{ config, pkgs, ... }:

{
  services.openssh.enable = true;

  services.openssh.settings = {
    PasswordAuthentication = true;
    PermitRootLogin = "no";
  };

  networking.firewall.allowedTCPPorts = [ 22 ];
}