1{den, ...}: {
 2  den.default.includes = [
 3    den.aspects.core._.ssh
 4  ];
 5  den.aspects.core.provides.ssh = {host, ...}: {
 6    nixos = {
 7      services.openssh = {
 8        enable = host.deployable;
 9        ports = host.sshPorts;
10        settings = {
11          PermitRootLogin = "prohibit-password";
12          PasswordAuthentication = false;
13        };
14        openFirewall = true;
15        hostKeys = [
16          {
17            path = "/etc/ssh/ssh_host_ed25519_key";
18            type = "ed25519";
19          }
20        ];
21      };
22      environment.enableAllTerminfo = true;
23    };
24  };
25}