diff --git a/modules/ssh/default.nix b/modules/ssh/default.nix
new file mode 100644
index 00000000..b6e92e71
--- /dev/null
+++ b/modules/ssh/default.nix
@@ -0,0 +1,10 @@
+{ lib, ... }:
+
+{
+  imports = [ ./hardened-openssh.nix ];
+
+  config.services.openssh = {
+    enable = lib.mkDefault true;
+    harden = lib.mkDefault true;
+  };
+}