{ config, lib, pkgs, ... }:

with lib;

{
  config = {
    programs.ssh = {
      enable = true;
      matchBlocks = {
        localBindPathWithPort = {
          localForwards = [{
            # OK:
            host.address = "127.0.0.1";
            host.port = 3000;

            # Error:
            bind.address = "/run/user/1000/gnupg/S.gpg-agent.extra";
            bind.port = 3000;
          }];
        };
      };
    };

    test.asserts.assertions.expected = [ "Forwarded paths cannot have ports." ];
  };
}