From c70effa7923840bd437fdd4ab7361c7e5419fbb7 Mon Sep 17 00:00:00 2001
From: Hektor Misplon <hektor.misplon@pm.me>
Date: Wed, 11 Mar 2026 14:49:18 +0100
Subject: [PATCH] feat(ssh): add default module with enable+harden

---
 modules/ssh/default.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 modules/ssh/default.nix

diff --git a/modules/ssh/default.nix b/modules/ssh/default.nix
new file mode 100644
index 00000000..b6e92e71
--- /dev/null
+++ b/modules/ssh/default.nix
@@ -0,0 +1,10 @@
+{ lib, ... }:
+
+{
+  imports = [ ./hardened-openssh.nix ];
+
+  config.services.openssh = {
+    enable = lib.mkDefault true;
+    harden = lib.mkDefault true;
+  };
+}