{config, ...}: { #programs.ssh = { # startAgent = true; # agentPKCS11Whitelist = "${config.security.tpm2.pkcs11.package}/lib/*,/run/current-system/sw/lib/*"; #}; services.openssh = { enable = true; settings.PasswordAuthentication = true; }; }