{ config, pkgs, inputs, ... }: { services.openssh = { enable = true; # permitRootLogin = "no"; }; }