LDAPWeb/server-connection/docs/architecture/system-overview.md

Architecture — System Overview

Terakhir Diperbarui: 2026-06-29

---

Diagram Sistem

graph TB
    subgraph CLIENTS["Clients"]
        BROWSER["Browser\n(IT Admin, User)"]
        NEXTJS["Next.js PWA\nmy.gisportal.id"]
        AGENT["PowerShell Agent\n(Endpoint Windows)"]
    end

    subgraph SERVER24["10.100.1.24 — App Server (CentOS 8)"]
        NGX["Nginx\nSSL termination\nReverse Proxy"]
        GC["geonet-console\nLaravel 12 + PHP 8.3\n:8091"]
        PGCON["audit-postgres\nPostgreSQL\n(container)"]
    end

    subgraph SERVER25["10.100.1.25 — Database Server"]
        MSSQL["SQL Server 2019\n:1433"]
        PGSEARCH["PostgreSQL\ngeonet_project_search\n(pgvector - Fase 4)"]
    end

    subgraph INFRA["Infrastruktur Existing"]
        AD["AD / LDAP\n10.100.1.40"]
        QNAP["QNAP NAS\n10.100.1.10\nOSS + SMB"]
        OLLAMA["Ollama VM\n10.100.1.26\n(Fase 4)"]
        ZABBIX["Zabbix\n10.100.1.42"]
        MIKROTIK["MikroTik CCR2004\n10.100.1.1"]
    end

    BROWSER -->|HTTPS| NGX
    NEXTJS -->|HTTPS API| NGX
    AGENT -->|HTTPS POST| NGX
    NGX -->|:8091| GC
    GC --> PGCON
    GC -->|LDAP bind| AD
    GC -->|read registry| MSSQL
    GC -->|OSS S3 avatar| QNAP
    GC -.->|Fase 4| PGSEARCH
    GC -.->|Fase 4| OLLAMA
    NGX -->|/super-apps/| QNAP

    style GC fill:#2196F3,color:#fff
    style PGCON fill:#FF9800,color:#fff
    style NGX fill:#607D8B,color:#fff

---

Komponen

Komponen	Role	Host
Nginx	SSL termination + reverse proxy	10.100.1.24
geonet-console	IT portal — auth, LDAP mgmt, DB registry, API	10.100.1.24:8091
audit-postgres	PostgreSQL app + audit DB	container di 10.100.1.24
Active Directory	Auth source (LDAP bind)	10.100.1.40
SQL Server	Database registry (read-only)	10.100.1.25:1433
QNAP OSS	Avatar + file storage (S3-compatible)	10.100.1.10:8010
Zabbix	Server/VM monitoring real-time	10.100.1.42
MikroTik	Gateway, firewall, routing	10.100.1.1
Ollama VM	AI inference (Fase 4)	10.100.1.26:11434

---

Prinsip Arsitektur

• Geonet-console = unified IT portal, bukan tool tunggal
• Jangan duplikasi Zabbix — monitoring real-time tetap di Zabbix
• LDAP sebagai auth source — tidak ada local user di geonet-console
• PostgreSQL untuk app baru — SQL Server hanya untuk legacy/GIS
• QNAP OSS untuk file — bukan filesystem lokal server