Remove personal SSH hostnames from tracked config; switch to local include

[Copilot]

This weekly review identified an information-leak risk in recently changed configs: personal/home-infra hostnames were committed in public ssh/config. This change removes those host-specific entries from tracked config and keeps support for local host definitions via an untracked include path.

• Scope

  • ssh/config only.

• Security / privacy

  • Removed personal host blocks (nixos-beelink-1, nixos-gmktec-1) from the repo-managed SSH config.

• Config structure

  • Added a local include so machine-specific hosts can be defined outside the public repository:

    Include ~/.ssh/local/*.conf

  • Shared/public host definitions (e.g., HPC endpoints) remain in tracked config unchanged.

• Operational impact

  • Users who relied on removed personal host aliases should define them in ~/.ssh/local/*.conf.

Verified: diff correctly drops only the two personal nixos-* blocks and preserves all HPC entries (greatlakes*, bridges2) and the shared Host * block unchanged. The Include line is placed before any Host blocks, so locally-defined hosts get first-match priority without conflicting with the tracked entries.

• Fixes Weekly repo review – 2026-W30 #138
• Closes ssh/config: personal home-server hostnames exposed in public repo #135

[stanfish06]

Closing as superseded by #148 — the chezmoi migration (7398c37) moved the live ssh config source to home-chezmoi/private_dot_ssh/config, which had drifted further (6 personal hosts, not the 2 this PR fixed in the now-secondary mirror). #148 fixes both files.

---

Generated by Claude Code