{ config, pkgs, lib, ... }:

{
  # For rage encryption, all hosts need a ssh key pair
  services.openssh = {
    enable = true;
    openFirewall = lib.mkDefault true;
    passwordAuthentication = false;
  };

  # Service that makes Out of Memory Killer more effective
  services.earlyoom.enable = true;
}