# global defaults
Host *
  AddKeysToAgent yes
  IdentitiesOnly yes
  ServerAliveInterval 30
  ServerAliveCountMax 3
  TCPKeepAlive yes
  StrictHostKeyChecking ask
  UpdateHostkeys yes
  HashKnownHosts yes
  IdentityAgent ${SSH_AUTH_SOCK}

# GitHub over SSH on port 443 with PQ KEX preference
Host github.com
  HostName ssh.github.com
  Port 443
  User git
  IdentityFile ~/.ssh/github
  PreferredAuthentications publickey
  KexAlgorithms sntrup761x25519-sha512@openssh.com,sntrup761x25519-sha512,curve25519-sha256

# GitLab over SSH on port 443
Host gitlab.com
  HostName gitlab.com
  Port 443
  User git
  IdentityFile ~/.ssh/gitlab
  PreferredAuthentications publickey
  KexAlgorithms sntrup761x25519-sha512@openssh.com,sntrup761x25519-sha512,curve25519-sha256
