scb8970.nix: disable firewall, tweak ssh