{
  services.openssh = {
    enable = true;
    openFirewall = true;
    # permitRootLogin = "prohibit-password";
    passwordAuthentication = false;
  };
  users.users.root = {
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN+zsSWZFFzQKnATCAvtG+iuSm4qkZHjCtHzGa9B/71W"
    ];
  };
}