{ pkgs, config, ... }: { config.programs.ssh.package = pkgs.openssh_gssapi; config.services.openssh.enable = true; config.networking.firewall.allowedTCPPorts = [ 22 ]; }