# unrolling dmzhost-via-clienthost-as-jbloggs-with-jbloggs

# host dmzhost*
#   hostname dmzhost # (set)
# host *-via-clienthost*
#   proxycommand ssh clienthost-via-jumphost-as-joeb /opt/netcat-0.7.1/bin/netcat -v %h %p # (set)
# host *-via-*
#   controlmaster yes # (set)
#   controlpath run/master-%h:%p # (set)
#   controlpersist no # (set)
# host *-as-jbloggs*
#   user jbloggs # (set)
# host *-with-jbloggs
#   identityfile ~/.ssh/id_jbloggs # (set)
# host *
#   forwardagent no # (set)
#   hashknownhosts yes # (set)
#   identitiesonly yes # (set)
#   serveraliveinterval 90 # (set)
#   tcpkeepalive yes # (set)

host dmzhost-via-clienthost-as-jbloggs-with-jbloggs
  controlmaster yes
  controlpath run/master-%h:%p
  controlpersist no
  forwardagent no
  hashknownhosts yes
  hostname dmzhost
  identitiesonly yes
  identityfile ~/.ssh/id_jbloggs
  proxycommand ssh clienthost-via-jumphost-as-joeb /opt/netcat-0.7.1/bin/netcat -v %h %p
  serveraliveinterval 90
  tcpkeepalive yes
  user jbloggs

# unrolling clienthost-via-jumphost-as-joeb

# host clienthost*
#   forwardagent yes # (set)
#   hostname clienthost # (set)
# host *-via-jumphost*
#   proxycommand ssh jumphost-as-jbloggs /usr/local/bin/nc -v %h %p # (set)
# host *-via-*
#   controlmaster yes # (set)
#   controlpath run/master-%h:%p # (set)
#   controlpersist no # (set)
# host *-as-joeb*
#   user joeb # (set)
# host *
#   forwardagent no # (ignored)
#   hashknownhosts yes # (set)
#   identitiesonly yes # (set)
#   serveraliveinterval 90 # (set)
#   tcpkeepalive yes # (set)

host clienthost-via-jumphost-as-joeb
  controlmaster yes
  controlpath run/master-%h:%p
  controlpersist no
  forwardagent yes
  hashknownhosts yes
  hostname clienthost
  identitiesonly yes
  proxycommand ssh jumphost-as-jbloggs /usr/local/bin/nc -v %h %p
  serveraliveinterval 90
  tcpkeepalive yes
  user joeb

# unrolling jumphost-as-jbloggs

# host jumphost*
#   hostname jumphost.domain # (set)
# host *-as-jbloggs*
#   user jbloggs # (set)
# host *
#   forwardagent no # (set)
#   hashknownhosts yes # (set)
#   identitiesonly yes # (set)
#   serveraliveinterval 90 # (set)
#   tcpkeepalive yes # (set)

host jumphost-as-jbloggs
  forwardagent no
  hashknownhosts yes
  hostname jumphost.domain
  identitiesonly yes
  serveraliveinterval 90
  tcpkeepalive yes
  user jbloggs