dotfiles/users/richie/home/ssh_config.nix

{
  programs.ssh = {
    enable = true;

    matchBlocks = {
      jeeves = {
        hostname = "192.168.90.40";
        user = "richie";
        identityFile = "~/.ssh/id_ed25519";
        port = 629;
        dynamicForwards = [ { port = 9050; } ];
      };
      unlock-jeeves = {
        hostname = "192.168.95.14";
        user = "root";
        identityFile = "~/.ssh/id_ed25519";
        port = 2222;
        RequestTTY = "yes";
        RemoteCommand = "cryptsetup-askpass";
      };
      jeevesjr = {
        hostname = "192.168.90.35";
        user = "richie";
        identityFile = "~/.ssh/id_ed25519";
        port = 352;
        dynamicForwards = [ { port = 9050; } ];
      };
      bob = {
        hostname = "192.168.90.25";
        user = "richie";
        identityFile = "~/.ssh/id_ed25519";
        port = 262;
        dynamicForwards = [ { port = 9050; } ];
      };
      rhapsody-in-green = {
        hostname = "192.168.90.221";
        user = "richie";
        identityFile = "~/.ssh/id_ed25519";
        port = 922;
      };
    };
  };
}