{ ... }: { services.openssh = { enable = true; settings = { PermitRootLogin = "yes"; # TODO: Allow root login from certain hosts. # Then dissallow rest. PasswordAuthentication = true; }; }; }