BASH tunnel.sh

#!/usr/bin/env bash
# SSH tunnel: Bitcoin Core RPC
# Forwards 127.0.0.1:8332 -> 10.0.0.60:8332
# Auth: SSH key (no password in script or environment)
set -euo pipefail

exec ssh \
  -F /dev/null \
  -i ~/.ssh/id_ed25519_bitc \
  -o IdentitiesOnly=yes \
  -o PasswordAuthentication=no \
  -o ExitOnForwardFailure=yes \
  -o StrictHostKeyChecking=accept-new \
  -o ServerAliveInterval=30 \
  -o ServerAliveCountMax=3 \
  -L 8332:127.0.0.1:8332 \
  grepples@10.0.0.60 -N