system: Enable ssh for all systems

hosts/phone/configuration.nix

@@ -239,8 +239,6 @@ in
       };
     };
 
-    openssh.enable = true;
-
     udisks2.enable = mkForce false;
     pipewire.enable = mkForce false;
     greetd.enable = mkForce false;

modules/system.nix

@@ -265,6 +265,14 @@ in
         ensureUsers = singleton { name = username; };
         ensureDatabases = [ username ];
       };
+
+      openssh = {
+        enable = true;
+
+        settings = {
+          PasswordAuthentication = false;
+        };
+      };
     };
 
     environment = {