flake-parts: Almost done with yggdrasil

modules/server/ssh.nix

@@ -0,0 +1,17 @@
+{
+  flake.modules.nixos.server =
+    { ... }:
+    {
+      services.openssh = {
+        enable = true;
+        settings = {
+          PasswordAuthentication = false;
+          KbdInteractiveAuthentication = false;
+        };
+      };
+
+      services.fail2ban = {
+        enable = true;
+      };
+    };
+}