{ config, lib, ... }:
{
  programs.ssh = lib.mkIf config.ssh {
    enable = true;
    enableDefaultConfig = false;
    extraConfig = ''
      SetEnv TERM="xterm-256color"
      ${lib.optionalString config._1password "IdentityAgent ~/.1password/agent.sock"}
    '';
    matchBlocks = lib.mkMerge [
      {
        "*" = {
          user = "john";
          forwardAgent = true;
          serverAliveInterval = 60;
          serverAliveCountMax = 2;
        };
      }
      (lib.mkIf (config.profile == "personal") {
        "ad-nix" = {
          hostname = "192.168.1.201";
          user = "appdaemon";
        };
        "appdaemon" = {
          hostname = "192.168.1.242";
          user = "appdaemon";
        };
        "docs" = {
          hostname = "192.168.1.110";
          user = "root";
        };
        "hermes" = {
          hostname = "192.168.1.150";
          user = "root";
        };
        "panoptes" = {
          hostname = "192.168.1.107";
          user = "panoptes";
        };
        "panoptes-root" = {
          hostname = "192.168.1.107";
          user = "root";
        };
        "platform-caddy" = {
          hostname = "192.168.1.65";
          user = "root";
        };
        "pve5070" = {
          hostname = "192.168.1.130";
          user = "root";
        };
        "nix-test" = {
          hostname = "192.168.1.36";
          user = "john";
        };
        "z2m-nix" = {
          hostname = "192.168.1.129";
          user = "root";
        };
      })
      (lib.mkIf (config.profile == "work") {
        "ubuntu-nvidia" = {
          hostname = "10.118.46.120";
          user = "john";
        };
      })
    ];
  };
}