config

# European XFEL specific

# CAUTION: Order of directives is /not/ irrelevant!

# Enable hostname canonicalization
CanonicalizeHostname yes

# Use canonicalization if hostname contains no dot
CanonicalizeMaxDots 0

# Disable system DNS if canonicalization fails
CanonicalizeFallbackLocal no

# Domains for canonicalization
CanonicalDomains desy.de

# use your user name instead of <USER>

Host desy-bastion
    HostName bastion.desy.de
    User <USER>

Host max-display
    HostName max-display.desy.de

Host max-exfl-display
    HostName max-exfl-display.desy.de

Host gateway
    HostName exflgateway

Host portal
    HostName exflst107
    User root

Host all-ports-for-portal
    Hostname exflst107
    # portal: 300
    LocalForward 3000 localhost:3000
    LocalForward 3001 localhost:3001
    LocalForward 3002 localhost:3002
    LocalForward 5001 localhost:5001
    # Kubernetes dashboard,
    # it is provided via `minikube dashboard&; kubectl proxy` then
    # http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/http:kubernetes-dashboard:/proxy/
    LocalForward 8001 localhost:8001
    # Keycloak: 8080, 8090
    LocalForward 8080 localhost:8080
    LocalForward 8090 localhost:8090
    # HAL Management Console:
    LocalForward 9990 localhost:9990

Host max-exfl*.desy.de !max-exfl-display.desy.de
    ProxyJump desy-bastion

Host git.xfel.eu
    User git
    Port 10022
    ForwardX11 no

Host *.desy.de *.xfel.eu
    User <USER>
    GSSAPIAuthentication yes
    GSSAPIDelegateCredentials yes
    PasswordAuthentication no
    ForwardX11 yes

# Office network jump, either bastion, max-display or max-exfl-display
Host max-*.desy.de *.xfel.eu exfl*.desy.de !max-exfl-display.desy.de
    user <USER>
    ProxyJump desy-bastion

# one need to have a kerberos ticket to use this config
# use: kinit -A -f <USER>@DESY.DE