{ config, pkgs, ... }: {
  # Disable strict host key checking for 192.168.1.210
  # The key will change between boot and live for LUKS unlocking
  home.file.".ssh/config".text = ''
  Host 192.168.1.210
    StrictHostKeyChecking no
  Host nixos-vm-01
    IdentifyFile ~/.ssh/id_rsa
    ForwardAgent yes
  '';
}