cloudflared/ssh_server_tests/ssh/short_lived_cert_config

Host *
    AddressFamily inet

Host {{hostname}}
  ProxyCommand bash -c '/usr/local/bin/cloudflared access ssh-gen --hostname %h; ssh -F /root/.ssh/short_lived_cert_config -tt %r@cfpipe-{{hostname}} >&2 <&1'

Host cfpipe-{{hostname}}
  HostName {{hostname}}
  ProxyCommand /usr/local/bin/cloudflared access ssh --hostname %h
  IdentityFile ~/.cloudflared/{{hostname}}-cf_key
  CertificateFile ~/.cloudflared/{{hostname}}-cf_key-cert.pub