42c4277 split the ssh config into common plus a host layer and restored
system76's aliases verbatim, but stubbed nas and mainframe out as having no
machine-specific aliases. Those are the two machines that run restic, and
RESTIC_REPOSITORY is sftp:storagebox:/home/restic -- so the NAS backup failed
every night from 2026-09-15 with "Could not resolve hostname storagebox",
three nights with no offsite copy.
mainframe was unaffected only by accident: its job runs as root and reads
/root/.ssh/config, which dotbot does not manage. Worth remembering before
assuming an ssh change here reaches every backup.
sub2, not sub1 -- the hosts share one Storage Box account but are chrooted
into separate sub-account homes.
Putting the whole ssh config in common/ was wrong twice over. It mapped
git.rcjohnstone.com to localhost:2222, which is only true on mainframe
where Gitea runs -- on system76 it broke git entirely. And it replaced a
77-line file holding 13 personal host aliases (storagebox, several
forwarded localhost ports, older work hosts) with a five-entry fleet list.
common/ssh/config now Includes ~/.ssh/config.local first, so host entries
win on the first-value-obtained rule, and carries only the fleet aliases.
Each host keeps its own list; system76's is restored verbatim.