LDAPWeb/server-connection/geonet-console/DOCKGE.md

Geonet Console (Dockge)

Unified operations platform — database, LDAP, mail, API, audit.

• Folder: /opt/stacks/geonet-console (migrasi dari /opt/stacks/databaselist)
• URL: https://console.gisportal.id
• Legacy URL: https://databaselist.gisportal.id (redirect setelah Fase 3)
• LDAP Users: https://console.gisportal.id/ldap-users
• LDAP Groups: https://console.gisportal.id/ldap-groups
• API Docs: https://console.gisportal.id/api-docs
• API Clients: https://console.gisportal.id/api-clients
• REST API: https://console.gisportal.id/api/v1
• Port host: 127.0.0.1:8091

Deploy

cd /opt/stacks/geonet-console
cp .env.example .env   # edit credentials
docker compose up -d --build

Lihat server/migrate-geonet-console.md untuk migrasi tanpa downtime dari stack databaselist.

PWA

Fase A: manifest, service worker, offline page

Fase B:

• Banner Install app (Chrome beforeinstallprompt + petunjuk iOS Add to Home Screen)
• Cache stale-while-revalidate untuk /login — UI tampil cepat saat koneksi lambat
• pwa-login-shell.js — refresh CSRF token di background setelah shell cache dimuat

Verifikasi: Chrome DevTools → Application → Manifest / Service Workers

Keamanan

• Login via LDAP domain account (grup Administrator wajib)
• Forgot password LDAP: kirim link reset via SMTP dari support@geonet.co.id
• Port hanya bind ke localhost
• HTTPS via Nginx reverse proxy
• Rate limit login (5 req/menit) dan general traffic
• Security headers (HSTS, X-Frame-Options, dll.)

Env penting

Variable	Keterangan
APP_NAME	Geonet Console
APP_URL	https://console.gisportal.id
MSSQL_*	Koneksi ke SQL Server
LDAP_*	Koneksi Active Directory

Metadata aplikasi disimpan di PostgreSQL Docker (databaselist_app / volume audit_pg_data sampai rename DB Fase 3).