop
    IdentitiesOnly yes
    MACs hmac-sha1
    PubkeyAcceptedAlgorithms +ssh-rsa