nix/nixos/containers/mounts.nix

{
  "/etc/ssh" = {
    hostPath = "/etc/ssh";
    mountPoint = "/etc/ssh";
    isReadOnly = true;
  };
}