nixos-config/system/all/sshd.nix

{ config, pkgs, lib, ... }:

with lib;

{

  # not needed anymore
  # programs.ssh.hostKeyAlgorithms = [ "ssh-rsa" "ssh-ed25519" "ecdsa-sha2-nistp256" ];

  services.custom.ssh = {
    tools.enable = true;
    sshd = {
      enable = true;
      rootKeyFiles = [ (toString <assets/ssh/card_rsa.pub>) ];
    };
  };

}