From 97ee50f052fbc43d0eafb487130d99ee1570a449 Mon Sep 17 00:00:00 2001
From: Alan Pearce
Date: Tue, 25 Feb 2025 20:34:20 +0100
Subject: ssh: make identitiesOnly the default

---
 private               | 2 +-
 user/settings/ssh.nix | 7 ++-----
 2 files changed, 3 insertions(+), 6 deletions(-)

diff --git a/private b/private
index 41fa979a..7b106e27 160000
--- a/private
+++ b/private
@@ -1 +1 @@
-Subproject commit 41fa979a2a1eabf917cf89428cfdc94c7252cde4
+Subproject commit 7b106e27d58e46bed2a4f627f1321592a0bedb2f
diff --git a/user/settings/ssh.nix b/user/settings/ssh.nix
index b7c46bba..ce3d1c61 100644
--- a/user/settings/ssh.nix
+++ b/user/settings/ssh.nix
@@ -1,8 +1,4 @@
-{ config
-, lib
-, pkgs
-, ...
-}: {
+{ ... }: {
   programs.ssh = {
     enable = true;
     compression = true;
@@ -16,6 +12,7 @@
       CanonicalizeFallbackLocal no
       CanonicalizeMaxDots 0
       CanonicalDomains home.arpa hydra-pinecone.ts.net
+      IdentitiesOnly yes
     '';
     includes = [
       "local.ssh_config"
-- 
cgit 1.4.1