Add git ssh key wrapper

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

hosts/elara/users/nikara/configs/console/git/default.nix

@@ -2,7 +2,7 @@
   user ? throw "user argument is required",
   home ? throw "home argument is required",
 }:
-{ ... }:
+{ lib, pkgs, ... }:
 {
   home-manager.users.${user} = {
     sops.secrets = {
@@ -17,14 +17,19 @@
       };
     };
 
-    programs.ssh.matchBlocks = {
+    programs = {
+      git.extraConfig.core.sshCommand = lib.meta.getExe (
+        pkgs.writeShellApplication {
+          name = "git-ssh-key-wrapper";
+          runtimeInputs = with pkgs; [ openssh ];
+          text = builtins.readFile ./git-ssh-key-wrapper.sh;
+        }
+      );
+
+      ssh.matchBlocks = {
         "github.com" = {
           hostname = "github.com";
           user = "git";
-        identityFile = [
-          "${home}/.ssh/ssh_sas_ed25519_key"
-          "${home}/.ssh/ssh_personal_ed25519_key"
-        ];
         };
 
         "gitlab.sas.com" = {
@@ -41,4 +46,5 @@
         };
       };
     };
+  };
 }

hosts/elara/users/nikara/configs/console/git/git-ssh-key-wrapper.sh

@@ -0,0 +1,16 @@
+# shellcheck shell=bash
+
+key="$HOME/.ssh/ssh_personal_ed25519_key"
+
+if [[ "$*" == *"git@github.com"* ]]; then
+  if [[ "$*" == *"sas-institute-rnd-product/"* ||
+        "$*" == *"sas-institute-rnd-internal/"* ||
+        "$*" == *"sas-institute-rnd-pipeline-test/"* ||
+        "$*" == *"_sasinst/"* ]]; then
+    key="$HOME/.ssh/ssh_sas_ed25519_key"
+  fi
+
+  exec ssh -i "$key" "$@"
+fi
+
+exec ssh "$@"