{ ... }:
{
  # SSH client configuration with host-specific keys
  programs.ssh = {
    enable = true;
    
    matchBlocks = {
      # Forgejo (personal) — port 2222
      "git.iscg.dev" = {
        identityFile = "~/.ssh/id_ed25519_forgejo";
        port = 2222;
        identitiesOnly = true;
        addKeysToAgent = "yes";
      };
      
      # GitHub
      "github.com" = {
        identityFile = "~/.ssh/id_ed25519";
        identitiesOnly = true;
        addKeysToAgent = "yes";
      };
      
      # git.sol.moe
      "git.sol.moe" = {
        identityFile = "~/.ssh/poppy";
        user = "mikl";
        identitiesOnly = true;
        addKeysToAgent = "yes";
      };
    };
  };
}