From b8971c288c137657230e4ee7d6503509d04c2ddf Mon Sep 17 00:00:00 2001
From: Ben Sima <bsima@groq.com>
Date: Wed, 9 Feb 2022 10:19:26 -0800
Subject: fix ssh: groq -> simatime

---
 lib/ssh.nix       |  8 --------
 profiles/groq.nix | 17 +++++++++++++++--
 2 files changed, 15 insertions(+), 10 deletions(-)

diff --git a/lib/ssh.nix b/lib/ssh.nix
index dce8f52..e491d46 100644
--- a/lib/ssh.nix
+++ b/lib/ssh.nix
@@ -6,14 +6,6 @@ in {
   programs.ssh = {
     enable = true;
     forwardAgent = true;
-    extraConfig = ''
-      #StrictHostKeyChecking=accept-new
-
-      # sft ssh-config
-      #Match exec "/usr/local/bin/sft resolve -q  %h"
-      #    ProxyCommand "/usr/local/bin/sft" proxycommand  %h
-      #    UserKnownHostsFile "/Users/bsima/Library/Application Support/ScaleFT/proxycommand_known_hosts"
-    '';
     matchBlocks = {
       "github.com" = {
         hostname = "github.com";
diff --git a/profiles/groq.nix b/profiles/groq.nix
index a12a5a2..757b47b 100644
--- a/profiles/groq.nix
+++ b/profiles/groq.nix
@@ -1,12 +1,25 @@
 { pkgs, lib, ... }:
 
-{
+let
+  homedir = builtins.getEnv "HOME";
+in {
   imports = [
     ../lib/common.nix
     ../lib/packages.nix
-    ../lib/ssh.nix
   ];
 
   programs.git.userEmail = lib.mkOverride 10 "bsima@groq.com";
   services.emacs.enable = true;
+
+  # i use a separate passphrase-protected key for getting my personal git repos
+  # onto my groq machine
+  programs.ssh = {
+    enable = true;
+    matchBlocks."simatime.com" = {
+      hostname = "simatime.com";
+      user = "git";
+      identityFile = [ "${homedir}/.ssh/git@simatime.com" ];
+      identitiesOnly = true;
+    };
+  };
 }
-- 
cgit v1.2.3