From 84da9ed8f52b1d292cdfc37067bff0bff29e5115 Mon Sep 17 00:00:00 2001
From: DannyDannyDanny <dth@taiga.ai>
Date: Sun, 19 Apr 2026 21:07:02 +0200
Subject: [PATCH] =?UTF-8?q?feat(ssh):=20add=20zerotier=20host=20aliases=20?=
 =?UTF-8?q?on=20mac=20=F0=9F=95=B8=EF=B8=8F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Home-manager now writes a drop-in at ~/.ssh/config.d/zerotier with
sunken-ship-zt and phantom-ship-zt aliases pointing at the ZT IPv6
addresses. Useful when off the LAN — the aliases route over the
ZeroTier mesh. Requires a one-time \`Include ~/.ssh/config.d/*\` at
the top of ~/.ssh/config.
---
 nixos/home/danny/home.nix | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/nixos/home/danny/home.nix b/nixos/home/danny/home.nix
index d3f346d..7a05998 100644
--- a/nixos/home/danny/home.nix
+++ b/nixos/home/danny/home.nix
@@ -9,6 +9,23 @@
   # Import neovim configuration
   imports = [ ../../neovim.nix ];
 
+  # ZeroTier SSH aliases — managed drop-in under ~/.ssh/config.d/.
+  # For this to take effect, your ~/.ssh/config must include:
+  #   Include ~/.ssh/config.d/*
+  # near the top (before any host-specific blocks).
+  home.file.".ssh/config.d/zerotier".text = ''
+    Host sunken-ship-zt
+      HostName fdd5:53a2:de33:d269:6499:93d5:53a2:de33
+      User danny
+      IdentityFile ~/.ssh/id_ed25519_sunken_ship
+      IdentitiesOnly yes
+
+    Host phantom-ship-zt
+      HostName fdd5:53a2:de33:d269:6499:936c:48a:bbdc
+      User danny
+      IdentitiesOnly yes
+  '';
+
   # tmux (user-level; same config on macOS and NixOS if you reuse this file)
   programs.tmux = {
     enable = true;