---
ssh:
  enabled: true
  pkgs:
    - 'openssh-server'
  config:
    LoginGraceTime: 60
    PermitRootLogin: 'no'
    MaxAuthTries: 3
    AddressFamily: any
    PasswordAuthentication: 'no'
    VersionAddendum: none
    Subsystem: sftp /usr/lib/openssh/sftp-server
    AllowGroups: root
    X11Forwarding: 'yes'