diff --git a/roles/user/ssh/files/ssh_config b/roles/user/ssh/files/ssh_config
index d13d6fb..37e1eb6 100644
--- a/roles/user/ssh/files/ssh_config
+++ b/roles/user/ssh/files/ssh_config
@@ -1,9 +1,9 @@
-# Allow authentication via Kerberos
-GSSAPIAuthentication no
-
 # By default use the FIDO2 key from Yubikey
 IdentityFile ~/.ssh/id_ed25519_sk
 
+# Deny authentication via Kerberos by default
+GSSAPIAuthentication no
+
 # PIV secrets, disabled by default
 PKCS11Provider none
 # PKCS11Provider libykcs11.so.2
@@ -36,23 +36,33 @@ Host nymfe*
     ProxyJump               xfocko@aisa.fi.muni.cz
     Hostname                %h.fi.muni.cz
 
-# Private
-Host maxwell
-    User        mfocko
-    Hostname    maxwell.mfocko.xyz
-    Port        6969
+# FIT
+Host merlin
+    User        xfockom00
+    Hostname    merlin.fit.vutbr.cz
 
+# Private
 Host poincare
     User        mfocko
     Hostname    mfocko.xyz
-    Port        10022
+    Port        22022
 
 Host git.mfocko.xyz
     User        git
     Hostname    git.mfocko.xyz
     Port        2222
 
+Host gitlab.mfocko.xyz
+    User        git
+    Hostname    gitlab.mfocko.xyz
+    Port        10023
+
+Host maxwell
+    User        mfocko
+    Hostname    maxwell.mfocko.xyz
+    Port        22022
+
 Host git.maxwell.mfocko.xyz
     User        git
     Hostname    git.maxwell.mfocko.xyz
-    Port        6969
+    Port        22022