{
  config,
  pkgs,
  ...
}: let
  port = 2222;
in {
  services.openssh = {
    enable = true;
    ports = [port];
  };
  networking.firewall.allowedTCPPorts = [port];
}