{ ... }:
{
  programs = {
    ssh = {
      enableDefaultConfig = false;
      matchBlocks = {
        "router" = {
          user = "admin";
          hostname = "192.168.1.1";
          port = 2222;
          controlPersist = "no";
          addKeysToAgent = "9h";
          compression = false;

          forwardAgent = false;
          serverAliveInterval = 0;
          serverAliveCountMax = 3;
          hashKnownHosts = false;
          userKnownHostsFile = "~/.ssh/known_hosts";
          controlMaster = "no";
          controlPath = "none";

          extraOptions = {
            KexAlgorithms = "curve25519-sha256@libssh.org,diffie-hellman-group14-sha256";
            WarnWeakCrypto = "no";
            ServerAliveInterval = "30";
            ServerAliveCountMax = "4";
          };
        };
        "aur" = {
          hostname = "aur.archlinux.org";
          identityFile = "~/.ssh/id_rsa-aur";
          user = "aur";
          controlPersist = "10m";
          addKeysToAgent = "9h";
          compression = true;

          forwardAgent = false;
          serverAliveInterval = 0;
          serverAliveCountMax = 3;
          hashKnownHosts = false;
          userKnownHostsFile = "~/.ssh/known_hosts";
          controlMaster = "auto";
          controlPath = "~/.ssh/master-%r@%n:%p";
        };
        "vpn1" = {
          # https://bill.pq.hosting/billmgr
          user = "root";
          hostname = "45.120.178.159";
          controlPersist = "10m";
          addKeysToAgent = "9h";
          compression = true;

          forwardAgent = false;
          serverAliveInterval = 0;
          serverAliveCountMax = 3;
          hashKnownHosts = false;
          userKnownHostsFile = "~/.ssh/known_hosts";
          controlMaster = "auto";
          controlPath = "~/.ssh/master-%r@%n:%p";
        };
        "vpn2" = {
          # https://my.msk.host/billing/my-services
          user = "root";
          hostname = "194.67.193.95";
          controlPersist = "10m";
          addKeysToAgent = "9h";
          compression = true;

          forwardAgent = false;
          serverAliveInterval = 0;
          serverAliveCountMax = 3;
          hashKnownHosts = false;
          userKnownHostsFile = "~/.ssh/known_hosts";
          controlMaster = "auto";
          controlPath = "~/.ssh/master-%r@%n:%p";
        };
      };
    };
  };
}