208 lines
6.2 KiB
Plaintext
208 lines
6.2 KiB
Plaintext
# =============================================================================
|
|
# SSH Client Configuration
|
|
# Managed by dotfiles_manager.sh | ~/dotfiles/.ssh/config
|
|
# =============================================================================
|
|
|
|
|
|
# =============================================================================
|
|
# GLOBAL DEFAULTS
|
|
# Applied to every connection unless overridden by a specific Host block.
|
|
# =============================================================================
|
|
Host *
|
|
AddKeysToAgent yes
|
|
IgnoreUnknown UseKeychain
|
|
UseKeychain yes
|
|
ForwardAgent yes
|
|
Compression yes
|
|
ServerAliveInterval 60
|
|
ServerAliveCountMax 10
|
|
# Disable strict host checking globally — convenient for ephemeral lab/dev hosts.
|
|
# Override per-host below for anything production or security-sensitive.
|
|
StrictHostKeyChecking no
|
|
UserKnownHostsFile /dev/null
|
|
|
|
|
|
# =============================================================================
|
|
# WORK — JUMP HOSTS / DMZ
|
|
# These are the entry points for all internal Juniper infrastructure.
|
|
# =============================================================================
|
|
|
|
# Primary engineering DMZ — Quincy
|
|
Host engdmz
|
|
HostName qceng-dmz-01
|
|
User kenjim
|
|
DynamicForward 3130
|
|
ServerAliveInterval 250
|
|
Ciphers aes256-ctr,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
|
|
# Postgres DB forwards
|
|
LocalForward 5430 10.47.245.65:5432 # engtech secondary
|
|
LocalForward 5433 10.47.245.41:5432 # engtech primary
|
|
LocalForward 5450 10.47.245.53:5432 # TIM production
|
|
# K8 cluster API forwards
|
|
LocalForward 8443 qnengapp1-vip.juniper.net:443 # Quincy K8
|
|
LocalForward 9443 bnengapp1-vip.juniper.net:443 # Bangalore K8
|
|
|
|
# Lab DMZ — TTQC
|
|
Host labdmz
|
|
HostName ttqc-tim-sh01.juniper.net
|
|
User kenjim
|
|
DynamicForward 3129
|
|
ServerAliveInterval 250
|
|
Ciphers aes256-ctr,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
|
|
LocalForward 6548 etus-pgb-lrm.ttglb.juniper.net:6548 # LRM DB
|
|
|
|
# Encrypted engineering DMZ — Quincy
|
|
Host encdmz
|
|
HostName qcencl-dmz-01
|
|
User kenjim
|
|
DynamicForward 3135
|
|
ServerAliveInterval 250
|
|
|
|
# eVNC DMZ
|
|
Host evncdmz
|
|
HostName qceng-evnc-02.juniper.net
|
|
User kenjim
|
|
|
|
|
|
# =============================================================================
|
|
# WORK — DEV / K8 MACHINES
|
|
# =============================================================================
|
|
|
|
# Primary dev machine — Quincy K8
|
|
Host k
|
|
HostName etqc-kenjim-11.juniper.net
|
|
DynamicForward 3139
|
|
ServerAliveInterval 30
|
|
ServerAliveCountMax 20
|
|
RemoteForward 2222 localhost:22
|
|
LocalForward 8888 qnc-engdata5vs3.juniper.net:80 # S3 proxy
|
|
LocalForward 5447 engtech-lrm-snap1-qnc.engtech-pgdb-qnc.qengk8.juniper.net:5432 # LRM Beta DB
|
|
# ProxyJump engdmz
|
|
|
|
# Previous dev machine
|
|
Host kold
|
|
HostName etqc-kenjim-01.juniper.net
|
|
|
|
