{ ... }: { services.openssh = { enable = true; settings = { PasswordAuthentication = false; }; }; }