home/home/features/cli/ssh.nix

{
  pkgs,
  ...
}:
{
  programs.ssh = {
    enable = true;
    package = pkgs.unstable.openssh;
    enableDefaultConfig = false;

    extraConfig = ''
      StreamLocalBindUnlink yes
    '';

    matchBlocks = {
      "*" = {
        setEnv.TERM = "xterm-256color";
        forwardAgent = true;
        compression = true;
        serverAliveInterval = 0;
        serverAliveCountMax = 3;
        hashKnownHosts = false;
        userKnownHostsFile = "~/.ssh/known_hosts";
      };

      "github.com".user = "git";
      "codeberg.org".user = "git";

      github.hostname = "github.com";
      codeberg.hostname = "codeberg.org";

      git = {
        hostname = "192.168.1.3";
        port = 2222;
        user = "forgejo";
        proxyJump = "odin";
        forwardAgent = true;
      };

      "git.odin.t5.st" = {
        hostname = "192.168.1.3";
        proxyJump = "odin";
        forwardAgent = true;
      };

      odin = {
        hostname = "odin.taild019.ts.net";
        user = "thomas";
        forwardAgent = true;
        remoteForwards = [
          {
            bind.address = "/run/user/1000/gnupg/d.o6jzqfigwppq1eps4nhng6n5/S.gpg-agent";
            host.address = "/Users/thomas/.config/gnupg/S.gpg-agent.extra";
          }
        ];
      };
    };
  };
}