{ config, pkgs, ... }: {
  # Disable strict host key checking for 192.168.1.210
  # The key will change between boot and live for LUKS unlocking
  home.file.".ssh/config".text = ''
  Host 192.168.1.210
    StrictHostKeyChecking no
  Host
    Hostname framework-server
    StreamLocalBindUnlink yes
    RemoteForward /run/user/1000/gnupg/S.gpg-agent /run/user/1000/gnupg/S.gpg-agent.extra
  '';
}