{
  config,
  lib,
  pkgs,
  ...
}:
let
  socket = "${config.home.homeDirectory}/Library/Containers/com.maxgoedjen.Secretive.SecretAgent/Data/socket.ssh";
in
{
  home.sessionVariables.SSH_AUTH_SOCK = socket;
  programs.ssh = {
    enable = true;
    matchBlocks = {
      # use the keychain on macOS
      "*".extraOptions = lib.mkIf pkgs.stdenv.isDarwin {
        UseKeychain = "yes";
        AddKeysToAgent = "yes";
        IdentityAgent = socket;
      };
      # entry for easy access to reMarkable tablet
      remarkable = {
        hostname = "10.11.99.1";
        user = "root";
      };
    };
  };
}