{ config, lib, ... }:
{
  programs.ssh = lib.mkIf config.ssh {
    enable = true;
    extraConfig = ''
      SetEnv TERM="xterm-256color"
      ${lib.optionalString config._1password "IdentityAgent ~/.1password/agent.sock"}
    '';
    matchBlocks = lib.mkMerge [
      (lib.mkIf (config.profile == "personal") {
        "ad-nix" = {
          hostname = "192.168.1.201";
          user = "appdaemon";
        };
        "docs" = {
          hostname = "192.168.1.110";
          user = "root";
        };
        "hermes" = {
          hostname = "192.168.1.150";
          user = "root";
        };
        "panoptes" = {
          hostname = "192.168.1.107";
          user = "panoptes";
        };
        "pve5070" = {
          hostname = "192.168.1.130";
          user = "root";
        };
        "nix-test" = {
          hostname = "192.168.1.36";
          user = "john";
        };
      })
      (lib.mkIf (config.profile == "work") {
        "ubuntu-nvidia" = {
          hostname = "10.118.46.120";
          user = "john";
        };
      })
    ];
  };
}