{ lib, ... }:

{
	programs.ssh = {
		enable = true;
		serverAliveInterval = 60;

		includes = ["config.local"];

		matchBlocks =
		let
			nas = { user = "admin"; };
			owned = { user = "greg"; };
		in {
			inherit nas;

			"*" = {
				dynamicForwards = [ {
					port = 10240;
				} ];
			};

			"10.42.1.4" = lib.hm.dag.entryBefore ["10.42.*"] nas;
			"nas.thehellings.lan" = nas;
			"nas.greg-hellings.gmail.com.beta.tailscale.net" = nas;
			chronicles = nas;
			"chronicles.thehellings.lan" = lib.hm.dag.entryBefore [ "*.thehellings.lan"] nas;

			gh = { user = "git"; hostname = "github.com"; };
			"src" = { user = "gitea"; hostname = "src.thehellings.com"; };

			"*.thehellings.lan" = owned;
			"10.42.*" = owned;

			"host.crosswire.org crosswire" = {
				hostname = "host.crosswire.org";
				user = "ghellings";
			};

			fedpeople = {
				hostname = "fedorapeople.org";
				user = "greghellings";
			};

			"src.fedoraproject.org pkgs.fedoraproject.org" = {
				user = "greghellings";
			};

			"127.*".extraOptions = {
				PubkeyAcceptedAlgorithms = "+ssh-rsa";
				HostkeyAlgorithms = "+ssh-rsa";
			};
		};
	};

	home.file = {
		".ssh/id_rsa".text = builtins.readFile ./ssh/id_rsa;
		".ssh/id_rsa.pub".text = builtins.readFile ./ssh/id_rsa.pub;
	};
}