{ pkgs, ... }:

{
  services.openssh.settings.PasswordAuthentication = false;

  # Use the extlinux boot loader. (NixOS wants to enable GRUB by default)
  boot.loader.grub.enable = false;
  # Enables the generation of /boot/extlinux/extlinux.conf
  boot.loader.generic-extlinux-compatible.enable = true;

  sops = {
    age.keyFile = "/home/asonix/.config/sops/age/keys.txt";
    age.generateKey = true;
  };
}