{ config, pkgs, ... }:
{

  # ssh
  programs.ssh = {
    enable      = true;
    matchBlocks = {

      # general
      "*" = {
        user                  = "simon";
        identityFile          = "${config.home.homeDirectory}/.ssh/talathiel";
        serverAliveInterval   = 60;
      };

      # jumphost
      "bastion" = { 
        hostname  = "192.168.10.55";
        proxyJump = "do.siempie.com"; 
      };

      # siempie lab
      "*.do.local"            = { proxyJump = "bastion"; };
      "*.hackerboys.internal" = { proxyJump = "bastion"; };
      "*.siempie.internal"    = { proxyJump = "bastion"; };
      "*.siempie.local"       = { proxyJump = "bastion"; };
    };
  };
}