1{ 2 services.fail2ban.enable = true; 3 services.openssh = { 4 enable = true; 5 settings.PasswordAuthentication = false; 6 }; 7}