How to configure a whole fleet with SSH wildcard hosts

A fleet shares a user and a key; only the port differs on some of the machines.

Every flag and config keyword was checked against the OpenSSH 9.6 man pages, and the config examples were parsed for real with ssh -G.

Host prod-*
    User ops
    IdentityFile ~/.ssh/id_ed25519_prod

Host prod-db-01 prod-web-01
    Port 2222

Good to know

ssh prod-db-01 picks up both blocks: user and key from the wildcard block, the port from the explicit list.