Move SSH config to separate directory

home/home.nix

@@ -10,6 +10,7 @@ top @ { config
     inputs.spicetify-nix.homeManagerModules.default
     ./nixvim
     ./borgmatic.nix
+    ./ssh.nix
   ];
 
   home.username = username;
@@ -212,9 +213,5 @@ top @ { config
 
   services.hyprpolkitagent.enable = true;
 
-  services.ssh-agent = {
-    enable = true;
-    enableZshIntegration = true;
-  };
   home.stateVersion = "25.11";
 }

home/ssh.nix

@@ -0,0 +1,32 @@
+{ ... }: {
+  programs.ssh = {
+    enable = true;
+    enableDefaultConfig = false;
+    matchBlocks = {
+      "*" = {
+        forwardAgent = false;
+        addKeysToAgent = "no";
+        compression = false;
+        serverAliveInterval = 0;
+        serverAliveCountMax = 3;
+        hashKnownHosts = false;
+        userKnownHostsFile = "~/.ssh/known_hosts";
+        controlMaster = "no";
+        controlPath = "~/.ssh/master-%r@%n:%p";
+        controlPersist = "no";
+      };
+      "veltko.de" = {
+        user = "weckyy702";
+        port = 47213;
+      };
+      "duke.veltnet" = {
+        user = "konstantin";
+      };
+      #TODO: beastie
+    };
+  };
+  services.ssh-agent = {
+    enable = true;
+    enableZshIntegration = true;
+  };
+}