LDAPWeb/server-audit/.cursor/server.md

Mikrotik : ssh -m hmac-sha1 admin@10.100.1.1 -p 255 ssh -i "$env:USERPROFILE.ssh\id_rsa_mikrotik" -o IdentitiesOnly=yes -m hmac-sha1 -p 255 admin@10.100.1.1

ssh -m hmac-sha1 admin@192.168.0.1 -p 255 ssh -i "$env:USERPROFILE.ssh\id_rsa_mikrotik" -o IdentitiesOnly=yes -m hmac-sha1 -p 255 admin@192.168.0.1

Reverse_proxy (proxy.lan — nginx + GeoNetAgent collector): ssh reverse-proxy ssh -m hmac-sha1 root@10.100.1.24 -p 22 # Key: ~/.ssh/id_rsa_geonet_laptop — passwordless ✅ 2026-07-10 # SSOT: server-audit/docs/guide/ssh-access.md # nginx: /etc/nginx/conf.d/ · SSL: /etc/nginx/conf.d/ssl.conf # Wildcard cert: /home/ssl-gisportal/ # Domain routing & troubleshooting: .cursor/infra-reverse-proxy.md # Collector Docker: 127.0.0.1:18000 (tidak expose langsung) # Internal UI/API: http://10.100.1.24:8000/ui/ # Publik agent POST: https://agent.geonet.co.id/api/v1/agent/report # Deploy nginx: infra/collector/deploy_nginx.sh · lihat infra/nginx/README.md

Main_Database: ssh main-db ssh -m hmac-sha1 root@10.100.1.25 -p 22 # Key: ~/.ssh/id_rsa_geonet_laptop — passwordless ✅ 2026-07-10 # SSOT: server-audit/docs/guide/ssh-access.md # PostgreSQL 12 — GeoNetAgent dev DB: geonetagent_dev (13 tabel CMDB) # Credentials (root only): /root/geonetagent_dev.credentials # Deploy ulang schema: infra/db/README.md

Main_Webserver: ssh -m hmac-sha1 Administrator@10.100.1.41 -p 22

AD-LDAP (Windows Server 2012 R2): ssh ad-ldap ssh -m hmac-sha1 Administrator@10.100.1.40 -p 22 # Key: ~/.ssh/id_rsa_geonet_laptop — passwordless ✅ 2026-07-10 # Setup: server-audit/scripts/setup-ssh-ad-ldap.ps1

zabbix: ssh -m hmac-sha1 root@10.100.1.42 -p 22

Ollama (aiopr, Ubuntu 22.04) — POC & inference CPU: ssh ollama .\scripts\ssh-ollama.ps1 ssh -i "$env:USERPROFILE.ssh\id_rsa_geonet_laptop" -o IdentitiesOnly=yes -m hmac-sha1 root@10.100.1.26 -p 22 ssh -i "$env:USERPROFILE.ssh\id_rsa_geonet_laptop" -o IdentitiesOnly=yes -m hmac-sha1 geonet@10.100.1.26 -p 22 # Wajib PowerShell (bukan CMD) agar $env:USERPROFILE terbaca. Jangan pakai password — login key only. # setup key geonet (sekali): type $env:USERPROFILE.ssh\id_rsa_geonet_laptop.pub | ssh -m hmac-sha1 geonet@10.100.1.26 -p 22 "mkdir -p ~/.ssh && chmod 700 ~/.ssh && cat >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys"

NAS QNAP (TS-932X):

ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o IdentitiesOnly=yes admin@10.100.1.10 -p 22
.\scripts\ssh-qnap.ps1
ssh -m hmac-sha1 admin@10.100.1.10 -p 22