nixconfig/modules/nixos/system/security/ssh/default.nix

{ config, ... }: {
  programs.ssh = {
    extraConfig = ''
      IdentityFile ${
        config.sops.secrets."${config.hostcfg.hostname}_ssh_priv".path
      }
    '';
  };
}