# SSH config for the Tails infra
# ==============================
#
# Include this file somewhere in your SSH config.
#
# You may also need to set some or all of the following later on:
#
#   Host skink-oob.tails.net
#     # Set this to your OOB user for Skink
#     User tails.zen
#
#   Host *.tails.net *.chameleon *.dragon *.iguana *.lizard *.skink
#     # Use gpg-agent to authenticate using a hardware token (eg. Yubikey)
#     IdentityAgent /var/run/user/1000/gnupg/S.gpg-agent.ssh
#     IdentityFile ~/.ssh/tails/id_ed25519.pub

# Git

Host git.tails.net
  User gitolite3
  Port 3004

Host gitlab-ssh.tails.boum.org
  User git

# OOB

Host dragon-oob.tails.net iguana-oob.tails.net lizard-oob.tails.net
  HostName magpie.riseup.net
  IdentityFile ~/.ssh/tails/id_rsa

Host ecours-oob.tails.net
  HostName anna.tachanka.org
  User ecours
  IdentityFile ~/.ssh/tails/id_rsa

Host gecko-oob.tails.net
  HostName ursula.tachanka.org
  User head
  IdentityFile ~/.ssh/tails/id_rsa

Host skink-oob.tails.net
  HostName telem.paulla.asso.fr
  IdentityFile ~/.ssh/tails/id_rsa
  # Note: Each Sysadmin has a separate user in this OOB system, make sure to
  # set it later on on your SSH config.

Host chameleon-oob.tails.net stone-oob.tals.net
  HostName service.coloclue.net
  User groente
  HostKeyAlgorithms rsa-sha2-512,rsa-sha2-256

# General

Host *.tails.net
  IdentitiesOnly yes

# VMs

Host *.chameleon *.dragon *.iguana *.lizard *.skink
  ProxyJump lizard.tails.net
  IdentitiesOnly yes