Host lab-target
  HostName example.invalid
  User workshop
  Port 22
  IdentityFile ./work/keys/user_ed25519
  IdentitiesOnly yes
  UserKnownHostsFile ./work/known_hosts
  StrictHostKeyChecking yes
  ForwardAgent no
  ServerAliveInterval 30
  ServerAliveCountMax 3

Host lab-bastion
  HostName bastion.example.invalid
  User workshop
  IdentityFile ./work/keys/user_ed25519
  IdentitiesOnly yes
  UserKnownHostsFile ./work/known_hosts
  StrictHostKeyChecking yes
  ForwardAgent no

Host lab-target-via-bastion
  HostName target.internal
  User workshop
  ProxyJump lab-bastion
  IdentityFile ./work/keys/user_ed25519
  IdentitiesOnly yes
  UserKnownHostsFile ./work/known_hosts
  StrictHostKeyChecking yes
  ForwardAgent no
  LocalForward 127.0.0.1:18080 127.0.0.1:8080
