LDAPWeb/server-connection/docs/server.md

Server Information

Terakhir Diperbarui: 2026-06-29

---

Daftar Server

Role	IP	OS	SSH Command
Reverse Proxy + Docker	10.100.1.24	CentOS Linux 8	ssh -m hmac-sha1 root@10.100.1.24 -p 22
Database (PostgreSQL + SQL Server)	10.100.1.25	Ubuntu 18.04 LTS	ssh -m hmac-sha1 root@10.100.1.25 -p 22
Active Directory / LDAP	10.100.1.40	Windows Server 2012 R2	ssh -m hmac-sha1 Administrator@10.100.1.40 -p 22
Main Webserver	10.100.1.41	Windows Server 2012 R2	ssh -m hmac-sha1 Administrator@10.100.1.41 -p 22
NAS QNAP TS-932X	10.100.1.10	QTS 5.2.9	ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o IdentitiesOnly=yes -m hmac-sha1 admin@10.100.1.10 -p 22
Ollama AI VM	10.100.1.26	Ubuntu 22.04 LTS	ssh -i "$env:USERPROFILE\.ssh\id_rsa_geonet_laptop" -o IdentitiesOnly=yes -m hmac-sha1 root@10.100.1.26 -p 22
Zabbix	10.100.1.42	Ubuntu 22.04 LTS	.\scripts\ssh-zabbix.ps1
MikroTik CCR2004	10.100.1.1	RouterOS 7.5	.\scripts\ssh-mikrotik.ps1

QNAP & Ollama: Wajib PowerShell (bukan CMD) agar $env:USERPROFILE terbaca. SSH commands ke server wajib minta persetujuan user sebelum dijalankan.

---

Server 10.100.1.24 — Reverse Proxy + Docker

Services Running

Stack	Container	Port Host	Path
geonet-console	geonet-console	127.0.0.1:8091	/opt/stacks/geonet-console/
databaselist (legacy)	databaselist	(legacy)	/opt/stacks/databaselist/
sqlservercheck	sqlservercheck	—	/opt/stacks/sqlservercheck/
my-portal (Next.js)	my-portal	127.0.0.1:8092	/opt/stacks/my-portal/

Nginx Config

File	Domain
/etc/nginx/conf.d/production/geonet-console.conf	console.gisportal.id
/etc/nginx/conf.d/production/databaselist.conf	databaselist.gisportal.id
/etc/nginx/conf.d/nas.conf	file.gisportal.id (QNAP OSS proxy)

Perintah Umum

# Cek semua container
docker ps --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}"

# Log container
docker logs geonet-console --tail 50 -f

# Restart container
docker restart geonet-console

# Nginx reload
nginx -t && nginx -s reload

---

Server 10.100.1.25 — Database

ssh -m hmac-sha1 root@10.100.1.25 -p 22

# PostgreSQL (dalam container di 10.100.1.24 — bukan langsung di .25)
# SQL Server: 10.100.1.25:1433 — dipakai geonet-console untuk database registry

# Akses PostgreSQL (di container dari server 10.100.1.24)
docker exec -it audit-postgres psql -U geonet_app -d databaselist_app

---

Domain Map

Domain	Backend	Keterangan
console.gisportal.id	10.100.1.24 → container :8091	geonet-console
databaselist.gisportal.id	10.100.1.24 → container legacy	databaselist legacy
sqlservercheck.gisportal.id	10.100.1.24 → container	sqlservercheck
file.gisportal.id/super-apps/	10.100.1.24 → QNAP OSS :8010	Object storage proxy

---

Transfer File ke Server (Windows → Linux)

# Buat archive
tar -czf "$env:TEMP\geonet-console.tar.gz" `
    --exclude="vendor" --exclude=".git" --exclude="node_modules" `
    -C "D:\Project\app on git\server-connection\geonet-console" .

# Upload via cmd.exe (wajib pakai Start-Process di PowerShell)
Start-Process -FilePath "cmd.exe" -ArgumentList `
    '/c ssh -m hmac-sha1 root@10.100.1.24 -p 22 "cat > /tmp/geonet-console.tar.gz" < "%TEMP%\geonet-console.tar.gz"' `
    -Wait -NoNewWindow

# Extract di server
ssh -m hmac-sha1 root@10.100.1.24 -p 22 "tar -xzf /tmp/geonet-console.tar.gz -C /opt/stacks/geonet-console && rm /tmp/geonet-console.tar.gz"

⚠️ JANGAN overwrite .env saat deploy — .env server berisi credentials production.

---

SSL

HTTPS via Let's Encrypt (certbot) di 10.100.1.24. Semua domain *.gisportal.id di-terminate di Nginx.

---

Backup

• Docker volumes: manual backup (belum otomatis)
• .env server: disimpan hanya di server (tidak di repo)
• Database backup: manual via pg_dump ke NAS QNAP