{ ... }:
{
programs.mosh.enable = true;
services.openssh = {
enable = true;
settings.PermitRootLogin = "no";
settings.PasswordAuthentication = false;
};
networking.firewall.allowedTCPPorts = [ 22 ];
}