nixos-configs/home-manager/ssh/default.nix

{
  config,
  lib,
  ...
}: {
  config = {
    programs.ssh = {
      enable = true;
      extraConfig = "User root";

      matchBlocks = {
        github = lib.hm.dag.entryBefore ["*"] {
          hostname = "github.com";
          user = "pizzapim";
          identitiesOnly = true;
        };
        lewis = lib.hm.dag.entryBefore ["*"] {
          hostname = "lewis.hyp";
        };
        atlas = lib.hm.dag.entryBefore ["*"] {
          hostname = "atlas.hyp";
        };
        jefke = lib.hm.dag.entryBefore ["*"] {
          hostname = "jefke.hyp";
        };
        hermes = lib.hm.dag.entryBefore ["*"] {
          hostname = "hermes.dmz";
        };
        maestro = lib.hm.dag.entryBefore ["*"] {
          hostname = "maestro.dmz";
        };
        bancomart = lib.hm.dag.entryBefore ["*"] {
          hostname = "bancomart.dmz";
        };
        handjecontantje = lib.hm.dag.entryBefore ["*"] {
          hostname = "handjecontantje.dmz";
        };
      };
    };

    homeage.file."sue_ed25519" = {
      source = ../../secrets/sue_ed25519.age;
      symlinks = ["${config.home.homeDirectory}/.ssh/sue_ed25519"];
    };

    homeage.file."sue_azure_rsa" = {
      source = ../../secrets/sue_azure_rsa.age;
      symlinks = ["${config.home.homeDirectory}/.ssh/sue_azure_rsa"];
    };
  };
}