config/profiles/services/tmate-server.nix

{ config, ... }:
{
  services.tmate-ssh-server = {
    enable         = true;
    host           = config.networking.fqdn;
    port           = 42244;
    openFirewall   = true;
  };
}