secstate/dotfiles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ssh] Cleaning up sshd a bit

Browse Source
This commit is contained in:
Colin Powell
2024-01-11 16:48:14 -05:00
parent f6588dfb6e
commit cccd3c891a
1 changed files with 28 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

66
ssh/.ssh/config
View File

@ -1,25 +1,10 @@
Include /Users/powellc/.colima/ssh_config
#CanonicalizeHostname yes #CanonicalizeHostname yes
#CanonicalDomains elationemr.com internal.elationemr.com unbl.ink onec.me #CanonicalDomains elationemr.com unbl.ink onec.me
# #
Host * Host *
IdentitiesOnly=yes IdentitiesOnly yes
Host bastion.unbl.ink
Port 33
User powellc
IdentityFile ~/.ssh/jails
Host *.local
IdentityFile ~/.ssh/2022_h2_powellc
ServerAliveInterval 300
ServerAliveCountMax 2
AddKeysToAgent yes
VerifyHostKeyDNS no
Host rss.lab.unbl.ink
Port 333
User powellc
IdentityFile ~/.ssh/2022_h2_powellc
Host github.com Host github.com
ServerAliveInterval 300 ServerAliveInterval 300
@ -44,11 +29,6 @@ Host box.unbl.ink
IdentityFile ~/.ssh/box_unbl_ink IdentityFile ~/.ssh/box_unbl_ink
User root User root
Host box.castine.town
IdentityFile ~/.ssh/box_castine_town
User root
Host akna.local Host akna.local
User pi User pi
@ -69,13 +49,6 @@ Host tilde.club
User secstate User secstate
IdentityFile ~/.ssh/powellc IdentityFile ~/.ssh/powellc
Host bastion*
Port 33
User powellc
Host snap2*.local
User powellc
# ChicagoVPS # ChicagoVPS
Host pandora.unbl.ink bt2.unbl.ink Host pandora.unbl.ink bt2.unbl.ink
IdentityFile ~/.ssh/pandora IdentityFile ~/.ssh/pandora
@ -86,21 +59,38 @@ Host *.local *.service
StrictHostKeyChecking no StrictHostKeyChecking no
# LibreELEC # LibreELEC
Host ymir.local gerd.local skoll.local Host ymir.local gerd.local skoll.local thrymr.local
User root User root
# Bare metal hosts # Bare metal hosts
Host hati.local aegir.local tarqeq.local daphnis.local loge.local hyperion.local dione.local phoebe.local iapetus.local titan.local paaliaq.local kiviuq.local kari.local atlas.local siarnaq.local skathi.local tarvos.local rhea.local Host hati.local aegir.local tarqeq.local daphnis.local loge.local hyperion.local dione.local phoebe.local iapetus.local titan.local paaliaq.local kiviuq.local kari.local siarnaq.local skathi.local tarvos.local rhea.local
User powellc User powellc
IdentitiesOnly yes
# PBP uses root user # Root hosts
Host penobscotbaypress.com Host penobscotbaypress.com atlas.local
User root User root
#####
## This does the heavy lifting with homelab negotiation
#####
Host bastion.unbl.ink Host bastion.unbl.ink
Port 33 Port 33
IdentityFile ~/.ssh/2022_h2_powellc User powellc
IdentityFile ~/.ssh/2022_h2_powellc
Host rss.lab.unbl.ink
Port 333
User powellc
IdentityFile ~/.ssh/2022_h2_powellc
Host *.local
IdentityFile ~/.ssh/2022_h2_powellc
ServerAliveInterval 300
ServerAliveCountMax 2
AddKeysToAgent yes
VerifyHostKeyDNS no
## Jail hosts all need a jump ## Jail hosts all need a jump
Host *.local 192.168.40.* *.service Host *.local 192.168.40.* *.service