sombrero: Add ssh module

hosts/sombrero/configuration.nix

@@ -70,20 +70,9 @@
         };
       };
     };
-
-    firewall = {
-      allowedTCPPorts = [
-        1122  # ssh
-      ];
-    };
   };
 
   services = {
-    openssh = {
-      enable = true;
-      ports = [ 1122 ];
-    };
-
     transmission = {
       enable = true;
       openFirewall = true;
@@ -169,6 +158,7 @@
   };
 
   mod = {
+    ssh.enable = true;
     docker.enable = true;
     nginx.enable = true;
     syncthing.enable = true;

hosts/sombrero/modules/ssh/default.nix

@@ -0,0 +1,26 @@
+{ lib, config, ... }:
+let
+  enabled = config.mod.ssh.enable;
+in
+{
+  options = {
+    mod.ssh = {
+      enable = lib.mkEnableOption "enable ssh module";
+    };
+  };
+
+  config = lib.mkIf enabled {
+    services = {
+      openssh = {
+        enable = true;
+        ports = [ 1122 ];
+      };
+    };
+
+    networking = {
+      firewall = {
+        allowedTCPPorts = [ 1122 ];
+      };
+    };
+  };
+}