build please?

system/services/openssh/default.nix

@@ -0,0 +1,21 @@
+{ config, lib, ... }: {
+
+    options = {
+        sysconfig.opts.openssh.enable = lib.options.mkOption {
+            type = lib.types.bool;
+            default = false;
+        };
+    };
+
+    config = lib.mkIf config.sysconfig.opts.openssh.enable {
+        
+        services.openssh = {
+            enable = true;
+            settings = {
+                PermitRootLogin = "no";
+                PasswordAuthentication = false;
+                KbdInteractiveAuthentication = false;
+            };
+        };
+    };
+}