rice/users/buffet/ssh.nix

{
  home-manager.users.buffet = {
    programs.ssh = {
      enable = true;
      addKeysToAgent = "10m";
      extraConfig = ''
        Host kitchen
          Hostname buffets.kitchen
          User forgejo
          IdentityFile ~/.ssh/id_buffet_ecdsa-sk
      '';
    };

    services.ssh-agent = {
      enable = true;
    };
  };
}