{ lib, pkgs, ... }:

{
  programs.ssh.extraConfig =
    let
      ssh-proxy = pkgs.callPackage ../pkgs/ch-proxy/package.nix { };
    in
    ''
      Host vsock-mux%* uvm/* uuvm/*
          ProxyCommand ${lib.getExe ssh-proxy} %h
          ProxyUseFdpass yes
          CheckHostIP no

          # systemd: "Disable all kinds of host identity checks, since these addresses are generally ephemeral"
          StrictHostKeyChecking no
    '';

}