{ ... }:
{
  sops.secrets."ssh/sas/key" = {
    sopsFile = ../../../../secrets/sas/secrets.yaml;
    path = "/root/.ssh/ssh_sas_ed25519_key";
  };

  programs.ssh.extraConfig = ''
    Host github.com
      User git
      HostName github.com
      IdentityFile /root/.ssh/ssh_sas_ed25519_key
      StrictHostKeyChecking no

    Host gitlab.sas.com
      User git
      HostName gitlab.sas.com
      IdentityFile /root/.ssh/ssh_sas_ed25519_key
      StrictHostKeyChecking no
  '';
}