{ ... }: {
  services.openssh.enable = true;
  services.openssh.permitRootLogin = "prohibit-password";
  programs.mosh.enable = true;
}