diff --git a/devices/oksys/default.nix b/devices/oksys/default.nix
index 03a3ad7..49e2d61 100644
--- a/devices/oksys/default.nix
+++ b/devices/oksys/default.nix
@@ -40,6 +40,16 @@
     firewall.enable = false;
   };
 
+  services = {
+    openssh = {
+      enable = true;
+      settings = {
+        PasswordAuthentication = false;
+        PermitRootLogin = "no";
+      };
+    };
+  };
+
   # Set your time zone.
   time.timeZone = "America/Montreal";