diff --git a/hosts/vps1/default.nix b/hosts/vps1/default.nix
index 5396f42..dc71a98 100644
--- a/hosts/vps1/default.nix
+++ b/hosts/vps1/default.nix
@@ -38,6 +38,8 @@
     };
   };
 
+  services.openssh.settings.PermitRootLogin = lib.mkForce "prohibit-password";
+
   security.acme.defaults = {
     email = "hostmaster@vimium.com";
     group = "nginx";