Files
skel/dotfiles/ssh/config
David Tomaschik f50edc1fa6 Work
2026-02-19 13:20:21 -08:00

43 lines
1.4 KiB
Plaintext

# Universal Settings
Protocol 2
Host *
# Add the post-quantum (PQ) KEX algorithms to the front of the default list.
# The client will try them in this order before falling back to standard ones.
# The (+) syntax requires OpenSSH 7.8 or newer.
KexAlgorithms +mlkem768x25519-sha256,sntrup761x25519-sha512@openssh.com
# Permit Local Overrides
Include ~/.ssh/config.d/*
# SSH known host hashing doesn't buy much with shell history, etc.
HashKnownHosts no
# Enable canonicalization, unless overridden
CanonicalizeHostname yes
CanonicalizeFallbackLocal yes
CanonicalDomains systemoverlord.com
CanonicalizeMaxDots 0
Host *.cloudshell.dev
# Cloudshell hostnames are too long for unix sockets
ControlMaster no
Match exec "test -d \"$XDG_RUNTIME_DIR\" && mkdir -p $XDG_RUNTIME_DIR/sshsock" final
ControlPath ${XDG_RUNTIME_DIR}/sshsock/%C
# Anything set earlier will take precedence, so these are defaults
Match final
CheckHostIP no
ControlMaster auto
ControlPath ~/.ssh/master/%r@%h:%p
ControlPersist yes
ForwardAgent no
ForwardX11 no
ForwardX11Trusted no
ServerAliveInterval 30
ServerAliveCountMax 3
UpdateHostKeys yes
User david
VerifyHostKeyDNS ask