{ config, ... }:
{
  programs.ssh.enable = true;

  # ~/.ssh/id_rsa 来自 sops secret 文件。
  home.file.".ssh/id_rsa".source =
    config.lib.file.mkOutOfStoreSymlink "/run/secrets/users/luochen570/ssh_private_key";

  # ~/.ssh/config 来自 sops secret 文件。
  home.file.".ssh/config".source =
    config.lib.file.mkOutOfStoreSymlink "/run/secrets/users/luochen570/ssh_config";
}