diff --git a/.bauke/nix/azedia/programs-services.nix b/.bauke/nix/azedia/programs-services.nix
index 4f6d8f0..06289b3 100644
--- a/.bauke/nix/azedia/programs-services.nix
+++ b/.bauke/nix/azedia/programs-services.nix
@@ -18,6 +18,12 @@
       };
     };
 
-    openssh.enable = true;
+    openssh = {
+      enable = true;
+      settings = {
+        PasswordAuthentication = false;
+        PermitRootLogin = "no";
+      };
+    };
   };
 }