X-Git-Url: https://git.madduck.net/etc/ssh.git/blobdiff_plain/546404dc86b9346dee01ea623bff9aa72c4968f7..HEAD:/.ssh/config.in?ds=sidebyside;pf=etc diff --git a/.ssh/config.in b/.ssh/config.in index 38b85d5..c0aea81 100644 --- a/.ssh/config.in +++ b/.ssh/config.in @@ -3,7 +3,7 @@ Host 127.0.0.1 | localhost ForwardX11Trusted yes NoHostAuthenticationForLocalhost yes -### CHARADE KVM HOST +### ECLIPSE KVM HOST Host eclipse.madduck.net | eclipse Hostname eclipse.madduck.net @@ -12,8 +12,8 @@ Host eclipse-luks AddressFamily inet User root -Host charade.madduck.net | charade - Hostname charade.madduck.net +Host eclipse-fallback.madduck.net | eclipse-fallback + HostKeyAlias eclipse.madduck.net Host emily.madduck.net | emily | eclipse-kvm Hostname emily.madduck.net @@ -92,13 +92,11 @@ Host scratch.madduck.net | scratch User madduck HostKeyAlias diamond.madduck.net Host tunes.madduck.net | tunes - AddressFamily inet ControlMaster no Hostname tunes.madduck.net HostKeyAlias diamond.madduck.net IPQoS lowdelay af13 Host flics.madduck.net | flics - AddressFamily inet ControlMaster no Hostname flics.madduck.net HostKeyAlias diamond.madduck.net @@ -128,37 +126,6 @@ Host piper.madduck.net | piper Host cirrus.madduck.net | cirrus Hostname cirrus.madduck.net -### LEHEL - -Host clegg.lehel.madduck.net | clegg.lehel | clegg - CheckHostIP no - Hostname clegg.lehel.madduck.net - -Host albatross.lehel.madduck.net | albatross.lehel | albatross - Hostname albatross.lehel.madduck.net - HostKeyAlias albatross.lehel - LocalForward localhost:8387 localhost:8384 - DynamicForward localhost:9049 -Host albatross-luks - Hostname albatross.lehel.madduck.net - AddressFamily inet - User root - -Host albatross-via-clegg | ralbatross - Hostname albatross.lehel.madduck.net - ProxyJump clegg.dyndns.madduck.net - AddressFamily inet - LocalForward localhost:8387 localhost:8384 - DynamicForward localhost:9049 - -Host bike.lehel.madduck.net | bike.lehel | bike | clegg-kvm - Hostname bike.lehel.vpn.madduck.net - HostKeyAlias bike.lehel - -Host visitor*.lehel.madduck.net | visitor*.lehel - StrictHostKeyChecking no - UserKnownHostsFile /dev/null - ### GERN Host wall.gern.madduck.net | wall.gern | wall @@ -171,39 +138,138 @@ Host julia.gern.madduck.net | julia.gern | julia LocalForward localhost:8388 localhost:8384 Host julia-luks Hostname julia.gern.madduck.net - StrictHostKeyChecking no - UserKnownHostsFile /dev/null AddressFamily inet User root +Host kodi.gern.madduck.net | kodi + Hostname kodi.gern.madduck.net + User root + Host echo.kids.gern | echo.kids | jukebox.kids.gern | jukebox.kids Hostname echo.kids.gern.madduck.net HostKeyAlias echo.kids.gern.madduck.net -Host visitor*.gern.madduck.net | visitor*.gern +Host dyn*.gern.madduck.net | dyn*.*.gern.madduck.net | dyn*.gern | dyn*.*.gern | 10.39.*.* StrictHostKeyChecking no UserKnownHostsFile /dev/null +### KRAFFTWERK + +Host albatross.fo.krafftwerk.de | albatross + HostName albatross.fo.krafftwerk.de + HostKeyAlias albatross.fo.krafftwerk.de + ForwardAgent yes + LocalForward localhost:8387 localhost:8384 + DynamicForward localhost:9049 +Host albatross-luks + HostName albatross.fo.krafftwerk.de + HostKeyAlias albatross.fo.krafftwerk.de + AddressFamily inet + User root + +Host docker.fo.krafftwerk.de | dockerkr + HostName docker.fo.krafftwerk.de + HostKeyAlias docker.fo.krafftwerk.de + +### TONI + +Host gerald.toni.madduck.net | gerald.toni | gerald | gerald.int.toni.immo | martin.int.toni.immo + Hostname gerald.int.toni.immo + HostKeyAlias gerald.toni.madduck.net + ForwardAgent yes + +Host dc01.samba-ad.toni.immo | dc01 + Hostname dc01.samba-ad.toni.immo + HostKeyAlias dc01.samba-ad.toni.immo + +Host pve.int.toni.immo | pve + Hostname pve.int.toni.immo + HostKeyAlias pve.int.toni.immo + +Host pve-crypt + Hostname 192.168.231.10 + Port 60022 + +Host fileserver.int.toni.immo | fileserver + Hostname fileserver.int.toni.immo + HostKeyAlias fileserver.int.toni.immo + +Host postgres.int.toni.immo | postgres + Hostname postgres.int.toni.immo + HostKeyAlias postgres.int.toni.immo + +Host wikijs.int.toni.immo | wikijs + Hostname wikijs.int.toni.immo + HostKeyAlias wikijs.int.toni.immo + +Host nginx.int.toni.immo | nginx | git.int.toni.immo + Hostname nginx.int.toni.immo + HostKeyAlias nginx.int.toni.immo + +Host docker.int.toni.immo | docker + Hostname docker.int.toni.immo + HostKeyAlias docker.int.toni.immo + +Host docspell.int.toni.immo | docspell + Hostname docspell.int.toni.immo + HostKeyAlias docspell.int.toni.immo + +Host paperless.int.toni.immo | paperless + Hostname paperless.int.toni.immo + HostKeyAlias paperless.int.toni.immo + ForwardAgent yes + +Host dovecot.int.toni.immo | dovecot + Hostname dovecot.int.toni.immo + HostKeyAlias dovecot.int.toni.immo + +Host backupserver.int.toni.immo | backupserver + Hostname backupserver.int.toni.immo + HostKeyAlias backupserver.int.toni.immo + +Host cups.int.toni.immo | cups + Hostname cups.int.toni.immo + HostKeyAlias cups.int.toni.immo + +Host checkmk.int.toni.immo | checkmk + Hostname checkmk.int.toni.immo + HostKeyAlias checkmk.int.toni.immo + +Host pve-backups.toni.immo | pve-backups + Hostname pve-backups.toni.immo + HostKeyAlias pve-backups.toni.immo + Port 23 + User u368088 + ### ROAD WARRIORS -Host lotus.* - CheckHostIP no - HostKeyAlias lotus +Host lotus.gern + HostName lotus + ConnectTimeout 120 + ForwardAgent yes + ProxyCommand ssh wall.gern.madduck.net "n=30 && while ! nc -w 1 %h %p; do [ \$n -gt 0 ] || exit 1; wakeonlan -i 192.168.39.255 dc:fb:48:35:03:04; printf "%%02d: " \$n >&2; n=\$((\$n-1)); done" + LocalForward localhost:8385 localhost:8384 + +Host lotus.gern-vnc + HostName lotus + ConnectTimeout 120 + ProxyCommand ssh wall.gern.madduck.net "n=30 && while ! nc -w 1 %h %p; do [ \$n -gt 0 ] || exit 1; wakeonlan -i 192.168.39.255 dc:fb:48:35:03:04; printf "%%02d: " \$n >&2; n=\$((\$n-1)); done" LocalForward localhost:8385 localhost:8384 + RemoteCommand pkill x11vnc; x11vnc -display :0 -nopw -localhost -norepeat -gone '/usr/bin/xautolock -locknow' -Host lotus | lotus.rw.madduck.net +Host lotus.* | lotus CheckHostIP no HostKeyAlias lotus - #ProxyCommand bash -c "TARGETS=$( (TRIES=%h.{gern,lehel,rw}.madduck.net; eval fping -aAC1 -t500 $TRIES 2>&1 & eval fping6 -aAC1 -t500 $TRIES 2>&1; wait) | sed -rne 's, : ([[:digit:]]), @\1,p' | sort -t@ -k2n | sed -ne 's, .*,,p' | tr '\n' ','); echo Targets: \$TARGETS using \${TARGETS%%%%,*} … >&2; exec nc -F -vq0 \${TARGETS%%%%,*} %p" - #ProxyUseFdpass yes + ForwardAgent yes + HostName lotus.fo.krafftwerk.de LocalForward localhost:8385 localhost:8384 -Host ini | ini.dyndns.madduck.net - CheckHostIP no - HostKeyAlias ini.dyndns.madduck.net - HostName ini.dyndns.madduck.net - Port 13579 - User christine +Host lotus-vnc + HostName lotus.fo.krafftwerk.de + HostKeyAlias lotus + ConnectTimeout 120 + LocalForward localhost:5960 localhost:5900 + RemoteCommand pkill x11vnc; x11vnc -display :0 -nopw -localhost -norepeat -gone '/usr/bin/xautolock -locknow' Host emerald | emerald.kids.gern | emerald.rw.madduck.net CheckHostIP no @@ -222,100 +288,23 @@ Host mother Hostname mother.rw.vpn.madduck.net CheckHostIP no -### PHONES - -Host oneplus5t | oneplus5t.phones.