{ config, lib, ... }: {
  config = {
    programs.ssh = {
      enable = true;
      extraConfig = "User root";

      matchBlocks = {
        github = lib.hm.dag.entryBefore [ "*" ] {
          hostname = "github.com";
          user = "pizzapim";
          identitiesOnly = true;
        };
        lewis = lib.hm.dag.entryBefore [ "*" ] { hostname = "lewis.dmz"; };
        atlas = lib.hm.dag.entryBefore [ "*" ] { hostname = "atlas.dmz"; };
        jefke = lib.hm.dag.entryBefore [ "*" ] { hostname = "jefke.dmz"; };
        warwick = lib.hm.dag.entryBefore [ "*" ] { hostname = "warwick.dmz"; };
      };
    };

    homeage.file."sue_ed25519" = {
      source = ../../secrets/sue_ed25519.age;
      symlinks = [ "${config.home.homeDirectory}/.ssh/sue_ed25519" ];
    };

    homeage.file."sue_azure_rsa" = {
      source = ../../secrets/sue_azure_rsa.age;
      symlinks = [ "${config.home.homeDirectory}/.ssh/sue_azure_rsa" ];
    };
  };
}