diff --git a/hosts/vps/modules/services/openssh.nix b/hosts/vps/modules/services/openssh.nix
index 8f0456f..feaa722 100644
--- a/hosts/vps/modules/services/openssh.nix
+++ b/hosts/vps/modules/services/openssh.nix
@@ -1,3 +1,9 @@
 {
-  services.openssh.enable = true;
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = false;
+      PermitRootLogin = "no";
+    };
+  };
 }