{ config, lib, pkgs, ... }:

{
  imports = [
    ../secrets/keys
  ];
  # Initial empty root password for easy login:
  users.users.root.initialHashedPassword = "";
  services.openssh.settings.PermitRootLogin = "prohibit-password";

  services.openssh.enable = true;

  nix.gc = {
    automatic = true;
    options = "--delete-older-than 5d";
  };

  environment.systemPackages = [ pkgs.ssh-to-age ];

  nix.settings.experimental-features = [ "nix-command" "flakes" ];

  system.stateVersion = "22.05";
}