diff --git a/hosts/artemis/default.nix b/hosts/artemis/default.nix
index 5283ac7..edef1e9 100644
--- a/hosts/artemis/default.nix
+++ b/hosts/artemis/default.nix
@@ -5,6 +5,9 @@
   ...
 }:
 
+let
+  inherit (lib) mkForce;
+in
 {
   imports = [
     inputs.disko.nixosModules.disko
@@ -30,6 +33,8 @@
     networkmanager.enable = true;
   };
 
+  services.openssh.settings.PermitRootLogin = mkForce "prohibit-password";
+
   users = {
     users = {
       root = {