graph TB
    subgraph CLIENTS["Clients"]
        B["Browser\n(IT Admin)"]
        NEXTJS["Next.js PWA\nmy.gisportal.id"]
    end

    subgraph SERVER24["10.100.1.24 — App Server"]
        NGX["Nginx\nSSL + Reverse Proxy"]
        GC["geonet-console\nLaravel 12\n:8091"]
        PGCON["audit-postgres\nPostgreSQL"]
    end

    subgraph SERVER25["10.100.1.25 — DB Server"]
        MSSQL["SQL Server 2019"]
        PGSEARCH["PostgreSQL\npgvector (Fase 4)"]
    end

    subgraph INFRA["Infrastruktur"]
        AD["Active Directory\n10.100.1.40"]
        QNAP["QNAP NAS\n10.100.1.10\nOSS S3"]
        OLLAMA["Ollama VM\n10.100.1.26\n(Fase 4)"]
        ZABBIX["Zabbix\n10.100.1.42"]
        MK["MikroTik\n10.100.1.1"]
    end

    B -->|HTTPS| NGX
    NEXTJS -->|HTTPS API| NGX
    NGX -->|:8091| GC
    GC --> PGCON
    GC -->|LDAP bind| AD
    GC -->|read registry| MSSQL
    GC -->|avatar S3| QNAP
    GC -.->|Fase 4| PGSEARCH
    GC -.->|Fase 4| OLLAMA
    NGX -->|/super-apps/ proxy| QNAP

    style GC fill:#2196F3,color:#fff
    style NGX fill:#607D8B,color:#fff