wildcard match block for john-stream.com hosts with a cert

homeManagerModules/ssh.nix

@@ -11,9 +11,18 @@
       {
         "*" = {
           user = "john";
-          forwardAgent = true;
+
-          serverAliveInterval = 60;
+          # From the help text about the deprecation of the default config:
-          serverAliveCountMax = 2;
+          forwardAgent = false;
+          addKeysToAgent = "no";
+          compression = false;
+          serverAliveInterval = 0;
+          serverAliveCountMax = 3;
+          hashKnownHosts = false;
+          userKnownHostsFile = "~/.ssh/known_hosts";
+          controlMaster = "no";
+          controlPath = "~/.ssh/master-%r@%n:%p";
+          controlPersist = "no";
         };
       }
       (lib.mkIf (config.profile == "personal") {
@@ -57,6 +66,12 @@
           hostname = "192.168.1.129";
           user = "root";
         };
+        "*.john-stream.com" = {
+          user = "john";
+          identitiesOnly = true;
+          identityFile = "~/.ssh/id_ed25519";
+          certificateFile = "~/.ssh/id_ed25519-cert.pub";
+        };
       })
       (lib.mkIf (config.profile == "work") {
         "ubuntu-nvidia" = {