diff --git a/hosts/server/openssh.nix b/hosts/server/openssh.nix
index 0fbd68f..9693a42 100644
--- a/hosts/server/openssh.nix
+++ b/hosts/server/openssh.nix
@@ -2,7 +2,8 @@
   services.openssh = {
     enable = true;
     permitRootLogin = "no";
-    passwordAuthentication = true;
+    passwordAuthentication = false;
+    settings.KbdInteractiveAuthentication = false;
     ports = [ 22 ];
     banner = ''
       HEAVEN: