# SSH client configuration for WMF use.

# Turn this on for Match to work.
CanonicalizeHostname yes

# Defaults for all WMF hosts.
Match host=*.wikimedia.org,*.wmnet
    ForwardAgent no
    IdentitiesOnly yes
    KbdInteractiveAuthentication no
    PasswordAuthentication no
    User liw
    UserKnownHostsFile ~/.ssh/known_hosts.d/wmf-prod

# Configure the initial connection to the bastion host, with the one
# HostName closest to you
Host bast
    HostName bast3004.wikimedia.org
    IdentityFile ~/.ssh/prod.key

# Proxy all connections to internal servers through the bastion host
Host *.wmnet contint*.wikimedia.org
    ProxyJump bast
    IdentityFile ~/.ssh/prod.key

Host gerrit.wikimedia.org
    Port 29418
    IdentityFile ~/.ssh/lab.key