From bcf81a504e2a1f0bd1ada843602f228a01dcf917 Mon Sep 17 00:00:00 2001
From: Colin Powell <colin@unbl.ink>
Date: Wed, 1 Oct 2025 10:23:39 -0400
Subject: [PATCH] [ssh] Update bastion settings for personal and mmpay devstage

---
 ssh/.ssh/config | 38 +++++++++++++++++++-------------------
 1 file changed, 19 insertions(+), 19 deletions(-)

diff --git a/ssh/.ssh/config b/ssh/.ssh/config
index b12f6ee..6e6f8fc 100644
--- a/ssh/.ssh/config
+++ b/ssh/.ssh/config
@@ -79,15 +79,7 @@ Host penobscotbaypress.com atlas.local
 #####
 
 Host bastion.unbl.ink
-    Port 333
-    User powellc
-    IdentityFile ~/.ssh/2022_h2_powellc
-
-Host bastion.service
-    Port 33
-
-Host rss.lab.unbl.ink
-    Port 333
+    Port 44
     User powellc
     IdentityFile ~/.ssh/2022_h2_powellc
 
@@ -98,18 +90,26 @@ Host *.local *.service
     AddKeysToAgent yes
     VerifyHostKeyDNS no
 
-Host 67.205.184.201 life.unbl.ink
-  User root
-  IdentityFile ~/.ssh/1904_powellc
+Host bastion.service
+    Port 33
 
 ## Jail hosts all need a jump
-#Match exec "onsubnet 192.168.40." host *.service
-#  User root
+Match exec "onsubnet 192.168.40." host *.service
+  User root
   IdentityFile ~/.ssh/jails
   Hostname %h
 
-  #Match exec "onsubnet --not 192.168.40." host *.service
-  #  User root
-  #  IdentityFile ~/.ssh/jails
-  #  Hostname %h
-  #  ProxyJump bastion.unbl.ink
+Match exec "onsubnet --not 192.168.40." host *.service
+  User root
+  IdentityFile ~/.ssh/jails
+  Hostname %h
+  ProxyJump bastion.unbl.ink
+
+  
+Host mmpay-bastion.mmstage.dev
+  ForwardAgent yes
+  Hostname mmpay-bastion.mmstage.dev
+  ProxyCommand /opt/homebrew/bin/cloudflared  access ssh --hostname %h
+
+Host devstage-mmpay-0*
+  ProxyJump mmpay-bastion.mmstage.dev