{ ... }: {

    flake.nixosModules.openssh = { config, lib, ... }: {

        config = {

            services.openssh = {
                enable = true;
                openFirewall = lib.mkDefault true;
                settings = {
                    PermitRootLogin = lib.mkForce "no";
                    PasswordAuthentication = false;
                    KbdInteractiveAuthentication = false;
                };
            };
        };
    };
}