add ssh_config

README.md

@@ -33,12 +33,18 @@ Run `mkdir .direnv && direnv allow .` to enable direnv integration with nix flak
 
 Some hosts are only reachable through a jumphost, e.g. Containers or VMs on a
 proxmox. To access them, this playbook assumes you have configured an SSH alias
-in your ssh_config (`~/.ssh/config`) like so:
+in your ssh_config (`~/.ssh/config`)
 ```
 host *.vm.freifunk-stuttgart.de
         proxyjump nrb@jumphost.freifunk-stuttgart.de
         user root
 ```
+To get access to all machines, add to your .ssh/config the contents of `ssh_config`
+instead of the above mentioned lines, e.g. by including it, adjust the path:
+```
+Host *
+Include ~/git/freifunk/infrastruktur-ansible/ssh-config
+```
 
 ### Vault
 

ssh_config

+Host ffs10 ffs10.freifunk-stuttgart.de
+	Hostname 10.0.3.110
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host cloud01.freifunk-stuttgart.de cloud.freifunk-stuttgart.de
+	Hostname 10.0.3.164
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host core01-z10a.vm.freifunk-stuttgart.de
+	Hostname 10.0.8.177
+	ProxyJump ffs08.freifunk-stuttgart.de
+Host core02-z10a.vm.freifunk-stuttgart.de
+	Hostname 10.0.13.179
+	ProxyJump ffs13.freifunk-stuttgart.de
+Host db-postgres01.freifunk-stuttgart.de
+	Hostname 10.0.3.224
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host dhcp03.gw.freifunk-stuttgart.de
+	ControlMaster no
+	ControlPath none
+	ProxyJump gw05n02.gw.freifunk-stuttgart.de
+	Port 44353
+Host dhcp04.freifunk-stuttgart.de
+	Hostname 10.0.3.254
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host dns01.freifunk-stuttgart.de
+	AddressFamily inet6
+	ProxyJump tunnel.lihas.de
+Host dns02.as208772.net
+	AddressFamily inet6
+	ProxyJump tunnel.lihas.de
+Host dns03.freifunk-stuttgart.eu
+	AddressFamily inet6
+	ProxyJump tunnel.lihas.de
+Host esslingen-web01.freifunk-stuttgart.de
+	Hostname 10.0.3.239
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host firmware.freifunk-stuttgart.de
+	Hostname 10.0.3.195
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host ffs03-reverse-proxy.ffs03.freifunk-stuttgart.de
+	Hostname 10.0.3.91
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host ffs05
+	HostName ffs05.freifunk-stuttgart.de
+Host ffs08
+	HostName ffs08.freifunk-stuttgart.de
+Host ffs09
+	HostName ffs09.freifunk-stuttgart.de
+Host ffs10
+	HostName ffs10.freifunk-stuttgart.de
+Host ffs11
+	HostName ffs11.freifunk-stuttgart.de
+Host ffs-lihas01
+	HostName fd21:b4dc:4b08:0:f6ec:38ff:fef1:63a
+Host ffs-lihas02
+	HostName fd21:b4dc:4b08:0:a2f3:c1ff:fe8c:2112
+Host ffs-lihas03
+	HostName fd21:b4dc:4b08:0:e695:6eff:fe40:d145
+Host ffs-lihas05
+	HostName fd21:b4dc:4b08:0:e695:6eff:fe4d:2a6f
+Host ffs-salt-master.ffs03.freifunk-stuttgart.de
+	Hostname 10.0.3.3
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host gitlab01.freifunk-stuttgart.de ssh.gitlab.freifunk-stuttgart.de
+	Hostname 10.0.3.220
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host gitlab-runner02.ffs03.freifunk-stuttgart.de
+	Hostname 10.0.3.225
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host grafana.freifunk-stuttgart.de
+	Hostname 10.0.3.237
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host gw04n05.gw.freifunk-stuttgart.de gw04n05.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.45
+	ProxyJump ffs11.freifunk-stuttgart.de
+Host gw04n06.gw.freifunk-stuttgart.de gw04n06.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.46
+	ProxyJump ffs05.freifunk-stuttgart.de
+Host letsencrypt.freifunk-stuttgart.de letsencrypt.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.239
+	ProxyJump ffs11.freifunk-stuttgart.de
+Host mailbox.freifunk-stuttgart.de mailbox.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.233
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host mailexpand.freifunk-stuttgart.de mailexpand.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.202
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host mailgw01.freifunk-stuttgart.de mailgw01.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.230
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host mailgw02.freifunk-stuttgart.de mailgw02.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.231
