nixos-configs/home/ssh/default.nix

{ config, lib, ...}:

{
  config = {
    programs.ssh = {
      enable = true;
      extraConfig = "User root";

      matchBlocks = {
        gitlab-sue = lib.hm.dag.entryBefore [ "*" ] {
          hostname = "gitlab.com";
          identityFile = "~/.ssh/sue_ed25519";
          identitiesOnly = true;
        };
        github = lib.hm.dag.entryBefore [ "*" ] {
          hostname = "github.com";
          user = "pizzapim";
          identitiesOnly = true;
        };
        lewis = lib.hm.dag.entryBefore [ "*" ] {
          hostname = "lewis.hyp";
        };
        atlas = lib.hm.dag.entryBefore [ "*" ] {
          hostname = "atlas.hyp";
        };
        jefke = lib.hm.dag.entryBefore [ "*" ] {
          hostname = "jefke.hyp";
        };
        hermes = lib.hm.dag.entryBefore [ "*" ] {
          hostname = "hermes.dmz";
        };
        maestro = lib.hm.dag.entryBefore [ "*" ] {
          hostname = "maestro.dmz";
        };
        bancomart = lib.hm.dag.entryBefore [ "*" ] {
          hostname = "bancomart.dmz";
        };
        handjecontantje = lib.hm.dag.entryBefore [ "*" ] {
          hostname = "handjecontantje.dmz";
        };
      };
    };

    homeage.file."sue_ed25519" = {
      source = ../../secrets/sue_ed25519.age;
      symlinks = [ "${config.home.homeDirectory}/.ssh/sue_ed25519" ];
    };

    homeage.file."sue_azure_rsa" = {
      source = ../../secrets/sue_azure_rsa.age;
      symlinks = [ "${config.home.homeDirectory}/.ssh/sue_azure_rsa" ];
    };
  };
}