{...}: {
  # set ssh profiles
  # WARNING: this DOES NOT start the ssh-agent
  # WARNING: for that you need to use `services.ssh-agent.enable`
  programs.ssh = {
    enable = true;
    forwardAgent = false;
    addKeysToAgent = "yes";

    matchBlocks = {
      butterfly = {
        hostname = "dobutterfliescry.net";
        user = "cry";
        port = 42069;
        identityFile = "~/keys/butterfly";
        setEnv = {
          TERM = "xterm-256color";
        };
      };
      hyrule = {
        hostname = "hyrule.dobutterfliescry.net";
        user = "cry";
        port = 42069;
        identityFile = "~/keys/hyrule";
        setEnv = {
          TERM = "xterm-256color";
        };
      };
      matcha = {
        hostname = "192.168.88.250";
        user = "cry";
        port = 22;
        identityFile = "~/keys/matcha";
      };
      youcue = {
        hostname = "moss.labs.eait.uq.edu.au";
        user = "s4740056";
        port = 22;
        identityFile = "~/keys/other/youcue";
        setEnv = {
          TERM = "xterm-256color";
        };
      };
    };
  };
}