infrastructure/host_vars/bastion.archlinux.org/misc.yml at buildbtw-remove-chain-bind-mount - infrastructure - git.dotya.ml

mirror/infrastructure

mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2026-09-08 10:24:15 +02:00

Files

T

Kristian KlausenandLeonidas Spyropoulos afb541f8cb Enable local SSH TCP forwarding on bastion.archlinux.org

It is a bastion host for reaching "services", so we must somehow be able
to pass traffic through it.

With local SSH TCP forwarding enabled, that is now possible, simply by
running ssh with the "-D <port>" argument, which makes ssh act as a
SOCKS server.

2026-01-25 18:11:14 +00:00

7 lines

190 B

YAML

Raw Permalink Blame History

 sshd_tcp_forwarding: local
 additional_addresses: ["5.75.217.8/32"]
 system_disks:
   - /dev/sda
 wireguard_address: 10.0.0.59
 wireguard_public_key: WJBMDv6mnn1NKxC2FCXMle46OtzxTD9eT6Gc4gCPVRA=