{ config, pkgs, ... }: { services.openssh = { enable = true; ports = [ 1004 ]; settings = { AllowGroups = [ "remote" ]; PasswordAuthentication = false; }; }; }