diff options
Diffstat (limited to 'private_dot_ssh')
| -rw-r--r-- | private_dot_ssh/config.tmpl (renamed from private_dot_ssh/config) | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/private_dot_ssh/config b/private_dot_ssh/config.tmpl index 8df3687..b6dce43 100644 --- a/private_dot_ssh/config +++ b/private_dot_ssh/config.tmpl @@ -1,3 +1,10 @@ +{{ if eq (default "host" (index . "machineRole")) "canonical" }} +Include config.local +Host * + HashKnownHosts yes + ForwardAgent no + ServerAliveInterval 120 +{{ else }} # Ensure KnownHosts are unreadable if leaked HashKnownHosts yes @@ -17,3 +24,4 @@ Match host * exec "gpg-connect-agent UPDATESTARTUPTTY /bye" Match host *.wg,*.pulpo IdentityFile ~/.ssh/nym.pub +{{ end }} |