{ config, lib, ... }: {
  config = {
    programs.ssh = {
      enable = true;
      extraConfig = "User root";

      matchBlocks = {
        github = lib.hm.dag.entryBefore [ "*" ] {
          hostname = "github.com";
          user = "pizzapim";
          identitiesOnly = true;
        };
        lewis = lib.hm.dag.entryBefore [ "*" ] { hostname = "lewis.hyp"; };
        atlas = lib.hm.dag.entryBefore [ "*" ] { hostname = "atlas.hyp"; };
        jefke = lib.hm.dag.entryBefore [ "*" ] { hostname = "jefke.hyp"; };
        hermes = lib.hm.dag.entryBefore [ "*" ] { hostname = "hermes.dmz"; };
        maestro = lib.hm.dag.entryBefore [ "*" ] { hostname = "maestro.dmz"; };
        bancomart =
          lib.hm.dag.entryBefore [ "*" ] { hostname = "bancomart.dmz"; };
        handjecontantje =
          lib.hm.dag.entryBefore [ "*" ] { hostname = "handjecontantje.dmz"; };
      };
    };

    homeage.file."sue_ed25519" = {
      source = ../../secrets/sue_ed25519.age;
      symlinks = [ "${config.home.homeDirectory}/.ssh/sue_ed25519" ];
    };

    homeage.file."sue_azure_rsa" = {
      source = ../../secrets/sue_azure_rsa.age;
      symlinks = [ "${config.home.homeDirectory}/.ssh/sue_azure_rsa" ];
    };
  };
}