diff --git a/hosts/binto/configuration.nix b/hosts/binto/configuration.nix
index 11100efe..d4b9089b 100644
--- a/hosts/binto/configuration.nix
+++ b/hosts/binto/configuration.nix
@@ -48,7 +48,13 @@
   };
 
   # Enable the OpenSSH daemon.
-  services.openssh.enable = true;
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = false;
+      PermitRootLogin = "no";
+    };
+  };
 
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions