{ config, pkgs, ... }: { security.sudo.wheelNeedsPassword = true; services = { openssh = { enable = true; permitRootLogin = "no"; passwordAuthentication = false; }; # end openssh }; # end services environment = { systemPackages = with pkgs; [ devenv direnv ]; # end systemPackages }; # end environment } # end file