nixfiles/home/base/ssh.nix

{lib, ...}: {
  programs.ssh.enable = true;
  programs.ssh.matchBlocks =
    lib.mkMerge
    ((lib.forEach ["hetzner-vm" "vault" "vault-decrypt" "buildbox"] (hostname: {
        "${hostname}" = {
          user = "root";
          hostname = "${hostname}.servers.genderfucked.monster";
        };
      }))
      ++ [
        {
          "storage" = {
            user = "root";
            hostname = "192.168.100.11";
            proxyJump = "hetzner-vm";
          };
          "blahaj" = {
            user = "chaos";
            hostname = "blahaj.sapphicco.de";
          };
        }
      ]);
}