{ pkgs, lib, config, ... }:
{

  config = lib.mkIf config.components.gui.enable {
    home-manager.users.mainUser = {
      programs.ssh.enable = true;
      programs.ssh.matchBlocks = {
        "*" = {
          identityFile = "~/.ssh/palo_rsa.pub";
          identitiesOnly = true;
        };
        "*.jobrad.org" = {
          user = "iwagner";
          identityFile = "~/.ssh/jobrad_ed25519";
        };
        "lassul.us" = {
          user = "download";
          port = 45621;
        };
        "*.r" = {
          user = "root";
        };
        "*.secret" = {
          user = "root";
        };
        "*.private" = {
          user = "root";
        };
        "*.lan" = {
          user = "root";
        };
        "github.com" = {
          hostname = "ssh.github.com";
          user = "root";
        };
        "es5.siteground.eu" = {
          user = "ingolfwa";
          port = 18765;
        };
        "*.onion" = {
          user = "root";
        };
        #"*.compute.amazonaws.com".extraOptions = {
        #  ProxyCommand = ''
        #    sh -c "${pkgs.awscli2}/bin/aws ssm start-session --target %h --document-name AWS-StartSSHSession --parameters 'portNumber=%p'"
        #  '';
        #};
      };
    };
  };
}