{
  ...
}:
{
  programs.ssh.extraConfig = ''
    StrictHostKeyChecking no
    UserKnownHostsFile=/dev/null

    Match User beastie
      PreferredAuthentications publickey
      IdentityFile ~/.ssh/id_ed25519_beastie

    Match User ansible
      PreferredAuthentications publickey
      IdentityFile ~/.ssh/id_ecdsa_ansible

    Match User gitea Host git.unixyourbrain.org
      PreferredAuthentications publickey,password
      IdentityFile ~/.ssh/id_ed25519_beastie

    Host S-TIC-01
      KexAlgorithms=+diffie-hellman-group1-sha1
      HostKeyAlgorithms=+ssh-rsa
  '';
}