add vpn jumphosts

[etc/ssh.git] / .ssh / config.in

diff --git a/.ssh/config.in b/.ssh/config.in
index 52725f1b16dad869a9e699b7fcce7b3ad5010e2a..3ddafb652d2cbea683ff4ff98b43606f706b68dc 100644 (file)
--- a/.ssh/config.in
+++ b/.ssh/config.in
@@ -12,7 +12,7 @@ Host charade-vnc
   ControlPath none
   Hostname charade.madduck.net
 
-Host emily.madduck.net | emily
+Host emily.madduck.net | emily | charade-kvm
   Hostname emily.madduck.net
 
 Host matilda.madduck.net | matilda
@@ -28,7 +28,6 @@ Host ssh443
   Hostname matilda.madduck.net
   Port 443
   ConnectTimeout 60
-  DynamicForward 9001
 
 Host vizier.madduck.net | vizier
   Hostname vizier.madduck.net
@@ -42,6 +41,7 @@ Host ambassador.madduck.net | ambassador
 
 Host alan.madduck.net | alan
   Hostname alan.madduck.net
+  LocalForward localhost:8390 localhost:8384
 Host git.madduck.net | git
   User git
   HostKeyAlias alan.madduck.net
@@ -55,6 +55,9 @@ Host pulse.madduck.net | pulse
 Host vera.madduck.net | vera
   Hostname vera.madduck.net
 
+Host arnold.madduck.net | arnold
+  Hostname arnold.madduck.net
+
 Host seamus.madduck.net | seamus
   Hostname seamus.madduck.net
 
@@ -66,7 +69,7 @@ Host lunatic.madduck.net | lunatic
 
 ### UNI ZURICH MACHINES
 
-Host gig.madduck.net | gig
+Host gig.madduck.net | gig | eugene-kvm
   Hostname gig.madduck.net
 
 Host eugene.madduck.net | eugene
@@ -78,6 +81,7 @@ Host eugene-luks
 Host diamond.madduck.net | diamond
   Hostname diamond.madduck.net
   LocalForward localhost:8389 localhost:8384
+  DynamicForward localhost:9041
 Host debian.madduck.net | debian
   HostKeyAlias diamond.madduck.net
 Host scratch.madduck.net | scratch
@@ -98,6 +102,7 @@ Host flics.madduck.net | flics
 
 Host domine.madduck.net | domine
   Hostname domine.madduck.net
+  DynamicForward localhost:9031
 
 Host shelter.madduck.net | shelter
   Hostname shelter.madduck.net
@@ -124,6 +129,7 @@ Host albatross.lehel.madduck.net | albatross.lehel | albatross
   Hostname albatross.lehel.madduck.net
   HostKeyAlias albatross.lehel
   LocalForward localhost:8387 localhost:8384
+  DynamicForward localhost:9049
 Host albatross-luks
   Hostname albatross.lehel.madduck.net
   StrictHostKeyChecking no
@@ -135,10 +141,12 @@ Host albatross-via-clegg | ralbatross
   ProxyJump clegg.dyndns.madduck.net
   AddressFamily inet
   LocalForward localhost:8387 localhost:8384
+  DynamicForward localhost:9049
 
-Host bike.lehel.madduck.net | bike.lehel | bike
-  Hostname bike.lehel.madduck.net
+Host bike.lehel.madduck.net | bike.lehel | bike | clegg-kvm
+  Hostname bike.lehel.vpn.madduck.net
   HostKeyAlias bike.lehel
+  ProxyJump domine.madduck.net
 
 Host visitor*.lehel.madduck.net | visitor*.lehel
   StrictHostKeyChecking no
@@ -152,7 +160,7 @@ Host mother.gauting | mother | mother.gauting.madduck.net
 
 Host mothere
   Hostname mother.dyndns.madduck.net
-  Port 22021
+  Port 22221
   CheckHostIP no
   HostKeyAlias mother.gauting.madduck.net
 
@@ -165,9 +173,6 @@ Host wall-ipv4
   Hostname wall.mtvic.madduck.net
   AddressFamily inet
 
-Host bell.mtvic.madduck.net | bell.mtvic | bell
-  Hostname bell.mtvic.madduck.net
-
 Host julia.mtvic.madduck.net | julia.mtvic | julia
   Hostname julia.mtvic.madduck.net
   LocalForward localhost:8388 localhost:8384
@@ -193,20 +198,12 @@ Host visitor*.mtvic.madduck.net | visitor*.mtvic
 ### CATALYST
 
