{ config, ... }: { programs.ssh = { extraConfig = '' IdentityFile ${ config.sops.secrets."${config.syscfg.hostname}_ssh_priv".path } ''; }; }