diff --git a/os-mods/common/default.nix b/os-mods/common/default.nix
index 1a0d3be..1014c3f 100644
--- a/os-mods/common/default.nix
+++ b/os-mods/common/default.nix
@@ -75,7 +75,11 @@
 
     envfs.enable = true;
 
-    openssh.enable = true;
+    openssh = {
+      enable = true;
+      settings.PasswordAuthentication = false;
+      settings.KbdInteractiveAuthentication = false;
+    };
 
     gvfs.enable = true;
     avahi.enable = true;