{lib, ...}: {
  # ssh config
  programs.ssh = {
    enable = true;
    enableDefaultConfig = false;
    matchBlocks."*" = {};
    extraConfig = lib.fileContents ./config;
  };
}