diff --git a/nixos/modules/ssh.nix b/nixos/modules/ssh.nix
index 4b723d6..64e7c26 100644
--- a/nixos/modules/ssh.nix
+++ b/nixos/modules/ssh.nix
@@ -1,6 +1,9 @@
-{ config, ... }:
+{ config, lib, ... }:
 {
-  services.openssh.enable = true;
+  services.openssh = {
+    enable = true;
+    passwordAuthentication = lib.mkDefault false;
+  };
 
   # WARNING: if you remove this, then you need to assign a password to your user, otherwise
   # `sudo` won't work. You can do that either by using `passwd` after the first rebuild or