nix-config/nixos/common/openssh.nix

{ lib, ... }:
with lib;
{
  services.openssh = {
    openFirewall = mkDefault true;
    settings.PasswordAuthentication = mkDefault false;
  };
}