{ config, lib, pkgs, ... }: { # enable and configure openssh services.openssh = { enable = true; settings = { PasswordAuthentication = true; PermitRootLogin = "no"; X11Forwarding = false; }; }; }