summaryrefslogtreecommitdiffstatshomepage
path: root/private_dot_ssh/config.tmpl
diff options
context:
space:
mode:
authorsommerfeld <sommerfeld@sommerfeld.dev>2026-09-17 15:05:36 +0100
committersommerfeld <sommerfeld@sommerfeld.dev>2026-09-17 15:05:36 +0100
commitaff435a0fb3a56b1d7b738c7dede363440884b3a (patch)
tree07acb41d37760aa169ee42dbeb69da3621cc7489 /private_dot_ssh/config.tmpl
parenta7f74c1fa4b89c5829f5896842eb7248c820704c (diff)
downloaddotfiles-aff435a0fb3a56b1d7b738c7dede363440884b3a.tar.gz
dotfiles-aff435a0fb3a56b1d7b738c7dede363440884b3a.tar.bz2
dotfiles-aff435a0fb3a56b1d7b738c7dede363440884b3a.zip
Add the Canonical laptop profile and setup workflows
Diffstat (limited to 'private_dot_ssh/config.tmpl')
-rw-r--r--private_dot_ssh/config.tmpl27
1 files changed, 27 insertions, 0 deletions
diff --git a/private_dot_ssh/config.tmpl b/private_dot_ssh/config.tmpl
new file mode 100644
index 0000000..b6dce43
--- /dev/null
+++ b/private_dot_ssh/config.tmpl
@@ -0,0 +1,27 @@
+{{ if eq (default "host" (index . "machineRole")) "canonical" }}
+Include config.local
+Host *
+ HashKnownHosts yes
+ ForwardAgent no
+ ServerAliveInterval 120
+{{ else }}
+# Ensure KnownHosts are unreadable if leaked
+HashKnownHosts yes
+
+Compression no
+ControlMaster auto
+ControlPersist 10
+AddressFamily inet
+ServerAliveInterval 120
+IdentitiesOnly yes
+
+Host git.sommerfeld.dev
+ Hostname mandibles.wg
+
+Include work.config
+
+Match host * exec "gpg-connect-agent UPDATESTARTUPTTY /bye"
+
+Match host *.wg,*.pulpo
+ IdentityFile ~/.ssh/nym.pub
+{{ end }}