{
  config,
  lib,
  pkgs,
  ...
}:
with lib; let
  cfg = config.nixfiles.modules.endlessh;
in {
  options.nixfiles.modules.endlessh.enable = mkEnableOption "endlessh";

  config = let
    port = 22;
  in
    mkIf cfg.enable {
      services.endlessh = {
        enable = true;
        inherit port;
        extraOptions = ["-v" "-4"];
      };

      networking.firewall.allowedTCPPorts = [port];
    };
}