{ ... }:
{
  # SSH client configuration
  # TEMP: using single key 'poppy' for all hosts - create host-specific keys later
  programs.ssh = {
    enable = true;
    
    matchBlocks = {
      # All git forges use the same key for now
      "git.*" = {
        identityFile = "~/.ssh/poppy";
        identitiesOnly = true;
        addKeysToAgent = "yes";
      };
      
      # Specific hosts (port override for forgejo)
      "git.iscg.dev" = {
        identityFile = "~/.ssh/poppy";
        port = 2222;
        identitiesOnly = true;
        addKeysToAgent = "yes";
      };
      
      "git.sol.moe" = {
        identityFile = "~/.ssh/poppy";
        user = "mikl";
        identitiesOnly = true;
        addKeysToAgent = "yes";
      };
    };
  };
}