config/profiles/tmate-server/default.nix

{ config, ... }:
{
  services.tmate-ssh-server = {
    enable         = true;
    host           = config.networking.fqdn;
    port           = 42244;
    openFirewall   = true;
  };
}