Mercurial > index.cgi > dotfiles
annotate .ssh/config @ 219:2856293f6253
Adding hgrc for APRS machine
author | Steve Huston <huston@srhuston.net> |
---|---|
date | Tue, 06 Apr 2021 10:43:02 -0400 |
parents | 81d5d7484f31 |
children | 27bc245f4194 |
rev | line source |
---|---|
203
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
1 # Host-specific things at the top, and get less specific as you go; first |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
2 # match wins |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
3 |
158
d8596a04bdb1
Updating floyd config
Steve Huston <huston@astro.princeton.edu>
parents:
131
diff
changeset
|
4 # Turn things off for floyd - it doesn't need them |
d8596a04bdb1
Updating floyd config
Steve Huston <huston@astro.princeton.edu>
parents:
131
diff
changeset
|
5 Host floyd-mgmt floyd-mgmt.astro.internal |
46
82999776304f
* Added config for Floyd to prevent errors
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
38
diff
changeset
|
6 ForwardAgent no |
82999776304f
* Added config for Floyd to prevent errors
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
38
diff
changeset
|
7 ForwardX11 no |
82999776304f
* Added config for Floyd to prevent errors
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
38
diff
changeset
|
8 ForwardX11Trusted no |
82999776304f
* Added config for Floyd to prevent errors
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
38
diff
changeset
|
9 |
203
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
10 # If we're not on the Princeton wired network, csesbh2 should proxy through |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
11 # xanadu |
186
83f164405755
New 'onsubnet' command, new config for master controls
Steve Huston <huston@astro.princeton.edu>
parents:
158
diff
changeset
|
12 Match host csesbh2.princeton.edu exec "~/.ssh/onsubnet --not 128.112." |
83f164405755
New 'onsubnet' command, new config for master controls
Steve Huston <huston@astro.princeton.edu>
parents:
158
diff
changeset
|
13 ProxyJump xanadu.astro.princeton.edu |
83f164405755
New 'onsubnet' command, new config for master controls
Steve Huston <huston@astro.princeton.edu>
parents:
158
diff
changeset
|
14 |
203
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
15 # If we're not on Princeton wired network, and not at home, then connections |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
16 # to joshua should tunnel through xanadu |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
17 Match host joshua.srhuston.net exec "~/.ssh/onsubnet --not 128.112. && [[ `curl -s checkip.amazonaws.com` != 100.11.40.19 ]]" |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
18 ProxyJump xanadu.astro.princeton.edu |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
19 |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
20 # But if we *are* home, convert joshua into its internal IP address |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
21 Match host joshua.srhuston.net exec "test `curl -s checkip.amazonaws.com` == 100.11.40.19" |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
22 HostName 192.168.7.49 |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
23 |
213
283c952b0455
Adding some local (home) hosts
Steve Huston <huston@srhuston.net>
parents:
209
diff
changeset
|
24 # Some "local" hosts, rather than configuring DNS or hosts files |
283c952b0455
Adding some local (home) hosts
Steve Huston <huston@srhuston.net>
parents:
209
diff
changeset
|
25 Match host milton exec "test `curl -s checkip.amazonaws.com` == 100.11.40.19" |
283c952b0455
Adding some local (home) hosts
Steve Huston <huston@srhuston.net>
parents:
209
diff
changeset
|
26 HostName 192.168.7.56 |
283c952b0455
Adding some local (home) hosts
Steve Huston <huston@srhuston.net>
parents:
209
diff
changeset
|
27 |
283c952b0455
Adding some local (home) hosts
Steve Huston <huston@srhuston.net>
parents:
209
diff
changeset
|
28 Match host syrinx exec "test `curl -s checkip.amazonaws.com` == 100.11.40.19" |
283c952b0455
Adding some local (home) hosts
Steve Huston <huston@srhuston.net>
parents:
209
diff
changeset
|
29 HostName 192.168.7.109 |
283c952b0455
Adding some local (home) hosts
Steve Huston <huston@srhuston.net>
parents:
209
diff
changeset
|
30 |
283c952b0455
Adding some local (home) hosts
Steve Huston <huston@srhuston.net>
parents:
209
diff
changeset
|
31 Match host aprs exec "test `curl -s checkip.amazonaws.com` == 100.11.40.19" |
283c952b0455
Adding some local (home) hosts
Steve Huston <huston@srhuston.net>
parents:
209
diff
changeset
|
32 HostName 192.168.7.57 |
218
81d5d7484f31
Forgot to specify user for that one
Steve Huston <huston@srhuston.net>
parents:
213
