{...}: {
  programs = {
    ssh = {
      enable = true;
      enableDefaultConfig = false;
      matchBlocks = {
        "git" = {
          port = 2020;
          identityFile = "/home/don/.ssh/git";
        };
        "git.trex-halfbeak.ts.net" = {identityFile = "/home/don/.ssh/git";};
        "github.com" = {identityFile = "/home/don/.ssh/git";};
        "gitlab.com" = {identityFile = "/home/don/.ssh/git";};
        "homeassistant.home.duckland.org" = {user = "root";};
        "dreamhost" = {
          user = "duck";
          hostname = "wise.dreamhost.com";
        };
        "*" = {user = "don";};
      };
      extraConfig = ''
        ConnectTimeout 5
        AddKeysToAgent yes
        Compression yes
        ControlMaster no
        ControlPath "~/.ssh/master-%r@%n:%p"
        ControlPersist no
        ForwardAgent no
        HashKnownHosts yes
        ServerAliveCountMax 2
        ServerAliveInterval 10
        UserKnownHostsFile "~/.ssh/known_hosts"
      '';
    };
  };
}