{ services.openssh = { enable = true; ports = []; openFirewall = false; settings = { PermitRootLogin = "no"; PasswordAuthentication = false; }; }; }