changeset 299:283c6f6c64c5

And start treating parapet like the bastion it is
author Steve Huston <huston@princeton.edu>
date Mon, 14 Apr 2025 15:41:32 -0400
parents ef0a1a087499
children 95129e7fb0ac
files .bash_aliases .ssh/config
diffstat 2 files changed, 5 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/.bash_aliases	Mon Apr 14 15:37:00 2025 -0400
+++ b/.bash_aliases	Mon Apr 14 15:41:32 2025 -0400
@@ -143,6 +143,7 @@
 alias rj='ssh -t joshua.srhuston.net screen -raAx'
 alias irc='ssh -t joshua.srhuston.net docker exec -it irssi screen -raAx;clear;echo IRC Session ended'
 alias rx='ssh -t xanadu.astro.princeton.edu screen -raAx'
+alias rp='ssh -t td-parapet.princeton.edu screen -raAx'
 # Moved this one here, no ssh but still screen usage
 alias ret='screen -raAx'
 
--- a/.ssh/config	Mon Apr 14 15:37:00 2025 -0400
+++ b/.ssh/config	Mon Apr 14 15:41:32 2025 -0400
@@ -20,6 +20,10 @@
 Match host csesbh2.princeton.edu exec "~/.ssh/onsubnet --not 128.112."
   ProxyJump xanadu.astro.princeton.edu
 
+# Likewise, td-parapet connections should proxy through xanadu
+Match host td-parapet.princeton.edu exec "~/.ssh/onsubnet --not 128.112."
+  ProxyJump xanadu.astro.princeton.edu
+
 # If we're not on Princeton wired network, and not at home, then connections
 # to joshua should tunnel through xanadu
 Match host joshua.srhuston.net exec "~/.ssh/onsubnet --not 128.112. && ~/.ssh/athome --not"