# Ensure KnownHosts are unreadable if leaked
HashKnownHosts yes

Compression no
ControlMaster auto
ControlPersist 10
AddressFamily inet
ServerAliveInterval 120

Match host * exec "gpg-connect-agent UPDATESTARTUPTTY /bye"

IdentityFile ~/.ssh/nym.pub
IdentitiesOnly yes

Include work.config

Host git.sommerfeld.dev
  Hostname mandibles.wg