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host maillist.freifunk-stuttgart.de maillist.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.232
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host mariadb01.freifunk-stuttgart.de
+	Hostname 10.0.3.238
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host meshviewer01.freifunk-stuttgart.de meshviewer01.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.169
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host pad.freifunk-stuttgart.de
+	Hostname 10.0.3.182
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host passbolt.freifunk-stuttgart.de
+	Hostname 10.0.3.235
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host pbs01.freifunk-stuttgart.de
+	Hostname 10.0.3.194
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host prometheus02.freifunk-stuttgart.de
+	Hostname 10.0.3.173
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host revproxy-03.ffs03.freifunk-stuttgart.de revproxy-03.freifunk-stuttgart.de
+	Hostname 10.0.3.213
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host revproxy-05.ffs03.freifunk-stuttgart.de revproxy-05.freifunk-stuttgart.de
+	Hostname 10.0.3.213
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host sso01.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.203
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host test01.freifunk-stuttgart.de
+	Hostname 10.0.3.191
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host ticket.freifunk-stuttgart.de
+	Hostname 10.0.3.234
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host unifi.freifunk-stuttgart.de unifi.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.222
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host unms.freifunk-stuttgart.de
+	Hostname 10.0.3.223
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host voip-incoming-01.freifunk-stuttgart.de
+	Hostname 10.0.3.181
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host wiki.freifunk-stuttgart.de
+	Hostname 10.0.3.221
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host wiki-testing.freifunk-stuttgart.de
+	Hostname 10.0.3.194
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host www-beuren.ffs03.freifunk-stuttgart.de
+	Hostname 10.0.3.163
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host www-prod.ffs03.freifunk-stuttgart.de
+	Hostname 10.0.3.228
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host www-staging.freifunk-stuttgart.de
+	Hostname 10.0.3.226
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host yanic01.freifunk-stuttgart.de yanic01.vm.freifunk-stuttgart.de
+	Hostname 10.0.3.236
+	ProxyJump jumphost.freifunk-stuttgart.de
+Host *.ffs03.freifunk-stuttgart.de
+  ControlMaster no
+  ControlPath none
+  ProxyCommand ssh -a root@ffs03.freifunk-stuttgart.de 'HNAME=%h; nc ${HNAME%%%%.ffs03.freifunk-stuttgart.de} %p'
+Host *.ffs05
+	ControlMaster no
+	ControlPath none
+	User root
+	ProxyCommand ssh -a root@ffs05.freifunk-stuttgart.de -W 10.0.3.$(( $(echo %n | sed -e 's/.ffs05//') - 3000 )):22
+Host *.ffs03
+    User root
+    ProxyCommand ssh ffs03 -W 10.0.3.$(( $(echo %n | sed -e 's/.ffs03//') - 3000 )):22
+Host *.ffs11
+    User root
+    ProxyCommand ssh ffs03 -W 10.0.3.$(( $(echo %n | sed -e 's/.ffs11//') - 3000 )):22
+Host *.ffs05.freifunk-stuttgart.de
+  ControlMaster no
+  ControlPath none
+  ProxyCommand ssh -a root@ffs05.freifunk-stuttgart.de 'HNAME=%h; nc ${HNAME%%%%.ffs05.freifunk-stuttgart.de} %p'
+Host *.ffs11
+  ControlMaster no
+  ControlPath none
+  ProxyCommand ssh -a root@ffs11.freifunk-stuttgart.de -W 10.0.3.$(( $(echo %n | sed -e 's/.ffs11//') - 3000 )):22
+Host *.ffs11.freifunk-stuttgart.de
+  ControlMaster no
+  ControlPath none
+  ProxyCommand ssh -a root@ffs11.freifunk-stuttgart.de 'HNAME=%h; nc ${HNAME%%%%.ffs11.freifunk-stuttgart.de} %p'
+Host *.ffs04.freifunk-stuttgart.de
+  ControlMaster no
+  ControlPath none
+  ProxyCommand ssh -a root@ffs04.freifunk-stuttgart.de 'HNAME=%h; nc ${HNAME%%%%.ffs04.freifunk-stuttgart.de} %p'
+Host *.ffs
+  ControlMaster no
+  ControlPath none
+  ProxyCommand ssh -a root@gw05n02.gw.freifunk-stuttgart.de 'HNAME=%h; nc ${HNAME%%%%.ffs} %p'
+host *.vm.freifunk-stuttgart.de
+        ProxyJump jumphost.freifunk-stuttgart.de