nixos-config/lib/gen-ssh-config.nix

lib:
nixosConfigurations:

let
  sshKnownHostsTxt = builtins.toFile "known_hosts" (lib.concatMapStrings
    (hostName:
      let d = nixosConfigurations.${hostName}.config.deploy;
      in lib.concatMapStrings (key: "${d.ssh.HostName} ${key}\n") d.sshPublicKeys
    )
    (builtins.attrNames nixosConfigurations)
  );

  attrsToList = lib.mapAttrsToList (n: v: "${n} ${v}");
  attrsToLines = a: lib.concatLines (attrsToList a);

in
builtins.toFile "ssh-config" (''
  StrictHostKeyChecking yes
  GlobalKnownHostsFile ${sshKnownHostsTxt}
'' +
lib.concatMapStrings
  (host: ''
    Host ${host}
    ${attrsToLines nixosConfigurations.${host}.config.deploy.ssh}
  '')
  (builtins.attrNames nixosConfigurations))