From aff435a0fb3a56b1d7b738c7dede363440884b3a Mon Sep 17 00:00:00 2001
From: sommerfeld <sommerfeld@sommerfeld.dev>
Date: Thu, 17 Sep 2026 15:05:36 +0100
Subject: Add the Canonical laptop profile and setup workflows

---
 private_dot_ssh/config.tmpl | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 private_dot_ssh/config.tmpl

(limited to 'private_dot_ssh/config.tmpl')

diff --git a/private_dot_ssh/config.tmpl b/private_dot_ssh/config.tmpl
new file mode 100644
index 0000000..b6dce43
--- /dev/null
+++ b/private_dot_ssh/config.tmpl
@@ -0,0 +1,27 @@
+{{ if eq (default "host" (index . "machineRole")) "canonical" }}
+Include config.local
+Host *
+  HashKnownHosts yes
+  ForwardAgent no
+  ServerAliveInterval 120
+{{ else }}
+# Ensure KnownHosts are unreadable if leaked
+HashKnownHosts yes
+
+Compression no
+ControlMaster auto
+ControlPersist 10
+AddressFamily inet
+ServerAliveInterval 120
+IdentitiesOnly yes
+
+Host git.sommerfeld.dev
+  Hostname mandibles.wg
+
+Include work.config
+
+Match host * exec "gpg-connect-agent UPDATESTARTUPTTY /bye"
+
+Match host *.wg,*.pulpo
+  IdentityFile ~/.ssh/nym.pub
+{{ end }}
-- 
cgit v1.3.1