* - Port 2222 - User shell - HostName oneplus5t.phones - HostKeyAlias oneplus5t.phones - LocalForward localhost:8383 localhost:8384 - -Host tethered-oneplus5t - Port 2222 - User shell - HostName 192.168.43.1 - HostKeyAlias oneplus5t.phones - LocalForward localhost:8383 localhost:8384 - -Host sgs7e | sgs7e.phones.* - Port 2222 - User shell - HostName sgs7e.phones - HostKeyAlias sgs7e.phones - LocalForward localhost:8382 localhost:8384 - -Host tethered-sgs7e - Port 2222 - User shell - HostName 192.168.43.1 - HostKeyAlias sgs7e.phones - LocalForward localhost:8382 localhost:8384 - -Host sgs5m | sgs5m.phones.* - Port 2222 - User shell - HostName sgs5m.phones - HostKeyAlias sgs5m.phones - LocalForward localhost:8381 localhost:8384 - -### LOCAL VIRT HOSTS - -Host red | green | blue | yellow | black | white | orange | violet | wafer - CanonicalDomains virt - CanonicalizeHostname yes - CanonicalizeFallbackLocal no - CanonicalizeMaxDots 0 - VerifyHostKeyDNS no - CheckHostIP no - StrictHostKeyChecking no - UserKnownHostsFile /dev/null - -### DEBIAN - -Host alioth.debian.org | anonscm.alioth.debian.org | svn.debian.org | git.debian.org | hg.debian.org | cvs.debian.org - HostKeyAlias moszumanska.debian.org - -Host people.debian.org | people - Hostname people.debian.org - HostKeyAlias paradis.debian.org - -Host master.debian.org | master - Hostname master.debian.org - -Match host *.debian.org - StrictHostKeyChecking ask - VerifyHostKeyDNS ask - User madduck - -### DEBCONF - -Host nelson.debconf.org | penta.debconf.org | nelson | summit | summit.debconf.org - Hostname nelson.debconf.org - ProxyJump sysyphus.madduck.net - -Host itchy.debconf.org | itchy | wafer.debconf.org | wafer - Hostname itchy.debconf.org - ProxyJump sysyphus.madduck.net - -Host kent.debconf.org | kent - Hostname kent.debconf.org - ProxyJump sysyphus.madduck.net - ### TILDE CLUB Host squiggle.city Hostname squiggle.city User madduck -### NZ - -Host workbuffer.org | nz - Hostname workbuffer.org +Host tilde.club + Hostname tilde.club User madduck ### MISC +Host nz + Hostname 202.78.240.196 + User madduck + DynamicForward localhost:9064 + Host github.com | github Hostname github.com User git @@ -328,10 +317,6 @@ Host gitlab.debian.net | git.fosscommunity.in Hostname gitlab.debian.net User gitlab -Host grimble.mtfk.de | grimble | mtfk - CheckHostIP no - Hostname grimble.mtfk.de - Host lion.mjollnir.org | lion Hostname lion.mjollnir.org User madduck @@ -350,24 +335,23 @@ Host clegg.northdrive.de Match host *.madduck.net StrictHostKeyChecking ask - VerifyHostKeyDNS ask + +Match host *.debian.org + StrictHostKeyChecking ask + User madduck Host * IgnoreUnknown * ConnectTimeout 30 - ControlPath ~/.var/ssh/ssh_control_%l_%h_%p_%r + ControlPath ~/.var/ssh/ssh_control_%l_%k_%p_%r ControlMaster auto ControlPersist 30 ExitOnForwardFailure no ForwardAgent no - #ForwardX11 no - #ForwardX11Trusted no HashKnownHosts no NumberOfPasswordPrompts 2 PasswordAuthentication yes - Protocol 2 ServerAliveInterval 45 StrictHostKeyChecking yes - #UpdateHostKeys no VerifyHostKeyDNS ask VisualHostKey no