_:
{
  services = {
    openssh = {
      enable = true;
      extraConfig = "
         Port 51337
         PermitRootLogin no
         PasswordAuthentication no
         MaxSessions 1
         MaxAuthTries 1
      ";
    };
  };
}