os/users/b12f/ssh.nix

{
  config,
  pkgs,
  lib,
  flake,
  ...
}:
with lib; let
  psCfg = config.pub-solar;
  xdg = config.home-manager.users."${psCfg.user.name}".xdg;
in {
  age.secrets."id_ed25519_sk-464" = {
    file = "${flake.self}/secrets/id_ed25519_sk-464.age";
    mode = "400";
    owner = psCfg.user.name;
    path = "/home/${psCfg.user.name}/.ssh/id_ed25519_sk-464";
  };

  age.secrets."id_ed25519_sk-485" = {
    file = "${flake.self}/secrets/id_ed25519_sk-485.age";
    mode = "400";
    owner = psCfg.user.name;
    path = "/home/${psCfg.user.name}/.ssh/id_ed25519_sk-485";
  };

  home-manager.users."${psCfg.user.name}" = {
    home.file.".ssh/id_ed25519_sk-464.pub".text = "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIHUbowjUtBiOPWi+TCHGToFwIsMDY6s7IRev6buVVdWxAAAACHNzaDpiMTJm yubi@464";
    home.file.".ssh/id_ed25519_sk-485.pub".text = "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIDyxaJNw0jXREOzQfa0E2RQE/xLD/VddDldbdSmS8uf9AAAACHNzaDpiMTJm yubi@485";
    home.file.".ssh/id_yubi_gpg.pub".text = "ssh-rsa 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 yubi-gpg";
    home.file.".ssh/id_nistp256-748.pub".text = "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEST9eyAY3nzGYNnqDYfWHu+89LZsOjyKHMqCFvtP7vrgB7F7JbbECjdjAXEOfPDSCVwtMMpq8JJXeRMjpsD0rw= YubiKey #10166748 PIV Slot 9a";

    programs.ssh = {
      enable = true;
      matchBlocks = {
        "*" = {
          identitiesOnly = true;
          identityFile = [
            "/home/${psCfg.user.name}/.ssh/id_yubi_gpg.pub"
            "/home/${psCfg.user.name}/.ssh/id_ed25519_sk-464"
            "/home/${psCfg.user.name}/.ssh/id_ed25519_sk-485"
            "/home/${psCfg.user.name}/.ssh/id_nistp256-748.pub"
          ];
        };

        "git.pub.solar" = {
          user = "gitea";
        };

        "aur.archlinux.org" = {
          user = "aur";
        };

        "leavieler.art" = {
          hostname = "web5svsvy.wh.hosting.zone";
          user = "web5svsvy_cgzqa3";
          port = 2244;
        };

        "benjaminbaedorf.eu" = {
          hostname = "web5svsvy.wh.hosting.zone";
          user = "web5svsvy_cgzqa3";
          port = 2244;
        };

        "miom.space" = {
          hostname = "web7dgkba.wh.hosting.zone";
          user = "web7dgkba_c9em8f";
          port = 2244;
        };

        "latenight.blue" = {
          hostname = "latenight.blue";
          user = "lnb";
          extraOptions = {
            MACs = "hmac-sha2-512-etm@openssh.com";
          };
        };

        "blacktea.io" = {
          hostname = "latenight.blue";
          user = "lnb";
          extraOptions = {
            MACs = "hmac-sha2-512-etm@openssh.com";
          };
        };

        "laurakirst.de" = {
          hostname = "webj4bsux.wh.hosting.zone";
          user = "webj4bsux_36qkrk";
          port = 2244;
        };

        "lipperschwabe.design" = {
          hostname = "webugit4m.wh.hosting.zone";
          user = "webugit4m_snjhrn";
          port = 2244;
        };

        "pie.local" = {
          hostname = "pie.local";
          user = "yule";
        };

        "pie.b12f.io" = {
          user = "yule";
        };

        "frikandel-initrd.b12f.io" = {
          user = "root";
          port = 2222;
        };

        "frikandel.b12f.io" = {
          user = "yule";
        };

        "droppie.b12f.io" = {
          user = "yule";
        };

        "droppie-initrd.b12f.io" = {
          user = "root";
          port = 2222;
        };

        "nachtigall.pub.solar" = {
          user = "barkeeper";
        };

        "flora-6.pub.solar" = {
          user = "barkeeper";
        };
      };
    };
  };
}