feat: initial

services/openssh.nix

@@ -0,0 +1,17 @@
+#{ config, pkgs, lib, ... }:
+let
+  ssh_data = import ../data/ssh.nix;
+in {
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = true;
+      PermitRootLogin = "no";
+      AllowUsers = ssh_data.ssh_users;
+    };
+  };
+
+  users.users = builtins.mapAttrs (username: value: {
+    openssh.authorizedKeys.keys = ssh_data.keys.${username};
+  }) ssh_data.keys;
+}