nixos-config/modules/system/users/root/default.nix

{ ... }:
{
  # Allow root to be accessed via ssh
  users.users.root.openssh.authorizedKeys.keyFiles = [
    ../main/warden.pub
  ];
}