extract SSH host config to a secrets repo

home/home.nix

@@ -243,6 +243,7 @@ let
     twemoji-color-font
     opensans-ttf
     (iosevka.override { design = [ "slab" "term" ]; set = "serif"; })
+    (iosevka.override { privateBuildPlan = { design = [ "slab" "sp-term" ]; family = "Iosevka Serif"; }; set = "serif"; })
     # TODO: vollkorn
     # TODO: humor-sans
   ];
@@ -293,6 +294,14 @@ in
       enableSshSupport = true;
     };
 
+  programs.ssh =
+    {
+      enable = true;
+      # ssh host config
+      matchBlocks =
+        import ./secrets/ssh_hosts.nix;
+    };
+
   programs.tmux = {
     enable = true;
     keyMode = "vi";

home/secrets

@@ -0,0 +1 @@
+Subproject commit de07de8b76dac718ceef1258738ba2dd8fc3d3c2