{ lib, config, pkgs, ... }: { services.openssh = { enable = true; ports = [55555]; settings = { X11Forwarding = false; PermitRootLogin = "no"; PasswordAuthentication = false; }; }; }