os/modules/server/default.nix

{
  lib,
  config,
  pkgs,
  ...
}:
with lib; let
  psCfg = config.pub-solar;
  cfg = config.pub-solar.server;
in {
  options.pub-solar.server = {
    enable = mkEnableOption "Enable server options like sshd";
  };

  config = mkIf cfg.enable {
    pub-solar.core.lite = true;

    services.openssh = {
      enable = true;
      permitRootLogin = lib.mkForce "prohibit-password";
      passwordAuthentication = true;
      openFirewall = true;
    };

    networking.networkmanager.enable = lib.mkForce false;
    pub-solar.nextcloud.enable = lib.mkForce false;
  };
}