{
  lib,
  config,
  ...
}: let
  cfg = config.universe.services.openssh;
in {
  config = lib.mkIf cfg.enable {
    services.openssh = {
      enable = true;
      ports = cfg.ports;
      settings = {
        PasswordAuthentication = false;
      };
    };
  };
}