# configuration shared between desktop and server roles
{ ... }:
{
  services.openssh = {
    enable = true;
    settings = {
      AcceptEnv = [
        "LANG"
        "LC_*"
        "TERM_PROGRAM"
      ];
    };
  };

  security.pam = {
    sshAgentAuth.enable = true;
    services.sudo.sshAgentAuth = true;
  };
}