{
services.openssh.enable = true;
services.openssh.settings.X11Forwarding = true;
services.openssh.settings.PasswordAuthentication = false;
services.fail2ban.enable = true;
}