if we can, verify host keys using DNS

[home-base.git] / .ssh / config

diff --git a/.ssh/config b/.ssh/config
index 2544a01c61cfd738f7066c3abd13bd04e4e9d05c..3472318d167ad80b34305433d67732f7f7056f3b 100644 (file)
--- a/.ssh/config
+++ b/.ssh/config
@@ -1,104 +1,19 @@
-ControlMaster auto
-ControlPath ~/tmp/%h_%p_%r
-Host frogsleap.com
-  User frogsleap
-  IdentityFile ~/.ssh/identity_frogsleap
+Include ~/.ssh/host_specific_config
+# Debian general configuration
 Host *.debian.org
   IdentityFile ~/.ssh/identity_debian
   UserKnownHostsFile ~/.ssh/known_hosts_debian
-Host *.sndservers.com
-  IdentityFile ~/.ssh/identity_sndservers
-  UserKnownHostsFile ~/.ssh/known_hosts_sndservers
-# machines in the don bit
-Host ernst.ucr.edu
-  User zido
-  IdentityFile ~/.ssh/identity_don
-Host acif500.ucr.edu
-  User zido
-  IdentityFile ~/.ssh/identity_don
-Host volo
-  User don
-  HostKeyAlias volo
-  CheckHostIP no
-  IdentityFile ~/.ssh/identity_don
-Host zeto
-  User don
-  HostKeyAlias zeto
-  CheckHostIP no
-  IdentityFile ~/.ssh/identity_don
-# donarmstrong machines so I don't have to type them in
-Host archimedes.ucr.edu
-  User don
-  UserKnownHostsFile ~/.ssh/known_hosts_don
-  IdentityFile ~/.ssh/identity_don
-Host rzlab3.ucr.edu
-  User don
-  UserKnownHostsFile ~/.ssh/known_hosts_don
-  IdentityFile ~/.ssh/identity_don
-Host rzlab.ucr.edu
-  User don
-  UserKnownHostsFile ~/.ssh/known_hosts_don
-  IdentityFile ~/.ssh/identity_don
-Host spth1304.ucr.edu
-  User don
-  UserKnownHostsFile ~/.ssh/known_hosts_don
-  IdentityFile ~/.ssh/identity_don
+  VerifyHostKeyDNS yes
+# donarmstrong.com general configuration
 Host *.donarmstrong.com
   User don
   UserKnownHostsFile ~/.ssh/known_hosts_don
   IdentityFile ~/.ssh/identity_don
-Host crito.ucr.edu
-  User don
-  UserKnownHostsFile ~/.ssh/known_hosts_don
-  IdentityFile ~/.ssh/identity_don
-# Propel consulting machinges
-Host 172.16.0.59
-  IdentityFile ~/.ssh/identity_propel
-Host xen.propel.com
-  IdentityFile ~/.ssh/identity_propel
-Host scs.propel.com
-  User darmstrong
-  IdentityFile ~/.ssh/identity_propel
-Host pacific.propel.com
-  User darmstrong
-  IdentityFile ~/.ssh/identity_propel
-Host builder.lab.propel.com
-  User don
-  IdentityFile ~/.ssh/identity_propel
-Host debianarchive.lab.propel.com
-  User don
-  IdentityFile ~/.ssh/identity_propel
-Host *.lab.propel.com
-  User darmstrong
-  IdentityFile ~/.ssh/identity_propel
-Host *.abaca.com
-  User darmstrong
-  IdentityFile ~/.ssh/identity_propel
-Host blogamundo.com
-  User don
-  IdentityFile ~/.ssh/identity_blogamundo
-Host culinarytrends.net
-  User don
-  IdentityFile ~/.ssh/identity_culinarytrends
-Host alanarmstrong.com
-  User don
-  IdentityFile ~/.ssh/identity_alanarmstrong
-Host *.kneedraggers.com
-  User don
-  IdentityFile ~/.ssh/identity_kneedraggers
-Host tijuana.com
-  User don
-  IdentityFile ~/.ssh/identity_castello
-Host daycare.com
-  User don
-  IdentityFile ~/.ssh/identity_castello
-Host *.ccin.com
-  User don
-  IdentityFile ~/.ssh/identity_castello
-  UserKnownHostsFile ~/.ssh/known_hosts_castello
-Host *.excelwholesale.com
-  User don
-  IdentityFile ~/.ssh/identity_excelwholesale
-Host debbugs.gnu.org
-  User don
-  IdentityFile ~/.ssh/identity_debbugs_gnu
+  ServerAliveInterval 300
+
+# This has to go at the bottom, because it doesn't get overridden
+# otherwise.
+Host *
+  ControlMaster auto
+  ControlPath ~/tmp/%h_%p_%r
+