Include /Users/colin.powell/.colima/ssh_config

Include ~/.orbstack/ssh/config


Include /Users/powellc/.colima/ssh_config

#CanonicalizeHostname yes
#CanonicalDomains elationemr.com unbl.ink onec.me
#
Host *
  IdentityAgent $SSH_AUTH_SOCK
  #PreferredAuthentications publickey
  IdentitiesOnly no

Host github.com
    User git
    IdentityAgent $SSH_AUTH_SOCK
    ServerAliveInterval 300
    ServerAliveCountMax 2
    IdentitiesOnly yes
    IdentityFile none

# Home Gitea account:
Host code.lab.unbl.ink git.service 192.168.40.83 gogs*
  User git
  PreferredAuthentications publickey
  PasswordAuthentication no
  Port 222

# Mailinabox uses root by default
Host box.unbl.ink
  IdentityFile ~/.ssh/box_unbl_ink
  User root

Host akna.local
  User pi

Host nfs.service
  PasswordAuthentication yes

Host 192.168.40.142
  PreferredAuthentications password
  PasswordAuthentication yes
  IdentitiesOnly yes
  User powellc
  StrictHostKeyChecking no

Host sdf.org otaku.sdf.org sverige.freeshell.org 
  User secstate

Host cosmic.voyage
  User secstate
  IdentityFile ~/.ssh/cosmic.voyage

Host tilde.club
  User secstate
  IdentityFile ~/.ssh/powellc

# ChicagoVPS
Host pandora.unbl.ink bt2.unbl.ink
  IdentityFile ~/.ssh/pandora
  User root

Host bt1.unbl.ink
  IdentityFile ~/.ssh/2022_h2_powellc
  User root


# Inside our network, skip strict host key checking
Host *.service
  User root
  StrictHostKeyChecking no

# Bare metal hosts
Host hati.local tarqeq.local daphnis.local loge.local hyperion.local dione.local phoebe.local iapetus.local titan.local paaliaq.local kiviuq.local kari.local siarnaq.local skathi.local tarvos.local rhea.local erriapus.local mimas.local polydeuces.local mundilfari.local ijiraq.local
  User powellc

# Root hosts
Host penobscotbaypress.com atlas.local
  User root

#####
## This does the heavy lifting with homelab negotiation
#####

Host bastion.unbl.ink
    Port 44
    User powellc

Host *.local *.service
    IdentityFile ~/.ssh/jails
    ServerAliveInterval 300
    ServerAliveCountMax 2
    AddKeysToAgent yes
    VerifyHostKeyDNS no

Host bastion.service
    Port 33

## Jail hosts all need a jump
#Match exec "onsubnet 192.168.40." host *.service
#  User root
#  IdentityFile ~/.ssh/jails
#  Hostname %h
#
#Match exec "onsubnet --not 192.168.40." host *.service
#  User root
#  IdentityFile ~/.ssh/jails
#  Hostname %h
#  ProxyJump bastion.unbl.ink