{ config, lib, pkgs, ... }:

{
  networking.firewall = {
    enable = true;
	interfaces.wg0.allowedTCPPorts = [ 22 ];
  };
  services.openssh = {
    enable = true;
	settings = {
      PermitRootLogin = "prohibit-password";
	  PasswordAuthentication = false;
	  KbdInteractiveAuthentication = false;
	};
	listenAddresses = [{
      addr = "0.0.0.0";
	  port = 22;
	}];
  };

  users.users.lilac.openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKhCH6YN63AWFsR1wZ6wJdZ2jlTtYBSkY5FnLrWoLKeg"
  ];

  users.users.root.openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKhCH6YN63AWFsR1wZ6wJdZ2jlTtYBSkY5FnLrWoLKeg"
  ];
}