2.1Infrastructure
Daftar server, layanan cloud, domain, backup, dan perangkat pendukung seluruh sistem Synthesis.
| Pemilik | Tim IT Infrastructure |
|---|---|
| Review berkala | Setiap 3 bulan |
| Monitoring | Zabbix + Uptime Kuma |
| Lokasi kredensial | Password manager perusahaan (Vault IT) |
2.1.1Kebijakan Kredensial
Halaman ini tidak boleh berisi password, private key, atau token. Seluruh kredensial disimpan di password manager perusahaan dan hanya dapat diakses oleh personel yang berwenang.
2.1.2Daftar Server
| Nama | Fungsi | Hostname | IP | OS | Lokasi | Status |
|---|---|---|---|---|---|---|
| APP-01 | Aplikasi ERP & Sales | app01.synthesis.local | 10.10.20.11 | Ubuntu 24.04 LTS | Cloud DC | Online |
| APP-02 | Aplikasi CRM & Pengelola | app02.synthesis.local | 10.10.20.12 | Ubuntu 24.04 LTS | Cloud DC | Online |
| API-01 | API Gateway Synthesis Link | api01.synthesis.local | 10.10.20.21 | Ubuntu 24.04 LTS | Cloud DC | Online |
| DB-01 | Database utama (Primary) | db01.synthesis.local | 10.10.20.31 | Ubuntu 24.04 LTS | Cloud DC | Online |
| DB-02 | Database replika (Replica) | db02.synthesis.local | 10.10.20.32 | Ubuntu 24.04 LTS | Cloud DC | Standby |
| PROXY-01 | Reverse proxy & WAF | proxy01.synthesis.local | 10.10.20.5 | Ubuntu 24.04 LTS | Cloud DC | Online |
| DC-01 | Active Directory & DNS internal | dc01.synthesis.local | 192.168.10.10 | Windows Server 2022 | Kantor Pusat | Online |
| FS-01 | File server & shared folder | fs01.synthesis.local | 192.168.10.20 | Windows Server 2022 | Kantor Pusat | Online |
| NAS-01 | Backup lokal | nas01.synthesis.local | 192.168.10.30 | Synology DSM 7 | Kantor Pusat | Online |
| NVR-01 | Rekaman CCTV | nvr01.synthesis.local | 192.168.50.10 | Embedded | Kantor Pusat | Online |
| MON-01 | Monitoring (Zabbix, Uptime Kuma) | mon01.synthesis.local | 192.168.10.40 | Ubuntu 24.04 LTS | Kantor Pusat | Online |
2.1.3Environment Aplikasi
| Aplikasi | Production | Staging | Stack |
|---|---|---|---|
| Synthesis ERP | erp.synthesis-development.id | erp-stg.synthesis-development.id | PHP / MySQL |
| Synthesis CRM | crm.synthesis-development.id | crm-stg.synthesis-development.id | PHP / MySQL |
| Synthesis Sales | sales.synthesis-development.id | sales-stg.synthesis-development.id | PHP / MySQL |
| Synthesis Pengelola | pengelola.synthesis-development.id | pengelola-stg.synthesis-development.id | PHP / MySQL |
| Synthesis Link (API) | api.synthesis-development.id | api-stg.synthesis-development.id | REST API / Mobile (Flutter) |
2.1.4Layanan Cloud & Pihak Ketiga
| Layanan | Kegunaan | Akun Pemilik | Perpanjangan |
|---|---|---|---|
| Cloud VPS / Data Center | Hosting server aplikasi & database | IT Infrastructure | Bulanan |
| Google Workspace / Microsoft 365 | Email, kalender, dokumen kantor | IT Infrastructure | Tahunan |
| Payment Gateway | Virtual Account, QRIS, e-wallet Synthesis Link | Finance + IT | Kontrak tahunan |
| SMS / WhatsApp Gateway | OTP dan notifikasi pelanggan | IT Application | Prabayar (kuota) |
| Google Play Console | Distribusi Synthesis Link Android | IT Application | Sekali bayar |
| Apple Developer Program | Distribusi Synthesis Link iOS | IT Application | Tahunan |
| Firebase | Push notification & crash report | IT Application | Pay as you go |
2.1.5Domain & SSL
| Domain | Kegunaan | Registrar / DNS | SSL | Status |
|---|---|---|---|---|
synthesis-development.id | Website & email perusahaan | Registrar .id / Cloudflare | Let's Encrypt (auto-renew) | Aktif |
*.synthesis-development.id | Subdomain aplikasi | Cloudflare | Wildcard (auto-renew) | Aktif |
2.1.6Jadwal Backup
| Objek | Metode | Frekuensi | Retensi | Tujuan |
|---|---|---|---|---|
| Database produksi | Dump terenkripsi + binlog | Harian 01.00 WIB, binlog tiap 15 menit | 30 hari | Object storage + NAS-01 |
| Server aplikasi | Snapshot VM | Mingguan (Minggu 02.00 WIB) | 4 minggu | Cloud snapshot |
| File server | Incremental | Harian 22.00 WIB | 90 hari | NAS-01 + offsite |
| Konfigurasi jaringan | Export config | Setiap perubahan + bulanan | 12 bulan | Repository IT |
| Rekaman CCTV | Rekaman berkelanjutan | Real-time | 30 hari | NVR-01 |
2.1.7Standar Operasional
- Uji restore backup database dilakukan minimal satu kali setiap bulan dan hasilnya dicatat.
- Patch keamanan OS diterapkan setiap bulan pada jendela maintenance Sabtu 22.00–02.00 WIB.
- Setiap perubahan pada server produksi wajib melalui change request yang disetujui IT Manager.
- Akses SSH/RDP ke server hanya melalui VPN dan menggunakan akun personal (bukan akun bersama).
- Server baru wajib didaftarkan di halaman ini dan di sistem monitoring sebelum digunakan.
2.1.8Perangkat Pengguna
| Jenis | Standar | Keterangan |
|---|---|---|
| Laptop / PC | Windows 11 Pro, antivirus endpoint, BitLocker | Join domain synthesis.local |
| Printer | Network printer per lantai | VLAN 60, driver via print server |
| Tablet pos keamanan | Android 12+, mode kiosk | Untuk Synthesis Pengelola (scan QR tamu) |
| HP teknisi | Android / iOS milik pribadi atau perusahaan | Akses work order via browser |