so I added in one: 
```
services.openssh.extraConfig =
''
Match Address 159.69.72.164
AllowUsers sozu
PasswordAuthentication yes
PubKeyAuthentication no
'';
```