{config, ...}: let inherit (builtins) readFile; inherit (config.users.users) user; in { nix.settings.trusted-users = ["nix-ssh"]; nix.sshServe = { enable = true; write = true; keys = map (f: readFile f) user.openssh.authorizedKeys.keyFiles; }; }