{ ... }:
{
  # https://github.com/nix-community/home-manager/blob/master/modules/programs/ssh.nix
  programs.ssh = {
    enable = true;
    forwardAgent = true;
    serverAliveInterval = 60;
    controlMaster = "auto";
    controlPersist = "30m";

    matchBlocks = {
      "github.com" = {
        hostname = "github.com";
        user = "git";
        forwardAgent = false;
        extraOptions = {
          preferredAuthentications = "publickey";
        };
      };
      "github.rbx.com" = {
        hostname = "github.rbx.com";
        user = "git";
        forwardAgent = false;
        extraOptions = {
          preferredAuthentications = "publickey";
        };
      };
      "chi1-jumpcontainer-es" = {
        hostname = "127.0.0.1";
        port = 44641;
        extraOptions = {
          NoHostAuthenticationForLocalhost = "yes";
          ControlPath = "~/.ssh/sapi_controlmasters/%r@%h:%p";
          ControlPersist = "10m";
        };
      };
    };
  };
}