home/ssh: adjust to deprecation warnings

home/desktop.nix

@@ -76,9 +76,27 @@
 
   programs.ssh = {
     enable = true;
+    enableDefaultConfig = false; # deprecated
     package = pkgs.openssh;
+    # TODO: common config for desktop as well
     # ssh host config
-    matchBlocks = (import "${inputs.mysecrets}/ssh_hosts.nix").privateHosts;
+    matchBlocks = {
+
+      # default, gets placed last by home-manager
+      "*" = {
+        serverAliveInterval = 10;
+        serverAliveCountMax = 2; # 2 strikes and you're out
+        forwardAgent = false;
+        addKeysToAgent = "no";
+        compression = false;
+        hashKnownHosts = false;
+        userKnownHostsFile = "~/.ssh/known_hosts";
+        controlMaster = "no";
+        controlPath = "~/.ssh/master-%r@%n:%p";
+        controlPersist = "no";
+      };
+    }
+    // (import "${inputs.mysecrets}/ssh_hosts.nix").privateHosts;
   };
 
   # media button control support from Bluetooth devices