machine_setup/nix/configuration/roles/ssh/default.nix

{
  config,
  lib,
  pkgs,
  ...
}:

{
  imports = [ ];

  environment.systemPackages = with pkgs; [
    sshfs
  ];

  environment.persistence."/persist" = lib.mkIf (!config.me.buildingIso) {
    hideMounts = true;
    users.talexander = {
      files = [
        ".ssh/known_hosts"
      ];
    };
  };
}