diff --git a/configuration.nix b/configuration.nix
index 40dcf40..6be9cf7 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -48,7 +48,11 @@
   };
   services.openssh = {
     enable = true;
-    settings.PermitRootLogin = "yes";
+    settings = {
+      PermitRootLogin = "yes";
+      PasswordAuthentication = false;
+      KbdInteractiveAuthentication = false;
+    };
   };