# ~/.ssh/config on every host, linked there by link/ssh.sh.
#
# It configures no hosts of its own. It only fixes the order the pieces are read
# in, which matters because ssh keeps the FIRST value it obtains for a keyword:
#
#   1. ~/.config/ssh/config-fleet  Host blocks another layer links in, shared by
#                                  a set of machines. First, so host-key pinning
#                                  there cannot be undone by anything read after
#                                  it.
#   2. ~/.config/ssh/enabled.d/    Configs from this repo that a host opted in
#                                  to, as links: bin/yubikey-git enable puts
#                                  one here.
#   3. ~/.config/ssh/config-local  This host only; not in any repo, never
#                                  synced. See config/ssh/config-local-example.
#   4. Shared defaults, below      Last, so any of the above can override them.
#
# Every include is optional: ssh skips an Include that matches no file, so on a
# machine with none of them this file configures nothing at all. No key is named
# anywhere; ssh's default ~/.ssh/id_ed25519 is whatever that machine installs.

Include ~/.config/ssh/config-fleet
Include ~/.config/ssh/enabled.d/*.conf
Include ~/.config/ssh/config-local

# Shared defaults for every host go here, under `Host *`. There are none yet.