 Host atom.catalyst.madduck.net | atom.catalyst | atom
-  Hostname atom.catalyst.madduck.net
-
-### ROAD WARRIORS
-
-Host fishbowl.*
+  Hostname atom.catalyst.vpn.madduck.net
+  HostKeyAlias atom.catalyst.madduck.net
   CheckHostIP no
-  HostKeyAlias fishbowl
-  LocalForward localhost:8386 localhost:8384
+  ProxyJump domine.madduck.net
 
-Host fishbowl | fishbowl.rw.madduck.net
-  CheckHostIP no
-  HostKeyAlias fishbowl
-  ProxyCommand bash -c "TARGETS=$( (TRIES=%h.{mtvic,catalyst,lehel,gauting,rw}.madduck.net; eval fping -aAC1 -t500 $TRIES 2>&1 & eval fping6 -aAC1 -t500 $TRIES 2>&1; wait) | sed -rne 's, : ([[:digit:]]), @\1,p' | sort -t@ -k2n | sed -ne 's, .*,,p' | tr '\n' ','); echo Targets: \$TARGETS using \${TARGETS%%%%,*} … >&2; exec nc -vq0 \${TARGETS%%%%,*} %p"
-  LocalForward localhost:8386 localhost:8384
+### ROAD WARRIORS
 
 Host lotus.*
   CheckHostIP no
@@ -216,7 +213,7 @@ Host lotus.*
 Host lotus | lotus.rw.madduck.net
   CheckHostIP no
   HostKeyAlias lotus
-  ProxyCommand bash -c "TARGETS=$( (TRIES=%h.{mtvic,catalyst,lehel,gauting,rw}.madduck.net; eval fping -aAC1 -t500 $TRIES 2>&1 & eval fping6 -aAC1 -t500 $TRIES 2>&1; wait) | sed -rne 's, : ([[:digit:]]), @\1,p' | sort -t@ -k2n | sed -ne 's, .*,,p' | tr '\n' ','); echo Targets: \$TARGETS using \${TARGETS%%%%,*} … >&2; exec nc -vq0 \${TARGETS%%%%,*} %p"
+  ProxyCommand bash -c "TARGETS=$( (TRIES=%h.{mtvic,catalyst,lehel,rw}.madduck.net; eval fping -aAC1 -t500 $TRIES 2>&1 & eval fping6 -aAC1 -t500 $TRIES 2>&1; wait) | sed -rne 's, : ([[:digit:]]), @\1,p' | sort -t@ -k2n | sed -ne 's, .*,,p' | tr '\n' ','); echo Targets: \$TARGETS using \${TARGETS%%%%,*} … >&2; exec nc -vq0 \${TARGETS%%%%,*} %p"
   LocalForward localhost:8385 localhost:8384
 
 Host ini | ini.dyndns.madduck.net
@@ -233,20 +230,20 @@ Host sgs7e | sgs7e.phones.*
   User shell
   HostName sgs7e.phones
   HostKeyAlias sgs7e.phones
-  LocalForward localhost:8390 localhost:8384
+  LocalForward localhost:8383 localhost:8384
 
 Host tethered-sgs7e
   Port 2222
   User shell
   HostName 192.168.43.1
   HostKeyAlias sgs7e.phones
-  LocalForward localhost:8390 localhost:8384
+  LocalForward localhost:8383 localhost:8384
 
 Host sgs5m | sgs5m.phones.*
   User shell
   HostName sgs5m.phones
   HostKeyAlias sgs5m.phones
-  LocalForward localhost:8391 localhost:8384
+  LocalForward localhost:8382 localhost:8384
 
 ### LOCAL VIRT HOSTS
 
@@ -325,6 +322,10 @@ Host lion.mjollnir.org | lion
   Hostname lion.mjollnir.org
   User madduck
 
+Host files.northdrive.de | idiotheke
+  Hostname files.northdrive.de
+  User madduck
+
 ### DEFAULTS
 
 Match host *.madduck.net
@@ -333,11 +334,11 @@ Match host *.madduck.net
 
 Host *
   IgnoreUnknown *
-  ConnectTimeout 10
+  ConnectTimeout 30
   ControlPath ~/.var/ssh/ssh_control_%l_%h_%p_%r
   ControlMaster auto
   ControlPersist 30
-  ExitOnForwardFailure yes
+  ExitOnForwardFailure no
   ForwardAgent no
   #ForwardX11 no
   #ForwardX11Trusted no