{ config, lib, pkgs, ... }:

{
  services.openssh.enable = true;
  services.openssh.permitRootLogin = "no";
}