LDAPWeb/server-audit/docs/server.md

Server Inventory — GeoNet LAN

Owner: server-audit/
Last updated: 2026-07-10
Credential location: Private key di ~/.ssh/ laptop; password server tidak didokumentasikan di repo.

Cold start SSH: guide/ssh-access.md | Quick ref: ../host.md

---

Ringkasan

Field	Value
Project	server-audit/
Network	LAN 10.100.1.0/24 (+ 192.168.0.x MikroTik)
Gateway	MikroTik 10.100.1.1 port 255
Publik NAT	117.102.73.x → reverse-proxy .24

---

Host / Server

Host / IP	Hostname	Env	Role	OS	SSH alias	Key laptop	MAC hmac-sha1
10.100.1.1	—	prod	Gateway NAT/firewall	RouterOS	—	id_rsa_mikrotik	✅ port 255
10.100.1.14	MULTIMEDIA	dev	Workstation GIS	Windows 10	multimedia	id_ed25519_geonet_proxmox	—
10.100.1.24	proxy	prod	Reverse proxy, Docker stacks	RHEL/CentOS	reverse-proxy	id_rsa_geonet_laptop	✅
10.100.1.25	—	prod	PostgreSQL + SQL Server	RHEL/CentOS	main-db	id_rsa_geonet_laptop	✅
10.100.1.26	aiopr	prod	Ollama inference CPU	Ubuntu 22.04	ollama	id_rsa_geonet_laptop	✅
10.100.1.28	mailserver	prod	Mailcow dockerized	Ubuntu	mailcow	id_ed25519_mailcow	—
10.100.1.40	—	prod	Active Directory LDAP	Windows Server 2012 R2	ad-ldap	id_rsa_geonet_laptop	✅
10.100.1.41	—	prod	Main webserver	Windows Server	—	TBD	✅
10.100.1.42	—	prod	Zabbix monitoring	Linux	—	TBD	✅
10.100.1.51–.53	—	dev	ArcGIS Enterprise	Windows Server	dev51-base	id_ed25519_geonet_proxmox	—
10.100.1.10	—	prod	QNAP NAS TS-932X	QTS	—	id_ed25519	opsional
10.100.1.101	—	dev	Proxmox Dev	Proxmox	—	—	—
10.100.1.102	—	prod	Proxmox Opr	Proxmox	—	—	—

Status key-only (2026-07-10): .24, .25, .28, .26 (geonet) verified ✅

---

Aplikasi & Runtime per Host

Host	Aplikasi	Jenis	Port	Path / Catatan
.24	nginx	reverse proxy	443	/etc/nginx/conf.d/
.24	Docker stacks	Docker Compose	—	/opt/stacks/ (Dockge)
.24	GeoNet collector	Docker	8000	geonetagent-collector
.25	PostgreSQL 12	DB	5432	geonetagent_dev
.25	SQL Server	DB	1433	—
.26	Ollama	systemd	11434	CPU inference
.28	Mailcow	Docker	443	/opt/stacks/mailcow
.42	Zabbix	monitoring	—	—

---

Auth log per OS

OS family	Log path
RHEL/CentOS (.24, .25)	/var/log/secure
Ubuntu/Debian (.26, .28)	/var/log/auth.log
journald (semua Linux)	journalctl -u sshd -n 20

---

Mapping ke monorepo

Komponen	Path monorepo
SSH SSOT	server-audit/docs/guide/ssh-access.md
nginx config docs	nginx/
Mailcow	Mailcow/
GeoNetAgent collector	GeoNetAgent/
Deploy scripts	server-connection/scripts/

---

Catatan operasional

• Laptop developer harus di jaringan 10.100.1.x untuk SSH langsung
• SCP dari Windows ke Linux lama: -o MACs=hmac-sha1
• Windows Server SSH: public key ke C:\ProgramData\ssh\administrators_authorized_keys

Jangan: password, private key, API token di file ini.