diff --git a/work-pc.nix b/work-pc.nix
index 2e2b909..081dee4 100644
--- a/work-pc.nix
+++ b/work-pc.nix
@@ -29,6 +29,13 @@
 
   programs.zsh.enable = true;
 
+  services.openssh = {
+    enable = true;
+    kbdInteractiveAuthentication = false;
+    passwordAuthentication = false;
+    permitRootLogin = "no";
+  };
+
   services.printing.drivers = with pkgs; [ epson-escpr ];
 
   # only change this when specified in release notes