{ # Enable the OpenSSH daemon. services.openssh.enable = true; # Enable fail2ban to make ssh more secure services.fail2ban.enable = true; }