{
  config,
  lib,
  options,
  ...
}:
{
  config = {
    programs.ssh = {
      enable = true;
      enableDefaultConfig = false;
      matchBlocks = {
        abc = {
          port = 2222;
        };

        xyz = {
          match = "host xyz canonical";
          port = 2223;
        };

        "* !github.com" = {
          port = 516;
        };
      };
    };

    home.file.assertions.text = builtins.toJSON (
      map (a: a.message) (lib.filter (a: !a.assertion) config.assertions)
    );

    test.asserts.warnings.expected = [
      ''
        `programs.ssh.matchBlocks` defined in ${lib.showFiles options.programs.ssh.matchBlocks.files} is deprecated. Use `programs.ssh.settings`.
      ''
    ];

    nmt.script = ''
      assertFileExists home-files/.ssh/config
      assertFileContent \
        home-files/.ssh/config \
        ${./match-blocks-match-and-hosts-expected.conf}
      assertFileContent home-files/assertions ${./no-assertions.json}
    '';
  };
}
