From 7e38bf6880d65c64fe3c8fced02b14adba792db6 Mon Sep 17 00:00:00 2001
From: matijs <matijs@gmail.com>
Date: Tue, 18 Aug 2026 20:48:45 +0200
Subject: [PATCH] Update global git ignore

Change the `.ssh/` ignore pattern to recursively ignore anything under
`.ssh/**` but allow `.ssh/config`.

Add .ssh/config
---
 .config/git/ignore |  7 +++++--
 .ssh/config        | 11 +++++++++++
 2 files changed, 16 insertions(+), 2 deletions(-)
 create mode 100644 .ssh/config

diff --git a/.config/git/ignore b/.config/git/ignore
index 6f3f95d..a35d943 100644
--- a/.config/git/ignore
+++ b/.config/git/ignore
@@ -1,8 +1,11 @@
 # vim: filetype=gitignore
 
-# Prevent leaking these directories
-.ssh/
+# Prevent leaking
 .dotfiles/
+# Recursively ignore
+.ssh/**
+# Unignore
+!.ssh/config
 
 # Prevent leaking .bash_history
 .bash_history
diff --git a/.ssh/config b/.ssh/config
new file mode 100644
index 0000000..7914ea3
--- /dev/null
+++ b/.ssh/config
@@ -0,0 +1,11 @@
+# vim: filetype=sshconfig
+
+GSSAPIAuthentication no
+HashKnownHosts yes
+HostbasedAuthentication no
+IdentitiesOnly yes
+KbdInteractiveAuthentication no
+PasswordAuthentication no
+StrictHostKeyChecking accept-new
+
+Include config.d/*