diff --git a/modules/ssh/default.nix b/modules/ssh/default.nix
index fd5bba7..8f8033a 100644
--- a/modules/ssh/default.nix
+++ b/modules/ssh/default.nix
@@ -1,6 +1,12 @@
 {fleetFlake, ...}: {
   services = {
-    sshd.enable = true;
+    openssh = {
+      enable = true;
+      settings = {
+        PasswordAuthentication = false;
+        PermitRootLogin = "prohibit-password";
+      };
+    };
 
     fail2ban = {
       enable = true;