{
  config,
  lib,
  pkgs,
  ...
}: let
  cfg = config.getchoo.programs.ssh;
  inherit (lib) mkEnableOption mkIf;
in {
  options.getchoo.programs.ssh.enable = mkEnableOption "ssh" // {default = true;};

  config = mkIf cfg.enable {
    programs.ssh = {
      enable = true;
      package = pkgs.openssh;

      matchBlocks = let
        sshDir = "${config.home.homeDirectory}/.ssh";
      in {
        # git forges
        "codeberg.org" = {
          identityFile = "${sshDir}/codeberg";
          user = "git";
        };

        # linux packaging
        "aur.archlinux.org" = {
          identityFile = "${sshDir}/aur";
          user = "aur";
        };

        "pagure.io" = {
          identityFile = "${sshDir}/copr";
          user = "git";
        };

        # router
        "192.168.1.1" = {
          identityFile = "${sshDir}/openwrt";
          user = "root";
        };

        # servers
        "atlas".user = "atlas";
      };
    };

    services.ssh-agent.enable = pkgs.stdenv.isLinux;
  };
}