You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
53 lines
2.5 KiB
53 lines
2.5 KiB
AUDIT APLIKASI TERINSTALL — INDEKS |
|
=================================== |
|
Tanggal audit : 2026-06-10 |
|
Sumber host : server/host.txt |
|
|
|
Catatan audit dipisah per host agar mudah diperiksa: |
|
|
|
server/existing-network-geonet.txt → baseline koneksi + failover Fase 1 |
|
server/mikrotik-failover-phase1-backup.txt → BACKUP Fase 1 (restore point Hybrid) |
|
server/mikrotik-failover-design.txt→ rencana failover ISP1→ISP2 |
|
server/mikrotik-hybrid-design.txt → rencana hybrid PCC+Netwatch+check-gateway |
|
server/mikrotik-audit.txt → 10.100.1.1 (gateway perimeter) |
|
server/reverse-proxy-audit.txt → 10.100.1.24 (proxy.lan) |
|
server/main-database-audit.txt → 10.100.1.25 (DB-OPR) |
|
server/main-webserver-audit.txt → 10.100.1.41 (app) |
|
server/ad-ldap-audit.txt → 10.100.1.40 (ad-server) |
|
|
|
|
|
RINGKASAN CEPAT |
|
--------------- |
|
| Host | IP | SSH | Peran utama | File audit | |
|
|-----------------|--------------|------------------------------------------|--------------------------------|--------------------------| |
|
| Mikrotik | 10.100.1.1 | .\scripts\ssh-mikrotik.ps1 | Gateway, NAT, firewall, VPN | mikrotik-audit.txt | |
|
| Reverse_proxy | 10.100.1.24 | ssh -m hmac-sha1 root@10.100.1.24 -p 22 | Nginx + Docker + monitoring | reverse-proxy-audit.txt | |
|
| Main_Database | 10.100.1.25 | ssh -m hmac-sha1 root@10.100.1.25 -p 22 | SQL Server 2019 + PostgreSQL | main-database-audit.txt | |
|
| Main_Webserver | 10.100.1.41 | ssh -m hmac-sha1 Administrator@10.100.1.41 -p 22 | IIS + GIS web + Gitea | main-webserver-audit.txt | |
|
| AD-LDAP | 10.100.1.40 | ssh -m hmac-sha1 Administrator@10.100.1.40 -p 22 | AD DC + DNS + ADFS + mail | ad-ldap-audit.txt | |
|
|
|
SSH Windows (10.100.1.40 / .41): private key OK, auth via administrators_authorized_keys. |
|
|
|
|
|
DIAGRAM HUBUNGAN |
|
---------------- |
|
|
|
Internet / User |
|
| |
|
v |
|
[ Mikrotik 10.100.1.1 ] |
|
| |
|
+---> AD-LDAP 10.100.1.40 (ad-server) — domain gisportal.id |
|
| |
|
v |
|
+---------------------------+ |
|
| REVERSE PROXY 10.100.1.24 | |
|
| nginx + Docker stacks | |
|
+---------------------------+ |
|
| |
|
+---> Main_Webserver 10.100.1.41 (app) — IIS, GIS portal |
|
| |
|
+---> Main_Database 10.100.1.25 — MSSQL + PostgreSQL |
|
| |
|
+---> Geonet Console / sqlservercheck (Docker di proxy) |
|
console.gisportal.id | geonet-console @ :8091
|
|
|