nix-config/laptop/modules/ssh.nix

{
      services.openssh = {
        enable = true;
        ports = [];
        openFirewall = false;
        settings = {
            PermitRootLogin = "no";
            PasswordAuthentication = false;
        };
      };
}