nix-config/modules/openssh/settings.nix

{ lib, ... }:

{
  flake.modules.nixos.pc.services.openssh.settings = {
    PasswordAuthentication = false;
    PermitRootLogin = lib.mkForce "no";
  };
}