diff --git a/.gitignore b/.gitignore
index 7c28fef..3c831ff 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,8 +26,11 @@ nvim.log
 
 # Ignore generated or downloaded tmux content.
 .config/tmux/**
-.config/tmux/current-theme.conf
 !.config/tmux/dragon-theme.conf
 !.config/tmux/wave-theme.conf
 !.config/tmux/tmux-cheatsheet.md
 !.config/tmux/tmux.conf
+
+# Track only the ssh client config — never keys or anything else.
+.ssh/*
+!.ssh/config
diff --git a/.ssh/config b/.ssh/config
new file mode 100644
index 0000000..8b0abbf
--- /dev/null
+++ b/.ssh/config
@@ -0,0 +1,11 @@
+Host caddy
+  HostName 10.0.15.5
+  User brian
+  IdentityFile ~/.ssh/id_ed25519
+  IdentitiesOnly yes
+
+Host technitium
+  HostName 10.0.10.5
+  User brian
+  IdentityFile ~/.ssh/id_ed25519
+  IdentitiesOnly yes
diff --git a/install/lib/dotfiles.sh b/install/lib/dotfiles.sh
index e8d245c..aa0914e 100644
--- a/install/lib/dotfiles.sh
+++ b/install/lib/dotfiles.sh
@@ -11,6 +11,9 @@ link_dotfiles() {
   backup_and_link "$DOTFILES_DIR/.config/.ideavimrc" "$HOME/.ideavimrc"
   backup_and_link "$DOTFILES_DIR/.zshrc" "$HOME/.zshrc"
   backup_and_link "$DOTFILES_DIR/.gitconfig" "$HOME/.gitconfig"
+  mkdir -p "$HOME/.ssh"
+  chmod 700 "$HOME/.ssh"
+  backup_and_link "$DOTFILES_DIR/.ssh/config" "$HOME/.ssh/config"
   backup_and_link "$DOTFILES_DIR/bin/dotfiles-apply-theme" "$HOME/.local/bin/dotfiles-apply-theme"
 }