dotfiles/ssh/.ssh/config

Include /Users/colin.powell/.colima/ssh_config

Include ~/.orbstack/ssh/config


Include /Users/powellc/.colima/ssh_config

#CanonicalizeHostname yes
#CanonicalDomains elationemr.com unbl.ink onec.me
#
Host *
  IdentityAgent $SSH_AUTH_SOCK
  #PreferredAuthentications publickey
  IdentitiesOnly no

Host github.com
    User git
    IdentityAgent $SSH_AUTH_SOCK
    ServerAliveInterval 300
    ServerAliveCountMax 2
    IdentitiesOnly yes
    IdentityFile none

# Home Gitea account:
Host code.lab.unbl.ink git.service 192.168.40.83 gogs*
  User git
  PreferredAuthentications publickey
  PasswordAuthentication no
  Port 222

# Mailinabox uses root by default
Host box.unbl.ink
  IdentityFile ~/.ssh/box_unbl_ink
  User root

Host akna.local
  User pi

Host sdf.org otaku.sdf.org sverige.freeshell.org 
  User secstate

Host cosmic.voyage
  User secstate
  IdentityFile ~/.ssh/cosmic.voyage

Host tilde.club
  User secstate
  IdentityFile ~/.ssh/powellc

# ChicagoVPS
Host pandora.unbl.ink bt2.unbl.ink 198.12.85.133 
  IdentityFile ~/.ssh/pandora
  User root

Host bt1.unbl.ink
  IdentityFile ~/.ssh/2022_h2_powellc
  User root

Host hungryroot.service mundilfari.service kari.service
  User powellc

# Inside our network, skip strict host key checking
Host *.service
  StrictHostKeyChecking no

Host vrobbler.service mopidy.service penobscotbaypress.com atlas.local dns.service
  User root

#####
## This does the heavy lifting with homelab negotiation
#####

Host bastion.unbl.ink
    Port 33
    User root

Host *.local *.service
    IdentityFile ~/.ssh/jails
    ServerAliveInterval 300
    ServerAliveCountMax 2
    AddKeysToAgent yes
    VerifyHostKeyDNS no

Host bastion.service
    User root
    Port 33

## Jail hosts all need a jump
#Match exec "onsubnet 192.168.40." host *.service
#  User root
#  IdentityFile ~/.ssh/jails
#  Hostname %h
#
Match exec "onsubnet --not 192.168.40." host *.service
  User root
  IdentityFile ~/.ssh/jails
  Hostname %h
  ProxyJump bastion.unbl.ink