{ ... }:
let
  data = import ../../data;
in
{
  programs.ssh = {
    enable = true;
    enableDefaultConfig = false;
    settings."*" = {
      Compression = true;
      ControlMaster = "auto";
      ControlPersist = "10m";
      ServerAliveInterval = 15;
      SendEnv = "TERM_PROGRAM";
      VerifyHostKeyDNS = "ask";
      CanonicalizeHostname = "yes";
      CanonicalizeFallbackLocal = "no";
      CanonicalizeMaxDots = 0;
      CanonicalDomains = "${data.homenet} ${data.tailnet}";
      IdentitiesOnly = "yes";
      StrictHostKeyChecking = "yes";
    };
    includes = [
      "local.ssh_config"
    ];
  };
  home.shellAliases = {
    essh = "ssh -o StrictHostKeyChecking=no -o GlobalKnownHostsFile=/dev/null -o UserKnownHostsFile=/dev/null";
  };
}