init commit so flakes work

.modules/services/openssh.nix

@@ -0,0 +1,17 @@
+_: { config, pkgs, lib, ... }:
+
+{
+    services.openssh = lib.mkDefault{
+        enable = true;
+        openFirewall = true;
+        startWhenNeeded = true;
+        kexAlgorithms = [ "curve25519-sha256@libssh.org" ];
+        passwordAuthentication = false;
+        kbdInteractiveAuthentication = false;
+        permitRootLogin = "no";
+    };
+    security.pam = mkDefault{
+        enableSSHAgentAuth = true;
+        services.sudo.sshAgentAuth = true;
+    };
+}