Add nice SSH config for esrf machines

Also remove unused netrc config
This commit is contained in:
Thomas Dehaeze 2022-02-06 21:41:26 +01:00
parent f645553b0d
commit 09976d2967

View File

@ -2,38 +2,41 @@
#+SETUPFILE: ./setup/org-setup-file.org #+SETUPFILE: ./setup/org-setup-file.org
* SSH * SSH
:PROPERTIES: #+begin_src conf :noweb yes :tangle ~/.ssh/config :comments none :mkdirp yes
:header-args: :tangle ~/.ssh/config
:header-args+: :comments none :mkdirp yes
:END:
#+begin_src conf :noweb yes
AddKeysToAgent yes AddKeysToAgent yes
Host *
ControlMaster auto
ControlPath ~/.ssh/master-%r@%h:%p.socket
Host homelab Host homelab
hostname <<get-password(passname="ip/homelab")>> hostname <<get-password(passname="ip/homelab")>>
Port 22 Port 22
user thomas user thomas
IdentityFile ~/.ssh/id_rsa IdentityFile ~/.ssh/id_rsa
Host router Host *.esrf.fr
hostname 192.168.1.1 User dehaeze
Port 22
user root
IdentityFile ~/.ssh/id_rsa IdentityFile ~/.ssh/id_rsa
Host smarttv Host firewall.esrf.fr
hostname 192.168.1.73 Port 5022
Port 22 Compression yes
user thomas
IdentityFile ~/.ssh/id_rsa
Host oneplus Match host *.esrf.fr !host firewall.esrf.fr !exec "~/.ssh/esrf-test"
hostname 192.168.1.101 ProxyJump firewall.esrf.fr
Port 8022
Host rnice
Port 22
user dehaeze
IdentityFile ~/.ssh/id_rsa IdentityFile ~/.ssh/id_rsa
#+end_src #+end_src
#+begin_src bash :tangle ~/.ssh/esrf-test :comments none :mkdirp yes :shebang "#!/usr/bin/env bash" :tangle-mode (identity #o555)
test -n "$(timeout 1s dig +short proxy.esrf.fr.)"
#+end_src
* Font * Font
:PROPERTIES: :PROPERTIES:
:header-args: :tangle ~/.config/fontconfig/fonts.conf :header-args: :tangle ~/.config/fontconfig/fonts.conf
@ -721,51 +724,7 @@ include "/usr/share/X11/locale/en_US.UTF-8/Compose"
It is very important that =~/.netrc= as =600= permissions. It is very important that =~/.netrc= as =600= permissions.
#+begin_src conf :comments none :mkdirp yes :noweb yes :tangle ~/.netrc :tangle-mode (identity #o600) #+begin_src conf :comments none :mkdirp yes :noweb yes :tangle ~/.netrc :tangle-mode (identity #o600)
machine traefik.tdehaeze.xyz
login tdehaeze
password <<get-password(passname="traefik.tdehaeze.xyz/tdehaeze")>>
machine portainer.tdehaeze.xyz
login tdehaeze
password <<get-password(passname="portainer.tdehaeze.xyz/tdehaeze")>>
machine cloud.tdehaeze.xyz
login tdehaeze
password <<get-password(passname="cloud.tdehaeze.xyz/tdehaeze")>>
machine syncthing.tdehaeze.xyz
login tdehaeze
password <<get-password(passname="syncthing.tdehaeze.xyz/tdehaeze")>>
machine torrent.tdehaeze.xyz machine torrent.tdehaeze.xyz
login tdehaeze login tdehaeze
password <<get-password(passname="nas/transmission")>> password <<get-password(passname="nas/transmission")>>
machine dl.tdehaeze.xyz
login tdehaeze
password <<get-password(passname="dl.tdehaeze.xyz/tdehaeze")>>
machine deemix.tdehaeze.xyz
login tdehaeze
password <<get-password(passname="deemix.tdehaeze.xyz/tdehaeze")>>
machine octoprint.tdehaeze.xyz
login tdehaeze
password <<get-password(passname="octoprint.tdehaeze.xyz/tdehaeze")>>
machine adguardhome.tdehaeze.xyz
login tdehaeze
password <<get-password(passname="adguardhome.tdehaeze.xyz/tdehaeze")>>
machine qobuz.tdehaeze.xyz
login tdehaeze
password <<get-password(passname="qobuz.tdehaeze.xyz/tdehaeze")>>
machine down.tdehaeze.xyz
login tdehaeze
password <<get-password(passname="down.tdehaeze.xyz/tdehaeze")>>
machine joal.tdehaeze.xyz
login tdehaeze
password <<get-password(passname="joal.tdehaeze.xyz/tdehaeze")>>
#+end_src #+end_src