{ config, lib, pkgs, ... }: with lib; { config = { programs.ssh = { enable = true; matchBlocks = { abc = { identityFile = null; proxyJump = "jump-host"; }; xyz = { identityFile = "file"; serverAliveInterval = 60; localForwards = [{ bind.port = 8080; host.address = "10.0.0.1"; host.port = 80; }]; remoteForwards = [ { bind.port = 8081; host.address = "10.0.0.2"; host.port = 80; } { bind.address = "/run/user/1000/gnupg/S.gpg-agent.extra"; host.address = "/run/user/1000/gnupg/S.gpg-agent"; } ]; dynamicForwards = [{ port = 2839; }]; }; "* !github.com" = { identityFile = [ "file1" "file2" ]; port = 516; }; }; }; home.file.assertions.text = builtins.toJSON (map (a: a.message) (filter (a: !a.assertion) config.assertions)); nmt.script = '' assertFileExists home-files/.ssh/config assertFileContent \ home-files/.ssh/config \ ${./match-blocks-attrs-expected.conf} assertFileContent home-files/assertions ${./no-assertions.json} ''; }; }