{ config, lib, pkgs, ... }:

let
  sshKeys = import ../ssh_keys.nix;
in
{
  services.openssh.enable = true;
  services.openssh.ports = [ 22 ];
  services.openssh.settings.PasswordAuthentication = false;
  services.openssh.settings.PermitRootLogin = "no";
  users.users.root.openssh.authorizedKeys.keys = sshKeys.admins;
}