{
  ...
}:

{
  services.ssh-agent.enable = true;

  programs.ssh = {
    enable = true;
    matchBlocks."*".addKeysToAgent = "yes";
  };

  home.persistence."/state".files = [
    ".ssh/known_hosts"
  ];
}