{ config, pkgs, ... }:

{
  home.file.".ssh/id_rsa_yubikey.pub".source = ./id_rsa_yubikey.pub;
  programs.ssh = {
    enable = true;
    matchBlocks = {

      "github.com" = {
        identitiesOnly = true;
        identityFile = "~/.ssh/id_rsa_yubikey.pub";
      };

      "openwrt" = {
        hostname = "openwrt";
        identitiesOnly = true;
        identityFile = "~/.ssh/id_rsa_yubikey.pub";
        forwardAgent = true;
        user = "root";
      };

      "suricata" = {
        hostname = "suricata.monotremata.xyz";
        identitiesOnly = true;
        identityFile = "~/.ssh/id_rsa_yubikey.pub";
        forwardAgent = true;
        port = 2222;
      };

      "narwhal" = {
        hostname = "192.168.1.133";
        identitiesOnly = true;
        identityFile = "~/.ssh/id_rsa_yubikey.pub";
        forwardAgent = true;
        port = 22;
      };

      "sloth" = {
        hostname = "192.168.1.144";
        identitiesOnly = true;
        identityFile = "~/.ssh/id_rsa_yubikey.pub";
        forwardAgent = true;
        port = 22;
      };

      "trantor" = {
        hostname = "192.168.1.203";
        identitiesOnly = true;
        identityFile = "~/.ssh/id_rsa_yubikey.pub";
        forwardAgent = true;
        port = 22;
      };

      "axolotl" = {
        hostname = "192.168.1.180";
        identitiesOnly = true;
        identityFile = "~/.ssh/id_rsa_yubikey.pub";
        forwardAgent = true;
        port = 22;
      };

      "caladan" = {
        hostname = "caladan.monotremata.xyz";
        identitiesOnly = true;
        identityFile = "~/.ssh/id_rsa_yubikey.pub";
        forwardAgent = true;
        port = 2222;
      };

      "fugu" = {
        hostname = "mail.monotremata.xyz";
        identitiesOnly = true;
        identityFile = "~/.ssh/id_rsa_yubikey.pub";
        forwardAgent = true;
        port = 22;
      };

    };
  };
}