1 files changed, 28 insertions, 0 deletions
diff --git a/ssh/config-wmf b/ssh/config-wmf
new file mode 100644
index 0000000..3240f57
--- /dev/null
+++ b/ssh/config-wmf
@@ -0,0 +1,28 @@
+# SSH client configuration for WMF use.
+
+# Turn this on for Match to work.
+CanonicalizeHostname yes
+
+# Defaults for all WMF hosts.
+Match host=*.wikimedia.org,*.wmnet
+    ForwardAgent no
+    IdentitiesOnly yes
+    KbdInteractiveAuthentication no
+    PasswordAuthentication no
+    User liw
+    UserKnownHostsFile ~/.ssh/known_hosts.d/wmf-prod
+
+# Configure the initial connection to the bastion host, with the one
+# HostName closest to you
+Host bast
+    HostName bast3004.wikimedia.org
+    IdentityFile ~/.ssh/prod.key
+
+# Proxy all connections to internal servers through the bastion host
+Host *.wmnet
+    ProxyJump bast
+    IdentityFile ~/.ssh/prod.key
+
+Host gerrit.wikimedia.org
+    Port 29418
+    IdentityFile ~/.ssh/lab.key