nixdots/home/programs/terminal/tools/ssh.nix

{
  programs = {
    ssh = {
      enable = true;
      hashKnownHosts = true;
      compression = true;
      matchBlocks = {
        # Git hosts
        "aur" = {
          hostname = "aur.archlinux.org";
          identityFile = "~/.ssh/git/aur";
        };
        "gitlab" = {
          user = "git";
          hostname = "gitlab.com";
          identityFile = "~/.ssh/git/gitlab-itsdrike";
        };
        "github" = {
          user = "git";
          hostname = "gitlab.com";
          identityFile = "~/.ssh/git/github-itsdrike";
        };
        # TODO: Figure out how to add protected/encrypted blocks here
        # I don't like the idea of expising IPs/hostnames in the config
      };
    };
  };
}