{ config, pkgs, ... }: let port = 2222; in { services.openssh = { enable = true; ports = [ port ]; }; networking.firewall.allowedTCPPorts = [ port ]; }