# Included from ~/.ssh/config (setup.sh adds the Include line). Two keys, both made by setup.sh:
#   ~/.ssh/id_ed25519_homelab  interactive — authorized on the hosts below by scripts/authorize-mac-key.sh
#   ~/.ssh/id_ed25519          backup only — rrsync-jailed on pve173; backup.sh pins it with -i
# They must stay separate: sshd honours the FIRST matching authorized_keys line per key, so one key
# can't be both jailed (nightly rsync) and unrestricted (a shell) on pve173.

# --- Proxmox nodes ---
Host pve173
    HostName 192.168.0.173
    User root
Host pve112
    HostName 192.168.0.112
    User root
Host pve197
    HostName 192.168.0.197
    User root
Host pve241
    HostName 192.168.0.241
    User root

# --- Machines ---
Host steel141
    HostName 192.168.0.141
    User seth
Host bedroom
    HostName 192.168.0.235
    User root
Host vdj-rig
    HostName 192.168.0.143
    User seth
Host thinkcentre
    HostName 192.168.0.211
    User seth
Host seth-pi
    HostName 192.168.0.102
    User seth
Host pinail
    HostName 192.168.0.203
    User pi
# TP-Link switch: password only (no pubkey support) — $HOMELAB_PASSWORD
Host switch
    HostName 192.168.0.250
    User admin
    PubkeyAuthentication no

# --- Key CTs ---
Host caddy
    HostName 192.168.0.185
    User root
Host openclaw2
    HostName 192.168.0.175
    User root
Host rtorrent
    HostName 192.168.0.213
    User root
Host emby
    HostName 192.168.0.215
    User root
Host mcsmanager
    HostName 192.168.0.244
    User root
Host pihole
    HostName 192.168.0.153
    User root
Host arr
    HostName 192.168.0.158
    User root

# --- Tailscale-only (dead until Tailscale is logged in on the Mac — docs/manual-checklist.md) ---
Host yoga
    HostName 100.113.203.99
    User seth
Host bebop
    HostName 100.78.2.106
    User seth

Host *
    IdentityFile ~/.ssh/id_ed25519_homelab
    StrictHostKeyChecking accept-new
    ServerAliveInterval 30