{ ... }:
{
    programs.ssh = {
        enable = true;

        forwardAgent = true;

        matchBlocks = {
            # Tailscale nodes
            "vps" = {
                hostname = "oracle-vps";
                user = "tyman";
                port = 22;
            };
            "srv" = {
                hostname = "old-lenovo-laptop";
                user = "ty";
                port = 22;
            };
            "polyfrost" = {
                hostname = "polyfrost-vps";
                user = "tyman";
                port = 22;
            };
            # Git hosts
            "forgejo" = {
                hostname = "git.myriation.xyz";
                user = "git";
                port = 22;
            };
            "github" = {
                hostname = "github.com";
                user = "git";
                port = 22;
            };
            "codeberg" = {
                hostname = "codeberg.org";
                user = "git";
                port = 22;
            };
        };
    };

    services.ssh-agent.enable = false; # Handled by GPG
}