From 85d0874aba5c5bebd2d8a35e2bdf3d157f97750f Mon Sep 17 00:00:00 2001
From: rain <rain@melonbread.xyz>
Date: Thu, 27 Aug 2026 22:23:01 -0400
Subject: [PATCH] ssh: manage fleet ssh config via chezmoi
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Pins git.melonbread.xyz (Forgejo) to port 222 with the machine key
only — the forge SSH daemon does not listen on 22. All boxes pushing
to the forge need this stanza; known_hosts/authorized_keys stay
per-machine and unmanaged.
---
 private_dot_ssh/private_config | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 private_dot_ssh/private_config

diff --git a/private_dot_ssh/private_config b/private_dot_ssh/private_config
new file mode 100644
index 0000000..2117ed1
--- /dev/null
+++ b/private_dot_ssh/private_config
@@ -0,0 +1,19 @@
+# Fleet config — managed 2026-08-26
+# Jump host
+Host byte.local
+  User melon
+
+# LAN hosts (direct; user rain)
+Host kaiser.local miche.local dayold.local rye.local crouton.local tadbit.local bit.local rorclar.local ggbuttz.local bazzite.local riska.local bopad.local
+  User rain
+
+# External (via byte.local)
+Host melonbread.xyz mail.melonbread.xyz
+  User rain
+  ProxyJump byte.local
+# Git forge (Gitea) — SSH daemon listens on non-standard port 222
+Host git.melonbread.xyz
+  User git
+  Port 222
+  IdentityFile ~/.ssh/id_ed25519
+  IdentitiesOnly yes