# TaaS dev machine
|
|
Host ktaas
|
|
HostName kenjim-taas.qengk8.juniper.net
|
|
|
|
# Temp machine — Bangalore K8
|
|
Host ktb
|
|
HostName kenjim-temp.bengk8.juniper.net
|
|
|
|
# Shared dev server — Quincy K8
|
|
Host k8dev
|
|
HostName engtech-dev-01.juniper.net
|
|
DynamicForward 3132
|
|
LocalForward 8889 qnc-engdata5vs3.juniper.net:80 # S3 proxy
|
|
# ProxyJump engdmz
|
|
|
|
# Shared dev server — Bangalore K8
|
|
Host k8devb
|
|
HostName engtech-bdev-01
|
|
ProxyJump engdmz
|
|
|
|
|
|
# =============================================================================
|
|
# WORK — LAB INFRASTRUCTURE
|
|
# =============================================================================
|
|
|
|
# Paul's machine (via labdmz)
|
|
Host p
|
|
HostName etqc-pms-02.juniper.net
|
|
DynamicForward 3140
|
|
|
|
# TTQC shell server
|
|
Host ttqc-shell
|
|
HostName ttqc-shell012.juniper.net
|
|
|
|
# TTQC shell server (via engdmz)
|
|
Host ttqc-shell005
|
|
HostName ttqc-shell005
|
|
ProxyJump engdmz
|
|
|
|
# TTQC test DB (via labdmz)
|
|
Host ttqc-testdb-01
|
|
ProxyJump labdmz
|
|
|
|
# DLM database host
|
|
Host etqc-dlm-db-01
|
|
HostName etqc-dlm-db-01
|
|
User kenjim
|
|
LocalForward 5433 localhost:5431
|
|
|
|
# TIM agent hosts — wildcard (via engdmz)
|
|
Host etqc-tim-agt-*
|
|
ProxyJump engdmz
|
|
|
|
|
|
# =============================================================================
|
|
# HOME NETWORK (172.27.0.0/24)
|
|
# =============================================================================
|
|
|
|
# Local Gitea server
|
|
Host zet
|
|
HostName 172.27.0.35
|
|
ServerAliveInterval 540
|
|
|
|
# Local home router (pfSense)
|
|
Host pfsense
|
|
HostName 172.27.0.1
|
|
User root
|
|
|
|
# Secondary home router / gateway
|
|
Host router
|
|
HostName 172.27.0.254
|
|
User root
|
|
|
|
# Second Mac (MacBook Mini)
|
|
Host kenjim-mbm
|
|
HostName kenjim-mbm.home.arpa
|
|
|
|
# Home server — internal LAN IP
|
|
Host akira-mt
|
|
HostName 172.27.0.11
|
|
|
|
|
|
# =============================================================================
|
|
# PERSONAL REMOTE MACHINES
|
|
# =============================================================================
|
|
|
|
# Primary home server — external access
|
|
Host akira
|
|
HostName lair.kenjim.com
|
|
Port 11722
|
|
ForwardAgent yes
|
|
ForwardX11 yes
|
|
Compression yes
|
|
ServerAliveInterval 540
|
|
# LocalForward 55900 localhost:5900 # VNC to home display
|
|
# LocalForward 53389 t41xp:3389 # RDP to Windows box
|
|
|
|
# Home server — t430 VM (port-forwarded through router)
|
|
Host lair-t430-vm
|
|
HostName lair.kenjim.com
|
|
Port 11922
|
|
ForwardAgent yes
|
|
Compression yes
|
|
|
|
# Personal VPS / bastion
|
|
Host bar
|
|
HostName bar.kenjim.com
|
|
User root
|
|
DynamicForward 3128
|
|
Compression yes
|
|
ServerAliveInterval 540
|
|
|
|
# MacBook Pro (accessed from kenjim-lnx on LAN)
|
|
Host mbp
|
|
HostName 192.168.0.100
|
|
User kenjim
|
|
ForwardAgent yes
|
|
|
|
# Mint VM on MacBook (VMware Fusion)
|
|
Host kenjim-vm
|
|
HostName 192.168.168.130
|
|
User kenjim
|
|
ForwardAgent yes |