nix-fleet/modules/base/sshd/sshd.nix

{ ... }: {
  flake.nixosModules.sshd = { config, user, ... }: {
    services.openssh.enable = true;

    sops.secrets."users/${user}/intern/public" = {};

    users.users.${user}.openssh.authorizedKeys.keyFiles = [
      config.sops.secrets."users/${user}/intern/public".path
    ];
  };
}