diff --git a/.config/git/ignore b/.config/git/ignore
index 6f3f95d..a35d943 100644
--- a/.config/git/ignore
+++ b/.config/git/ignore
@@ -1,8 +1,11 @@
 # vim: filetype=gitignore
 
-# Prevent leaking these directories
-.ssh/
+# Prevent leaking
 .dotfiles/
+# Recursively ignore
+.ssh/**
+# Unignore
+!.ssh/config
 
 # Prevent leaking .bash_history
 .bash_history
diff --git a/.ssh/config b/.ssh/config
new file mode 100644
index 0000000..7914ea3
--- /dev/null
+++ b/.ssh/config
@@ -0,0 +1,11 @@
+# vim: filetype=sshconfig
+
+GSSAPIAuthentication no
+HashKnownHosts yes
+HostbasedAuthentication no
+IdentitiesOnly yes
+KbdInteractiveAuthentication no
+PasswordAuthentication no
+StrictHostKeyChecking accept-new
+
+Include config.d/*