You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
90 lines
3.1 KiB
90 lines
3.1 KiB
AUDIT APLIKASI — MAIN DATABASE |
|
================================ |
|
Tanggal audit : 2026-06-10 |
|
Sumber : server/host.txt |
|
Metode : SSH langsung |
|
|
|
IP/SSH : 10.100.1.25 | ssh -m hmac-sha1 root@10.100.1.25 -p 22 |
|
Hostname : DB-OPR |
|
OS : Ubuntu 18.04.6 LTS (Bionic Beaver) |
|
Uptime : ~78 hari |
|
Resource : RAM 31 GiB (avail ~19 GiB) | Disk / 503G (19% terpakai, 87G used) |
|
Docker : TIDAK terinstall / tidak berjalan |
|
|
|
Peran host: dedicated database server untuk operasional Geonet. |
|
Tidak ada Nginx, Apache, Docker, atau aplikasi web di host ini. |
|
|
|
|
|
A. DATABASE ENGINE |
|
------------------ |
|
| Engine | Versi paket | Service systemd | Port | Status | |
|
|---------------|--------------------------|------------------------------|-------|----------| |
|
| SQL Server | mssql-server 15.0.4455.2 | mssql-server.service | 1433 | running | |
|
| PostgreSQL | postgresql-12 12.12 | postgresql@12-main.service | 5432 | running | |
|
|
|
SQL Server 15.x = Microsoft SQL Server 2019 |
|
Tools : mssql-tools 17.10.1.1 (sqlcmd di /opt/mssql-tools/bin/) |
|
PostgreSQL : ~40 database (termasuk template sistem) |
|
pgAdmin3 : terinstall (GUI admin PostgreSQL, versi lama) |
|
|
|
|
|
B. PORT LISTENING (aktif) |
|
------------------------- |
|
22 → SSH (sshd) |
|
1433 → SQL Server (0.0.0.0 dan ::) |
|
5432 → PostgreSQL (0.0.0.0 dan ::) |
|
1431 → SQL Server local endpoint (127.0.0.1) |
|
|
|
|
|
C. PAKET TERKAIT DATABASE |
|
------------------------- |
|
mssql-server 15.0.4455.2-1 |
|
mssql-tools 17.10.1.1-1 |
|
postgresql-12 12.12-1.pgdg18.04+1 |
|
postgresql-client-12 |
|
pgadmin3 1.22.2-6.pgdg18.04+2 |
|
libpq5 15.0-1.pgdg18.04+1 |
|
|
|
|
|
D. LAYANAN LAIN YANG BERJALAN |
|
------------------------------ |
|
Hanya layanan OS standar Ubuntu (cron, rsyslog, NetworkManager, snapd, GDM, dll). |
|
Tidak ada layanan aplikasi web atau container. |
|
|
|
|
|
E. KONEKSI DARI HOST LAIN |
|
------------------------- |
|
Reverse_proxy (10.100.1.24): |
|
- databaselist container → 10.100.1.25:1433 (user sa, read + ALTER OFFLINE) |
|
- sqlservercheck container → 10.100.1.25:1433 (health check TS/NTS) |
|
|
|
Estimasi jumlah database (observasi sebelumnya): |
|
- SQL Server : ~99 user database |
|
- PostgreSQL : ~35 user database |
|
|
|
|
|
F. ANALISA & CATATAN |
|
-------------------- |
|
Catatan: |
|
- Ubuntu 18.04 sudah EOL (April 2023); rencanakan upgrade OS. |
|
- Port 1433 & 5432 terbuka di semua interface; pastikan firewall Mikrotik |
|
hanya mengizinkan IP yang perlu (mis. 10.100.1.24, subnet internal). |
|
- Tidak ada backup agent terlihat di audit ini; verifikasi terpisah. |
|
|
|
|
|
PERINTAH VERIFIKASI ULANG |
|
------------------------- |
|
# Status service database |
|
ssh -m hmac-sha1 root@10.100.1.25 -p 22 "systemctl status mssql-server postgresql@12-main" |
|
|
|
# Port listening |
|
ssh -m hmac-sha1 root@10.100.1.25 -p 22 "ss -tlnp | grep -E '1433|5432'" |
|
|
|
# Versi PostgreSQL |
|
ssh -m hmac-sha1 root@10.100.1.25 -p 22 "sudo -u postgres psql -c 'SELECT version();'" |
|
|
|
# Daftar database PostgreSQL |
|
ssh -m hmac-sha1 root@10.100.1.25 -p 22 "sudo -u postgres psql -lqt" |
|
|
|
# Paket database terinstall |
|
ssh -m hmac-sha1 root@10.100.1.25 -p 22 "dpkg -l | grep -iE 'mssql|postgres'"
|
|
|