1 files changed, 27 insertions, 0 deletions
diff --git a/private_dot_ssh/config.tmpl b/private_dot_ssh/config.tmpl
new file mode 100644
index 0000000..b6dce43
--- /dev/null
+++ b/private_dot_ssh/config.tmpl
@@ -0,0 +1,27 @@
+{{ if eq (default "host" (index . "machineRole")) "canonical" }}
+Include config.local
+Host *
+  HashKnownHosts yes
+  ForwardAgent no
+  ServerAliveInterval 120
+{{ else }}
+# Ensure KnownHosts are unreadable if leaked
+HashKnownHosts yes
+
+Compression no
+ControlMaster auto
+ControlPersist 10
+AddressFamily inet
+ServerAliveInterval 120
+IdentitiesOnly yes
+
+Host git.sommerfeld.dev
+  Hostname mandibles.wg
+
+Include work.config
+
+Match host * exec "gpg-connect-agent UPDATESTARTUPTTY /bye"
+
+Match host *.wg,*.pulpo
+  IdentityFile ~/.ssh/nym.pub
+{{ end }}