diff
changeset
|
33 User pi |
213
283c952b0455
Adding some local (home) hosts
Steve Huston <huston@srhuston.net>
parents:
209
diff
changeset
|
34 |
203
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
35 # Shared connection for xanadu, csesbh2, and joshua |
f163a6073c48
Merge shared connections into one; add proxyjump for home and a couple other nice options
Steve Huston <huston@astro.princeton.edu>
parents:
202
diff
changeset
|
36 Host xanadu.astro.princeton.edu csesbh2.princeton.edu joshua.srhuston.net |
186
83f164405755
New 'onsubnet' command, new config for master controls
Steve Huston <huston@astro.princeton.edu>
parents:
158
diff
changeset
|
37 User huston |
83f164405755
New 'onsubnet' command, new config for master controls
Steve Huston <huston@astro.princeton.edu>
parents:
158
diff
changeset
|
38 ControlMaster auto |
83f164405755
New 'onsubnet' command, new config for master controls
Steve Huston <huston@astro.princeton.edu>
parents:
158
diff
changeset
|
39 ControlPersist yes |
83f164405755
New 'onsubnet' command, new config for master controls
Steve Huston <huston@astro.princeton.edu>
parents:
158
diff
changeset
|
40 ControlPath ~/.ssh/sockets/%C |
190
f5969673c794
A couple keepalive type config settings
Steve Huston <huston@srhuston.net>
parents:
186
diff
changeset
|
41 ServerAliveInterval 30 |
f5969673c794
A couple keepalive type config settings
Steve Huston <huston@srhuston.net>
parents:
186
diff
changeset
|
42 # This is the default, putting here to document |
f5969673c794
A couple keepalive type config settings
Steve Huston <huston@srhuston.net>
parents:
186
diff
changeset
|
43 ServerAliveCountMax 3 |
186
83f164405755
New 'onsubnet' command, new config for master controls
Steve Huston <huston@astro.princeton.edu>
parents:
158
diff
changeset
|
44 |
105
3f1ead4ba8b4
Changes for the Pi:
Steve Huston <huston@astro.princeton.edu>
parents:
89
diff
changeset
|
45 # Everything is fine for the Raspberry Pi, just need a different user |
3f1ead4ba8b4
Changes for the Pi:
Steve Huston <huston@astro.princeton.edu>
parents:
89
diff
changeset
|
46 Host cake cake.srhuston.net |
3f1ead4ba8b4
Changes for the Pi:
Steve Huston <huston@astro.princeton.edu>
parents:
89
diff
changeset
|
47 User pi |
3f1ead4ba8b4
Changes for the Pi:
Steve Huston <huston@astro.princeton.edu>
parents:
89
diff
changeset
|
48 ForwardAgent yes |
3f1ead4ba8b4
Changes for the Pi:
Steve Huston <huston@astro.princeton.edu>
parents:
89
diff
changeset
|
49 ForwardX11 yes |
3f1ead4ba8b4
Changes for the Pi:
Steve Huston <huston@astro.princeton.edu>
parents:
89
diff
changeset
|
50 ForwardX11Trusted yes |
3f1ead4ba8b4
Changes for the Pi:
Steve Huston <huston@astro.princeton.edu>
parents:
89
diff
changeset
|
51 |
209
d7f327fd082f
Add *.local to ssh configs
Steve Huston <huston@astro.princeton.edu>
parents:
203
diff
changeset
|
52 # Allow everything for CSES, astro, local, and home hosts w/ FQDN |
d7f327fd082f
Add *.local to ssh configs
Steve Huston <huston@astro.princeton.edu>
parents:
203
diff
changeset
|
53 Host cses*.princeton.edu *.rc.princeton.edu *.rc *.astro.princeton.edu *.srhuston.net *.local |
105
3f1ead4ba8b4
Changes for the Pi:
Steve Huston <huston@astro.princeton.edu>
parents:
89
diff
changeset
|
54 User huston |
38
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
55 ForwardAgent yes |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
56 ForwardX11 yes |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
57 ForwardX11Trusted yes |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
58 |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
59 # Deny everything for other hosts w/ a dot |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
60 Host *.* |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
61 ForwardAgent no |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
62 ForwardX11 no |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
63 ForwardX11Trusted no |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
64 |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
65 # Now allow for anything else - if we're typing a single hostname, it's likely |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
66 # trusted. |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
67 Host * |
105
3f1ead4ba8b4
Changes for the Pi:
Steve Huston <huston@astro.princeton.edu>
parents:
89
diff
changeset
|
68 User huston |
38
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
69 ForwardAgent yes |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
70 ForwardX11 yes |
9373507ce560
* Adding .ssh/config to version control
huston@80426f53-59d1-405d-934b-f07cd76f4a1a
parents:
diff
changeset
|
71 ForwardX11Trusted yes |