dotfiles/private_dot_ssh/private_config

Host *
  ControlMaster auto
  ControlPersist 300
  ControlPath ~/.ssh/socket-%r@%h:%p
  IdentitiesOnly yes
  HashKnownHosts yes
  PasswordAuthentication no
  ChallengeResponseAuthentication no
  StrictHostKeyChecking ask
  VerifyHostKeyDNS yes
  ForwardAgent no
  ForwardX11 no
  ForwardX11Trusted no
  ServerAliveInterval 60
  ServerAliveCountMax 3
  Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
  KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha256
  MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128-etm@openssh.com
  HostKeyAlgorithms ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com

## Server
Host finn
  User ansible
  HostName finn.strobeto.de
  #IdentityFile ~/.ssh/id_rsa_yubikey.pub
  # FIDO2
  IdentityFile ~/.ssh/id_ed25519_sk_yk5nano
Host finn-unlock
  User root
  HostName finn.strobeto.de
  #IdentityFile ~/.ssh/id_rsa_yubikey.pub
  # FIDO2
  IdentityFile ~/.ssh/id_ed25519_sk_yk5nano
  UserKnownHostsFile ~/.ssh/known_hosts.initramfs
Host oscar oscar.strobeto.de
  HostName oscar.strobeto.de
  User root
  IdentityFile ~/.ssh/id_rsa_yubikey.pub
Host oscar-unlock
  HostName oscar.strobeto.de
  User root
  IdentityFile ~/.ssh/id_rsa_yubikey.pub
  UserKnownHostsFile ~/.ssh/known_hosts.initramfs
  Ciphers aes256-ctr
  MACs hmac-sha2-256
Host code.strobeto.de
  HostName code.strobeto.de
  User git
  #IdentityFile ~/.ssh/id_rsa_yubikey.pub
  # FIDO2
  IdentityFile ~/.ssh/id_ed25519_sk_yk5nano

## HomeNet
Host helios
  #HostName 192.168.178.20
  HostName space.home.strobel.one
  User anorak
  #IdentityFile ~/.ssh/id_rsa_yubikey.pub
  # FIDO2
  IdentityFile ~/.ssh/id_ed25519_sk_yk5nano
Host helios-unlock
  #HostName 192.168.178.20
  HostName space.home.strobel.one
  User root
  IdentityFile ~/.ssh/id_rsa_yubikey.pub
  UserKnownHostsFile ~/.ssh/known_hosts.initramfs
  Ciphers aes256-ctr
  MACs hmac-sha2-256
  #HostKeyAlgorithms ssh-rsa

## OpenWRT Router
#Host owrt
#  HostName 192.168.1.1
#  Port 22
#  User root
#  IdentityFile ~/.ssh/id_rsa_yubikey.pub
#  Ciphers aes256-ctr
#  MACs hmac-sha2-256
#  HostKeyAlgorithms ssh-rsa
#  UserKnownHostsFile /dev/null

## Offsite Backup
Host xj2jx027@xj2jx027.repo.borgbase.com
  IdentityFile ~/.ssh/id_ed25519
Host bbaech
  HostName ks5y910n.repo.borgbase.com
  User ks5y910n
  IdentityFile ~/.ssh/id_rsa_yubikey.pub
Host bbarchaide
  HostName xj2jx027.repo.borgbase.com
  User xj2jx027
  IdentityFile ~/.ssh/id_rsa_yubikey.pub

## Git services
Host github.com
  User git
  ControlMaster no
  IdentityFile ~/.ssh/id_rsa_yubikey.pub
  #MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com

## Friends
Host max
  HostName multimax.haedicke.one
  User root
  IdentityFile ~/.ssh/id_rsa_yubikey.pub
Host maxh
  HostName 192.168.178.47
  #HostName helios64
  User root
  IdentityFile ~/max-publickey
  UserKnownHostsFile /dev/null
Host maxh-unlock
  HostName 192.168.178.47
  User root
  IdentityFile ~/max-publickey
  UserKnownHostsFile /dev/null
  Ciphers aes256-ctr
  MACs hmac-sha2-256
  HostKeyAlgorithms ssh-rsa
Host torsten
  HostName zero.roost.one
  User root
  IdentityFile ~/.ssh/id_rsa_yubikey.pub
Host raphael
  HostName saphie.de
  User root
  Port 9001
  #IdentityFile ~/.ssh/id_rsa_yubikey.pub
  PasswordAuthentication yes