diff --git a/hosts/syedm/default.nix b/hosts/syedm/default.nix
index 5c3d76e..3e7a883 100644
--- a/hosts/syedm/default.nix
+++ b/hosts/syedm/default.nix
@@ -12,7 +12,13 @@
 
   networking.hostName = "syedm";
 
-  services.openssh.enable = true;
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = false;
+      PermitRootLogin = "no";
+    };
+  };
 
   services.caddy = {
     enable = true;