diff --git a/nixos/base.nix b/nixos/base.nix
index 063c9f0..ca31bbe 100644
--- a/nixos/base.nix
+++ b/nixos/base.nix
@@ -115,6 +115,7 @@
     isNormalUser = true;
     extraGroups = [ "audio" "input" "docker" "flashrom" "libvirtd" "network" "usb" "video" "wheel" ];
     shell = pkgs.zsh;
+    openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN+zsSWZFFzQKnATCAvtG+iuSm4qkZHjCtHzGa9B/71W" ];
   };
 
   # List packages installed in system profile. To search, run:
@@ -134,7 +135,7 @@
   # List services that you want to enable:
 
   # Enable the OpenSSH daemon.
-  services.openssh = { enable = true; openFirewall = true; };
+  services.openssh = { enable = true; openFirewall = true; permitRootLogin = "no"; passwordAuthentication = false; };
 
   # Cooling management
   services.thermald.enable = true;