{ ... }:
{
  imports = [
    ../modules/core
    ../modules/server
  ];

  # LXC 容器需要密码登录（s0.sermc.net，无 SSH key 注入）
  services.openssh.settings = {
    PermitRootLogin = "prohibit-password";
    PasswordAuthentication = true;
    KbdInteractiveAuthentication = true;
  };
}