LDAPWeb/server-audit/host.md

SSH Host Reference — GeoNet LAN

SSOT lengkap: docs/guide/ssh-access.md
Inventori: docs/server.md | Cold start: AGENTS.md
Last updated: 2026-07-10

Status key-only (laptop ini)

Host	Alias	Key	Status
10.100.1.24	reverse-proxy	id_rsa_geonet_laptop	✅ 2026-07-10
10.100.1.25	main-db	id_rsa_geonet_laptop	✅ 2026-07-10
10.100.1.28	mailcow	id_ed25519_mailcow	✅ 2026-07-10
10.100.1.26	ollama	id_rsa_geonet_laptop	✅ 2026-07-10 (geonet)
10.100.1.40	ad-ldap	id_rsa_geonet_laptop	✅ 2026-07-10

---

Workstation MULTIMEDIA (Windows 10 Pro):

ssh multimedia
ssh admin@10.100.1.14 -p 22
ssh admin@192.168.0.18 -p 22
# Hostname: MULTIMEDIA | Dual NIC: 10.100.1.14 (utama, LAN server) + 192.168.0.18 (LAN MikroTik)
# Dokumentasi lengkap: PC-Multimedia/docs/server.md
# Key setup (jalankan sekali di PC MULTIMEDIA, PowerShell Admin):
#   .\server-audit\scripts\setup-ssh-key-multimedia.ps1
# Key laptop: ~/.ssh/id_ed25519_geonet_proxmox → C:\ProgramData\ssh\administrators_authorized_keys

Mikrotik :

ssh -m hmac-sha1 admin@10.100.1.1 -p 255 ssh -i "$env:USERPROFILE.ssh\id_rsa_mikrotik" -o IdentitiesOnly=yes -m hmac-sha1 -p 255 admin@10.100.1.1

ssh -m hmac-sha1 admin@192.168.0.1 -p 255 ssh -i "$env:USERPROFILE.ssh\id_rsa_mikrotik" -o IdentitiesOnly=yes -m hmac-sha1 -p 255 admin@192.168.0.1

Opr Proxmox

ssh root@10.100.1.102

## USB passthrough VM 103 (monitoring)
- USB bus 1 (controller PCI `0000:00:1a.0`) dipassthrough ke VM 103
- Tujuan: flashdisk/storage docking auto terdeteksi di VM 103
- Waktu setup: 30 Jun 2026
- Perintah setup:
  ```bash
  ssh root@10.100.1.102
  qm stop 103
  qm set 103 --delete usb1
  qm set 103 -hostpci0 00:1a.0
  qm start 103
  ```
- **Rollback** (kembalikan USB bus 1 ke Proxmox):
  ```bash
  ssh root@10.100.1.102
  qm stop 103
  qm set 103 --delete hostpci0
  qm start 103
  ```
- Catatan: USB 2.0 saja (EHCI). Host kehilangan akses ke port USB bus 1.

Dev Proxmox

ssh root@10.100.1.101

Reverse_proxy (App Server):

ssh reverse-proxy
ssh -m hmac-sha1 root@10.100.1.24 -p 22
# Key: ~/.ssh/id_rsa_geonet_laptop — passwordless ✅ 2026-07-10
# Setup: .\server-audit\scripts\setup-ssh-reverse-proxy.ps1

## Disk Cleanup — 1 Jul 2026
- Sebelum: disk 98% penuh (1.3 GB free / 50 GB)
- Penyebab: Docker build cache menumpuk 45.29 GB
- Tindakan: `docker builder prune -af` → hapus 45.29 GB
- Hasil: disk 50% (26 GB free)
- Sisa reclaimable: ~7.9 GB dangling images

## Rencana Deploy Zammad (ticketing)
- Target domain: `ticket.gisportal.id`
- Stack: `/opt/stacks/zammad`
- Resource dibutuhkan: ~2–3 GB RAM, ~15 GB disk
- Status: ✅ Resource tersedia, siap deploy
- Integrasi: feedback dari Super Apps → auto-create tiket Zammad

Mailserver (Mailcow):

ssh mailcow
ssh root@10.100.1.28
# Key: ~/.ssh/id_ed25519_mailcow — passwordless ✅ 2026-07-10

Main_Database:

ssh main-db
ssh -m hmac-sha1 root@10.100.1.25 -p 22
# Key: ~/.ssh/id_rsa_geonet_laptop — passwordless ✅ 2026-07-10

Main_Webserver:

ssh -m hmac-sha1 Administrator@10.100.1.41 -p 22

AD-LDAP (Windows Server 2012 R2):

ssh ad-ldap
ssh -m hmac-sha1 Administrator@10.100.1.40 -p 22
# Key laptop ini: ~/.ssh/id_rsa_geonet_laptop → C:\ProgramData\ssh\administrators_authorized_keys
# Setup: .\server-audit\scripts\setup-ssh-ad-ldap.ps1
# Status: passwordless ✅ 2026-07-10 (Win2012 R2)

zabbix:

ssh -m hmac-sha1 root@10.100.1.42 -p 22

Ollama (aiopr, Ubuntu 22.04) — POC & inference CPU:

ssh ollama
.\server-connection\scripts\ssh-ollama.ps1 -User geonet
ssh -i "$env:USERPROFILE\.ssh\id_rsa_geonet_laptop" -o IdentitiesOnly=yes -m hmac-sha1 geonet@10.100.1.26 -p 22
# Key geonet: passwordless ✅ 2026-07-10 (user operasional)
# root@10.100.1.26 — belum upload key (opsional)

NAS QNAP (TS-932X):

ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o IdentitiesOnly=yes admin@10.100.1.10 -p 22
.\scripts\ssh-qnap.ps1
ssh -m hmac-sha1 admin@10.100.1.10 -p 22

ArcGIS Enterprise

ArcGIS Base Development

- IIS
- ArcGIS Web Adaptor
- Portal for ArcGIS
- ArcGIS Server
- ArcGIS Data Store (Relational)
ssh dev51-base
ssh Administrator@10.100.1.51 -p 22

ArcGIS Data Store (Object)

- ArcGIS Data Store (Object)
ssh dev13-object
ssh Administrator@10.100.1.52 -p 22

Key setup (Windows OpenSSH)

- Key: `~/.ssh/id_ed25519_geonet_proxmox`
- Public key ditambahkan ke `C:\ProgramData\ssh\administrators_authorized_keys` di masing-masing server
- Perintah setup (jalankan sekali per server):
  ```powershell
  ssh -t Administrator@10.100.1.51 -p 22 "powershell -Command `"Add-Content -Path 'C:\ProgramData\ssh\administrators_authorized_keys' -Value 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDxlXfuXAb/A2YCji3XWckW37Hs7SP/yen2CQwgV5M4x proxmox-geonet'; icacls C:\ProgramData\ssh\administrators_authorized_keys /inheritance:r; icacls C:\ProgramData\ssh\administrators_authorized_keys /grant SYSTEM:F; icacls C:\ProgramData\ssh\administrators_authorized_keys /grant Administrators:F; Restart-Service sshd`""
  ```