diff --git a/services/sshd.nix b/services/sshd.nix
index 658b492..0b35588 100644
--- a/services/sshd.nix
+++ b/services/sshd.nix
@@ -2,4 +2,6 @@
 
 {
   services.openssh.enable = true;
+  services.openssh.passwordAuthentication = false;
+  services.openssh.permitRootLogin = "no";
 }