{ config, secrets, ... }:
{
  programs.ssh = {
    enable = true;
    addKeysToAgent = "yes";
    serverAliveInterval = 60;
    serverAliveCountMax = 10;

    extraConfig = ''
      IgnoreUnknown UseKeychain
      UseKeychain yes
      IPQoS lowdelay throughput
    '';

    matchBlocks = {
      "akashi" = { };
      "himeji".user = "root";
      "watson".user = "root";

      "kioku" = {
        user = "root";
        identityFile = config.sops.secrets.kioku_openssh_private_key.path;
      };

      "github.com" = {
        user = "git";
        identityFile = "${config.home.homeDirectory}/.ssh/id_rsa";
      };

      "aur.archlinux.org" = {
        user = "aur";
        identityFile = "${config.home.homeDirectory}/.ssh/aur";
      };

      "seti" = {
        user = "root";
        port = 2222;
        identityFile = "${config.home.homeDirectory}/.ssh/seti";
      };

      "oit" = {
        inherit (secrets.ssh.oit) hostname user;
      };

      "eu.nixbuild.net" = {
        port = 2222;
        identityFile = "${config.home.homeDirectory}/.ssh/id_ed25519.1";
      };
    };
  };
}