dotfiles/ssh/.ssh/config

Include /Users/colin.powell/.colima/ssh_config

Include ~/.orbstack/ssh/config


Include /Users/powellc/.colima/ssh_config

#CanonicalizeHostname yes
#CanonicalDomains elationemr.com unbl.ink onec.me
#
Host *
  IdentityAgent $SSH_AUTH_SOCK
  #PreferredAuthentications publickey
  IdentitiesOnly no

Host github.com
    User git
    IdentityAgent $SSH_AUTH_SOCK
    ServerAliveInterval 300
    ServerAliveCountMax 2
    IdentitiesOnly yes
    IdentityFile none

# Home Gitea account:
Host code.lab.unbl.ink git.service 192.168.40.83 gogs*
  User git
  PreferredAuthentications publickey
  PasswordAuthentication no
  Port 222

# Mailinabox uses root by default
Host box.unbl.ink
  IdentityFile ~/.ssh/box_unbl_ink
  User root

Host akna.local
  User pi

Host sdf.org otaku.sdf.org sverige.freeshell.org 
  User secstate

Host cosmic.voyage
  User secstate
  IdentityFile ~/.ssh/cosmic.voyage

Host tilde.club
  User secstate
  IdentityFile ~/.ssh/powellc

# ChicagoVPS
Host pandora.unbl.ink bt2.unbl.ink
  IdentityFile ~/.ssh/pandora
  User root

Host bt1.unbl.ink
  IdentityFile ~/.ssh/2022_h2_powellc
  User root


# Inside our network, skip strict host key checking
Host *.service
  User root
  StrictHostKeyChecking no

# Bare metal hosts
Host hati.local tarqeq.local daphnis.local loge.local hyperion.local dione.local phoebe.local iapetus.local titan.local paaliaq.local kiviuq.local kari.local siarnaq.local skathi.local tarvos.local rhea.local erriapus.local mimas.local polydeuces.local mundilfari.local ijiraq.local
  User powellc

# Root hosts
Host penobscotbaypress.com atlas.local
  User root

#####
## This does the heavy lifting with homelab negotiation
#####

Host bastion.unbl.ink
    Port 44
    User powellc

Host *.local *.service
    IdentityFile ~/.ssh/jails
    ServerAliveInterval 300
    ServerAliveCountMax 2
    AddKeysToAgent yes
    VerifyHostKeyDNS no

Host bastion.service
    Port 33

## Jail hosts all need a jump
#Match exec "onsubnet 192.168.40." host *.service
#  User root
#  IdentityFile ~/.ssh/jails
#  Hostname %h
#
#Match exec "onsubnet --not 192.168.40." host *.service
#  User root
#  IdentityFile ~/.ssh/jails
#  Hostname %h
#  ProxyJump bastion.unbl.ink