infrastructure/machines/web-01/ssh.nix

{ ... }:
{
  services.openssh = {
    passwordAuthentication = false;
    enable = true;
  };
  programs.mosh.enable = true;
}