.ssh/config


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154

# -*- mode: conf-space -*-

### SDF hosts

Host tty.sdf.org | sdf
HostName tty.sdf.org
# ForwardAgent yes

Host meta.sdf.org | meta | iceland | sverige
HostName meta.sdf.org
# Port 110
# ForwardAgent yes
# LocalForward 8022 ma:22
# LocalForward 8025 mx:25
# DynamicForward 1080

Host odin.sdf-eu.org | sdfeu.org | sdf-eu.org | odin | sdfeu | sdf-eu
HostName odin.sdf-eu.org
# ForwardAgent yes

# Host ma.sdf.org | ma
# HostName ma.sdf.org
# ForwardAgent yes
# User spw
# #HostName localhost
# #Port 8022
# #HostKeyAlias ma.sdf.org

# Note that wildcards here match what is actually typed on the command
# line, not the hostname of the machine we end up connecting to.
# That's why 'sdf' is present
Host sdf sdfeu *.sdf.org *.sdf-eu.org
User spw

### Debian hosts

Host fasolo | ftp-master | ftp-master.debian.org
HostName ftp-master.debian.org

Host *.debian.org !*.ssh.debian.org !ssh.debian.org
ProxyJump ssh.debian.org
# ^ or: {na,eu}.ssh.debian.org

Host *.debian.org
User spwhitton
# mention both host files so that ssh adds host keys for IP addresses
# to the former file, not the latter
UserKnownHostsFile ~/.ssh/known_hosts ~/.ssh/known_hosts_debian
StrictHostKeyChecking yes

Host *.debian.net
User spwhitton

### my hosts

Host zephyr.silentflame.com | zephyr
User swhitton
# HostName 192.168.0.110
# CheckHostIP no
# Ciphers aes256-ctr

Host zephyr.abbeydaled.local
User swhitton
# HostName 192.168.0.110
# CheckHostIP no
# Ciphers aes256-ctr

# Host artemis.silentflame.com | artemis
# User swhitton
# HostName artemis.local
# CheckHostIP no

Host hestia.silentflame.com | hestia
User spwhitton

# Host pan.silentflame.com | pan
# User spwhitton
# HostName 128.199.240.8
# ForwardAgent yes

Host athena.silentflame.com | athena
User spwhitton
HostName athena.silentflame.com
ForwardAgent yes
IdentityFile ~/.ssh/pubkey.d/workstation_to_athena
IdentityFile ~/.ssh/pubkey.d/user@zephyr-2018-08-09

# for athena's gitolite installation -- .gitconfig contains
# git@spwhitton.name: as the URI
Host spwhitton.name
IdentityFile ~/.ssh/id_athena.pub
IdentityFile ~/.ssh/pubkey.d/user@zephyr-2018-08-09

Host hephaestus.silentflame.com | hephaestus
User spwhitton
ForwardAgent yes

# Host poseidon.silentflame.com | poseidon
# User spwhitton
# HostName 159.100.240.143
# ForwardAgent no

# Host shortgeese.silentflame.com | shortgeese
# HostName shortgeese.local
# ForwardAgent yes

Host iris.silentflame.com | iris
User spwhitton
ForwardAgent yes

### other people's hosts

Host github
User git
HostName github.com
VerifyHostKeyDNS yes

Host u.arizona.edu | sage.u.arizona.edu | sage
User spwhitton
HostName u.arizona.edu
# ForwardAgent yes

# Host TallGeese
# User nrosati
# HostName 192.168.1.103

# avoid any password prompts if something goes wrong with the agent;
# when initialising a new rsync.net account, will need to comment this
# out
Host *.rsync.net
PreferredAuthentications publickey

Host chiark
User spwhitton
HostName login.chiark.greenend.org.uk

### global settings

Match all
Include config_priv

Host *
#Compression yes
ControlMaster auto
ControlPath /tmp/ssh-%u-%r@%h:%p
ControlPersist 4h
ServerAliveInterval 5
ServerAliveCountMax 2
ForwardAgent no
NoHostAuthenticationForLocalhost yes
ExitOnForwardFailure yes
# visual host keys are annoying for myrepos
VisualHostKey no
# Ciphers arcfour,blowfish-cbc