diff --git a/nixos/common.nix b/nixos/common.nix
index b4ae10c..71b40e8 100644
--- a/nixos/common.nix
+++ b/nixos/common.nix
@@ -104,6 +104,12 @@ in
     openssh = {
       enable = true;
       settings.ClientAliveInterval = 300;
+
+      settings = {
+        PasswordAuthentication = false;
+        KbdInteractiveAuthentication = false;
+        PermitRootLogin = "no";
+      };
     };
   };