{ config, lib, ... }:

let
  cfg = config.my.knownHosts;
in
{
  options.my.knownHosts = {
    mcfServer = lib.mkEnableOption "mcf-server SSH host key";
    richmondServer = lib.mkEnableOption "richmond-server SSH host key";
  };

  config = lib.mkMerge [
    (lib.mkIf cfg.mcfServer {
      services.openssh.knownHosts."mcf-server".publicKey =
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINOeOgD+GNQw5Isw/AumZcDFzdzO6YnKJEFWcuUcKPI2";
    })
    (lib.mkIf cfg.richmondServer {
      services.openssh.knownHosts."richmond-server".publicKey =
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEqDXL9w8QwUcqxtW3kyHW/LUDqCGqf6JQ3ZZw52vRQY";
    })
  ];
}