nix-conf/modules/system/ssh/default.nix

{ options, config, pkgs, lib, ... }:

with lib;
#with lib.internal;
let cfg = config.custom.system.ssh;
in
{
  options.custom.system.ssh = with types; {
    enable = mkBoolOpt false "Whether or not to enable ssh.";
  };

  config = mkIf cfg.enable {
    services.openssh.enable = true;
    services.openssh.settings.X11forwarding = true;
    services.openssh.settings.PermitRootLogin = "yes";
  };
}